
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa
File: 57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa (raw, json)
Hash identifier: VXaQbphEcmoLNf/gnCUWpthYbd5aKaAqv3qqn8JXB0U=
Subject key identifier: CE:2B:1E:96:CE:A9:E1:9C:E6:21:CF:2B:96:20:4D:9D:50:16:37:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D5E8608985BC5DD23B04EE6E27EF923E4A37C2F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa
Signing time: Tue 06 Oct 2026 00:01:29 +0000
ROA not before: Tue 06 Oct 2026 00:01:29 +0000
ROA not after: Mon 04 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f68:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:5e:86:08:98:5b:c5:dd:23:b0:4e:e6:e2:7e:f9:23:e4:a3:7c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 00:01:29 2026 GMT
Not After : Jan 4 23:59:59 2027 GMT
Subject: serialNumber=6e68bc5cbffc4d526a4cbce1bb242fb98dfee0b81a8f80f2ef2048728b09d793, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:ea:08:c5:ba:dc:33:e7:3f:b6:54:e7:4a:
7f:96:56:61:bf:73:2c:fc:39:9f:6b:31:04:11:8e:
d3:d5:26:29:37:e7:0d:ea:b0:96:4f:39:1f:36:40:
4c:dc:6b:4c:91:54:9d:64:21:10:74:1b:f6:04:b9:
a9:f7:f7:56:92:56:ad:2d:aa:c7:c1:af:e3:a9:8d:
8d:fe:d9:d9:ad:34:78:8a:5d:80:d6:1d:06:7c:8f:
b7:3a:ef:5f:31:1d:4b:1b:dd:c9:28:ae:4a:af:54:
4d:0c:02:39:bf:42:9c:b8:84:ef:9d:03:f0:b8:df:
db:5b:fa:7d:36:c9:bb:1d:fd:0e:ca:aa:a7:f4:96:
89:c9:f8:b7:74:58:a2:4e:fb:68:5b:0e:9e:85:d2:
6f:fd:83:e0:ec:16:6d:80:d3:53:96:a9:c1:a1:8e:
04:8c:3a:73:e9:90:73:a2:85:79:68:7e:f9:11:ef:
93:fc:c2:4f:0d:b6:68:b2:30:87:68:91:9b:9e:cc:
44:29:93:1d:c1:51:f7:8e:8a:cb:e0:ad:8f:fe:98:
a3:6b:57:a8:f3:da:b7:29:1d:47:d6:e8:5d:dc:ce:
c8:52:26:36:7e:a7:cc:63:c0:db:a1:08:04:b3:38:
8f:a0:0d:a6:e8:f4:b8:ee:97:e7:20:4c:d7:b9:ae:
94:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2B:1E:96:CE:A9:E1:9C:E6:21:CF:2B:96:20:4D:9D:50:16:37:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/57b9b652-a6e0-4d50-b4a8-bf9ea2724802.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:5000::/40
Signature Algorithm: sha256WithRSAEncryption
88:80:3c:4b:50:f2:be:7f:02:d2:f1:9d:84:94:0c:fd:be:98:
5e:1c:63:8c:7d:91:5e:fe:38:18:76:64:f1:63:8a:2c:8c:ba:
66:54:90:f4:71:5f:22:28:79:86:a2:5c:16:b2:43:9a:6d:cf:
13:b5:0b:cf:de:e9:a9:7b:14:02:9a:21:e0:8a:1e:3f:cf:18:
14:f1:bd:3f:5f:32:b6:63:ff:85:36:ad:a4:33:41:33:55:c7:
29:c2:c4:cf:51:b4:66:bf:9e:8d:e7:61:41:a2:1d:bc:ca:ac:
db:de:22:9e:98:ae:76:0c:c8:ab:33:4c:00:da:14:1d:19:b3:
c4:85:89:c5:cc:68:e2:39:4e:7c:96:40:c0:a5:e7:78:7f:a4:
fa:a2:ff:4e:90:c2:88:2b:6e:42:29:eb:97:8f:b7:d2:25:6d:
6f:c2:74:49:26:1b:60:0c:92:88:bf:01:d4:36:13:0e:85:40:
26:fb:0e:77:70:1d:c4:08:01:d0:3d:b0:8b:ec:ee:22:bd:36:
9b:3c:7b:e4:01:1a:48:de:6a:a4:23:4d:7c:e8:0c:b7:0f:e6:
dc:ba:e7:ee:c7:ba:ed:46:d0:8f:f1:cf:dd:64:7f:11:53:f0:
05:64:09:20:d3:8f:ec:48:94:53:3e:c3:37:0c:35:6b:0c:2b:
b5:a5:aa:3b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 07:26:09 2026 by rpki-client