
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/460bf67f-8df0-4d61-9ca9-0da89513f100.roa
File: 460bf67f-8df0-4d61-9ca9-0da89513f100.roa (raw, json)
Hash identifier: dDCmAUQAKF2X2DilS1hDL0IsYum1wSrhuMKCxA1H6E8=
Subject key identifier: CA:37:34:83:0C:79:BC:E4:87:32:49:28:D8:61:E2:42:41:9F:49:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 246764FE4DF71368BAD520D2DA1658A3ABDEC2A3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/460bf67f-8df0-4d61-9ca9-0da89513f100.roa
Signing time: Mon 10 Aug 2026 00:40:06 +0000
ROA not before: Mon 10 Aug 2026 00:40:06 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:880::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:67:64:fe:4d:f7:13:68:ba:d5:20:d2:da:16:58:a3:ab:de:c2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:40:06 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=d7dd111d85ddb8018e9dbabdd2004a0d7fd2bede4b35e37f3b982acd4c1993cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:20:2c:39:a2:51:d1:37:e8:b2:06:a7:1c:
88:73:fb:1f:6d:7b:7b:9c:06:14:3c:c2:ff:08:31:
e7:04:a5:3b:77:69:59:dc:85:6a:16:35:a3:d0:bc:
4b:b1:8c:f5:c3:9c:fb:7f:a5:9c:1e:90:c2:79:a5:
62:b0:19:ad:30:3c:d2:36:7c:53:47:f3:e0:8b:09:
48:7a:f2:f8:b8:da:77:56:0f:ea:98:b3:35:8b:e9:
39:52:3a:0e:0a:ac:5e:ef:5e:31:b0:9e:9d:91:6e:
61:d3:22:6e:44:d0:0e:02:cc:c6:99:a7:37:ab:71:
c0:60:0f:66:86:39:5a:a5:35:72:c5:af:6f:d5:bc:
c8:d0:d6:2a:22:ad:92:d1:92:99:9e:28:af:7a:31:
09:8e:3e:b0:5b:ff:a3:5e:88:a5:f6:69:96:8a:81:
d8:89:53:9f:f5:58:bb:b5:a2:f5:68:31:13:af:bd:
d1:04:5e:76:91:c4:f8:b3:7b:b1:ad:6a:3f:ec:99:
c4:5c:91:98:93:8e:73:5b:1f:36:9d:f0:e8:1a:f1:
a6:07:d8:5f:7d:e6:fe:e9:af:00:92:11:a4:2c:4b:
14:12:4a:93:80:fa:1f:af:5d:42:d6:8e:61:f1:48:
47:e8:b4:5f:4f:93:f8:0e:ca:03:e0:07:26:0c:1b:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:37:34:83:0C:79:BC:E4:87:32:49:28:D8:61:E2:42:41:9F:49:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/460bf67f-8df0-4d61-9ca9-0da89513f100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:880::/48
Signature Algorithm: sha256WithRSAEncryption
2a:ee:46:26:9b:91:fe:ca:84:8b:4d:f7:4c:40:71:06:45:a2:
c9:24:f8:53:ab:3b:2c:30:1f:f5:7a:54:1a:7c:f5:36:91:a9:
cd:94:76:d5:ce:86:c0:ff:ed:7d:44:a6:32:b1:cb:1e:34:94:
c6:48:d0:e0:c3:6d:11:ee:2f:fe:48:39:1c:aa:0a:da:93:6e:
77:04:e8:fc:e0:72:b9:92:73:2b:f6:b6:98:f4:69:c3:05:7f:
e2:0e:42:a3:b1:b4:43:1f:82:ae:32:dc:91:f9:48:89:70:60:
3d:48:6f:e6:b0:58:bb:03:5b:d4:88:b7:3a:e0:a6:ac:f0:fe:
0b:47:fc:06:df:e9:6c:4f:da:24:4f:39:19:5d:bd:3b:79:8d:
f0:21:8f:94:69:bd:17:e9:98:18:60:07:f5:e6:80:78:48:d9:
71:6f:17:61:9c:9e:01:8b:cb:1f:66:53:bc:36:c0:90:29:4d:
4e:f1:6f:e1:f7:4d:aa:d2:f9:af:43:fc:0e:8d:d1:31:f6:86:
c7:ff:05:05:6b:e2:58:07:c8:a7:de:f4:ad:60:77:a1:08:ab:
dc:07:2b:bc:e9:60:71:38:16:1f:28:e6:6c:ec:c3:6e:35:1a:
1c:1a:26:f9:46:6e:34:40:a6:09:d5:79:81:05:cc:ed:27:b2:
03:13:9c:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:54:00 2026 by rpki-client