
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa
File: 4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa (raw, json)
Hash identifier: d92WQg1DA/VVYWdj4I68GdK2kIh1CyuJRAbwUjD+jVk=
Subject key identifier: 07:2F:E6:A0:1C:ED:90:CF:A4:D9:37:E1:C4:9C:E2:4A:66:50:3B:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F21853FB2CF9058B621A8380856FB92DEC924BE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa
Signing time: Mon 03 Aug 2026 02:10:46 +0000
ROA not before: Mon 03 Aug 2026 02:10:46 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f21:c800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:21:85:3f:b2:cf:90:58:b6:21:a8:38:08:56:fb:92:de:c9:24:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:10:46 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=bae3f069600b896ca3683d51d426cecc5bc60f17a06771960f442a2a4a3a01a2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:07:10:6b:3c:91:9d:32:1d:5b:dc:25:eb:
2e:d3:21:fc:27:9f:d5:9d:4c:ff:d5:8e:4b:0f:b8:
8c:ce:ac:23:f9:b2:c4:2b:4d:12:0b:99:d3:b5:e1:
e6:c4:d6:57:9b:95:36:24:8a:bd:53:d1:8c:e9:09:
75:5d:65:be:29:79:7f:f4:69:14:4a:3a:ba:cc:0c:
40:25:2e:64:c4:c5:90:31:84:a5:54:a6:06:85:41:
67:fb:fe:28:4c:9f:43:59:d4:27:b2:89:c2:e2:06:
31:34:e8:23:5e:5f:b6:fc:25:36:cc:46:1e:d6:a1:
ba:4a:b3:52:91:e4:e0:59:eb:e3:94:c2:2c:64:54:
bd:c7:c3:94:23:5c:9e:ea:2b:70:6b:0a:9f:c0:4d:
21:0e:48:9f:c5:41:90:36:48:b4:d7:7d:56:89:d7:
bf:67:d3:82:24:1b:ce:82:9d:1c:32:b3:70:9b:03:
2b:91:4c:02:cd:72:cb:18:07:20:e6:7e:7d:38:7e:
9a:fa:11:79:a2:74:e5:23:27:85:97:b0:f7:9b:8a:
72:26:43:c6:68:f9:89:ae:dc:9d:eb:11:85:28:0d:
37:ab:58:ee:63:5b:d1:e6:ee:91:c0:cd:98:4e:63:
88:c1:e7:8f:6e:86:c7:dd:10:04:93:66:44:b1:80:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2F:E6:A0:1C:ED:90:CF:A4:D9:37:E1:C4:9C:E2:4A:66:50:3B:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4dbd424a-798a-4fa7-9610-cebe6d3670ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f21:c800::/37
Signature Algorithm: sha256WithRSAEncryption
0b:2b:18:71:98:d6:1c:f0:ca:18:d7:95:61:ec:77:fc:50:66:
a6:d8:06:a0:0c:ae:e4:f3:3b:48:83:6f:a4:a6:59:69:d7:35:
c5:10:b2:76:57:1a:79:0c:c3:c1:dc:8f:b8:6b:94:a4:76:75:
98:73:47:0b:1a:5a:d1:5f:47:cb:93:df:8e:32:8e:59:85:5b:
a9:8e:f4:29:18:b3:b0:5d:a8:a9:69:d8:4c:f1:04:1e:dc:9b:
22:a3:62:67:76:bb:51:54:8a:48:52:e9:35:cc:f0:ea:fa:30:
23:4b:04:fa:7b:ec:7a:83:94:45:d1:30:38:90:2b:00:12:78:
0f:e7:47:fe:d8:84:d0:65:35:d3:86:02:33:02:06:c5:e2:57:
9e:69:0f:02:af:17:83:5a:d0:19:cb:ff:d1:a1:a2:65:9f:13:
d6:26:61:96:cf:0a:1c:76:bb:cd:64:c5:90:a6:83:65:a0:ee:
6e:12:dd:38:1e:ee:76:ba:6b:a9:48:d5:33:2a:5e:90:03:62:
ea:01:81:29:3f:d7:ab:ad:79:f5:32:43:dd:36:f1:ce:bb:d4:
18:45:de:ab:cb:0c:17:bb:08:a4:ed:05:7d:f7:03:70:0a:6e:
e1:31:c1:21:c8:66:8d:cf:b2:c4:54:ae:fc:7e:98:8d:fe:25:
f2:c9:73:8b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:21:23 2026 by rpki-client