
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c525837-49c7-4a8f-b19b-e1b994c09eca.roa
File: 4c525837-49c7-4a8f-b19b-e1b994c09eca.roa (raw, json)
Hash identifier: /SGOtkHgzL/5cGibYKfz+aGI9GLmtRJHSVPsMMUD3t4=
Subject key identifier: 09:49:2A:33:56:40:FD:C0:04:D7:18:8E:33:84:29:C1:2D:D0:BE:02
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 47EB25D9AD39F6E2F43786CA32387770A4791453
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c525837-49c7-4a8f-b19b-e1b994c09eca.roa
Signing time: Thu 20 Aug 2026 00:00:08 +0000
ROA not before: Thu 20 Aug 2026 00:00:08 +0000
ROA not after: Wed 18 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f10:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:eb:25:d9:ad:39:f6:e2:f4:37:86:ca:32:38:77:70:a4:79:14:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 20 00:00:08 2026 GMT
Not After : Nov 18 23:59:59 2026 GMT
Subject: serialNumber=fbe3116b1d4baab1a0431052bbf87751f509ab0ad88105942e4f3b57751bacaf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:83:05:c8:bc:fe:76:62:af:4c:e7:6a:de:b9:
46:6c:13:bf:7f:68:84:1b:05:08:05:5c:37:34:43:
2f:3e:4c:f9:21:b2:62:14:0a:77:17:e9:24:6a:1a:
2a:7f:6b:28:59:bd:a6:96:61:d5:ee:5e:ad:6d:8d:
76:e3:10:6c:58:a3:52:b8:3b:2f:2a:84:f6:76:74:
43:2b:07:12:14:b9:6f:78:49:06:ec:c7:a8:ae:aa:
e1:d3:08:7f:55:47:1d:67:29:e9:30:49:d1:1a:25:
ed:c3:ce:da:af:d7:20:d9:b3:92:7a:87:48:5f:85:
89:a6:1f:7c:e9:9f:33:a1:3e:8e:ed:46:8e:dd:ca:
fe:e6:78:5e:8f:0e:e4:3d:e2:13:05:49:11:cf:99:
17:c3:07:4c:d6:80:79:56:01:94:43:07:85:8f:c9:
33:09:f0:f6:64:ad:8a:78:29:53:8c:2e:18:f9:bf:
e3:90:9c:27:09:3e:90:04:3d:42:f1:0c:d3:9c:e3:
75:25:13:4d:87:6a:14:e4:15:7a:dc:14:db:69:21:
29:63:66:ea:a5:4a:d4:d3:af:ef:53:9b:cc:9a:01:
b1:85:48:f6:75:1d:0d:cd:dc:50:ed:4a:12:5f:31:
2f:07:b5:0b:50:df:f7:89:e7:9d:e2:e1:1d:3d:c4:
e1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:49:2A:33:56:40:FD:C0:04:D7:18:8E:33:84:29:C1:2D:D0:BE:02
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4c525837-49c7-4a8f-b19b-e1b994c09eca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f10:2000::/36
Signature Algorithm: sha256WithRSAEncryption
59:ae:74:47:ae:e2:d6:5f:3a:dd:f7:f6:65:df:7d:57:25:ce:
ee:87:57:40:12:d5:cb:f4:b4:29:90:70:37:de:6a:51:84:d2:
44:f5:15:63:30:fb:74:06:f6:23:e0:b6:7c:24:8d:e7:fe:7f:
7e:a5:1b:78:48:96:27:67:9e:8b:02:4e:5a:fd:03:cc:36:0d:
cd:5a:0c:fe:4c:a7:df:e6:92:82:e6:4b:ee:66:62:ba:88:e5:
77:43:d5:a9:1e:00:a5:40:8a:26:f2:e6:44:04:1d:42:b4:56:
76:87:e7:1a:5c:b0:ef:7e:ba:d3:84:f0:fc:55:0b:3d:14:57:
46:8f:30:52:78:8a:86:78:46:8a:40:73:7d:13:88:61:90:c1:
e4:ec:9a:0a:30:a8:d8:37:83:1b:e1:79:4f:3a:32:7d:11:e7:
6c:d8:11:f2:44:f3:1f:23:3a:98:27:42:9c:24:41:50:af:dc:
ed:9b:f6:f9:25:06:77:16:2d:b9:e9:b1:16:b3:54:f0:9d:12:
6b:e1:58:b7:c5:4a:25:64:16:03:98:32:83:aa:26:93:9f:7e:
1f:ac:f1:f0:e0:d0:2f:f7:cd:bf:a2:7e:bb:f2:97:cb:91:54:
f2:a0:b9:17:8b:fe:af:0d:17:f3:f9:2a:12:db:e0:57:fa:0a:
14:72:c0:81
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:22:10 2026 by rpki-client