
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4910817a-b0bf-4946-8dd2-f67e67257c7e.roa
File: 4910817a-b0bf-4946-8dd2-f67e67257c7e.roa (raw, json)
Hash identifier: aFmcsSoWei8D0yv4PyUYPBniVf8clrX6rlfufhQaITY=
Subject key identifier: 09:49:1A:C4:61:9D:40:FA:60:2E:6A:6A:D1:3A:8D:19:18:BC:6D:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E04242A42E06FEF4388A96C39655EF391E9864E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4910817a-b0bf-4946-8dd2-f67e67257c7e.roa
Signing time: Thu 12 Mar 2026 16:08:26 +0000
ROA not before: Thu 12 Mar 2026 16:08:26 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fba:ec40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:04:24:2a:42:e0:6f:ef:43:88:a9:6c:39:65:5e:f3:91:e9:86:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 12 16:08:26 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=fb35a802788e8f62611bda94efbad0baec0365c0807a9121ba2d9d0c1c9198ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ce:2d:56:1c:72:8e:d2:9f:a0:da:e9:9b:6f:
96:0f:9a:60:18:f2:e5:b0:f4:8d:ed:ed:f4:0c:a1:
68:3c:bb:38:d5:8e:65:cb:40:88:aa:48:36:0b:3a:
d6:0a:4e:0b:6a:da:ed:46:be:8d:65:30:14:a8:2a:
86:cd:0f:4d:0b:65:aa:93:f9:f6:bc:ba:87:71:d8:
7f:dd:69:95:69:41:40:a4:ca:10:e9:fc:ff:38:c1:
f1:d4:ea:5e:6e:42:eb:4f:e3:12:af:f5:1c:5c:dd:
de:54:22:f2:c0:c0:54:f6:e6:be:a9:b8:53:50:0a:
3e:2b:d1:f3:59:bb:a6:37:05:62:03:1e:43:38:11:
a5:ed:3b:e0:4d:2a:7a:c9:59:e4:8a:17:d0:eb:1c:
67:22:4d:5f:18:2e:08:2f:fd:37:56:88:ad:37:84:
4e:15:21:59:85:f0:1a:b6:8a:f4:d7:60:6d:6c:30:
02:97:c9:8c:79:7d:c7:b4:f1:5f:25:01:52:e8:32:
86:1f:d3:66:94:fd:ed:0e:24:4a:fd:36:1d:1d:b5:
6c:88:9e:45:4b:75:d3:75:0e:b0:f7:bb:ae:6e:a4:
08:1f:5c:86:fe:1f:c5:4b:29:cf:7e:66:f5:b2:ae:
55:3c:96:73:ad:cb:d1:56:bf:e6:f1:13:17:d5:dc:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:1A:C4:61:9D:40:FA:60:2E:6A:6A:D1:3A:8D:19:18:BC:6D:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4910817a-b0bf-4946-8dd2-f67e67257c7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fba:ec40::/48
Signature Algorithm: sha256WithRSAEncryption
75:5f:a0:6f:78:e9:0e:aa:6d:99:c7:2b:d3:b5:46:81:2b:e4:
f3:5d:fe:04:be:f5:9b:21:01:2d:3c:59:57:a7:d8:4c:8a:ac:
6a:1f:dc:7c:fc:b1:a3:03:31:7d:57:48:19:4e:32:fe:a8:2d:
d6:31:20:21:ce:8c:76:b3:c5:fa:aa:36:cc:3f:2f:18:9c:b1:
a0:1b:6c:cf:87:50:44:1e:84:ba:ee:d0:4f:92:93:c4:4d:7d:
5a:c7:e4:ba:bc:33:d5:49:5f:2c:4d:06:7b:12:31:d5:94:1e:
d5:ad:5a:cc:f1:5b:02:67:84:fe:10:d5:26:78:7b:a6:ac:bd:
e0:eb:03:d6:5b:20:56:dc:ac:4e:6a:3e:ce:f0:f7:07:5c:58:
6a:c4:aa:4e:51:f0:72:47:66:50:4b:1f:73:aa:ec:be:1f:b9:
80:cc:fc:a7:bf:ba:62:da:ff:0c:ed:e1:27:66:92:19:9b:ed:
1c:4e:87:ba:c3:58:12:8f:e3:6f:c6:2f:3b:f5:6d:75:bd:cc:
e7:16:eb:d2:b2:bf:d9:d6:e2:63:09:5b:dc:04:08:ec:95:a6:
11:3e:b9:1f:e3:0e:7c:e3:ac:22:a2:65:50:4b:24:bd:c9:8f:
3b:46:1b:83:8a:7d:c0:90:a7:d5:a1:67:17:3a:0f:1d:a4:83:
f8:6b:5e:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:22:44 2026 by rpki-client