
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa
File: 588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa (raw, json)
Hash identifier: ocYyXEMQGH89rxqhFNzf8Zpjh5t9gPTTB8VUkqC6NCE=
Subject key identifier: E8:F5:80:5A:CE:4B:49:DA:D4:A1:FF:65:9A:58:F4:B0:C5:9C:48:2D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BB487BFCF342392E26E969779664B0B2C3C5684
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa
Signing time: Mon 12 Oct 2026 00:30:14 +0000
ROA not before: Mon 12 Oct 2026 00:30:14 +0000
ROA not after: Sun 10 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b4:87:bf:cf:34:23:92:e2:6e:96:97:79:66:4b:0b:2c:3c:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 12 00:30:14 2026 GMT
Not After : Jan 10 23:59:59 2027 GMT
Subject: serialNumber=78c2832d1da252823d9a5eb245e3adcf7f90f376939e5476aac0c02f9f0745ae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e0:84:14:ac:d0:ba:74:49:d2:5b:d9:2f:4c:
55:ca:29:94:b9:3b:f0:04:ac:9a:e2:a2:01:49:79:
84:7f:9c:83:f5:bf:be:2a:8f:4f:50:7a:cb:a0:6f:
09:af:1c:d5:e3:c5:bb:d2:4d:44:59:20:4c:d7:98:
84:0a:b7:fa:e4:8e:53:68:b2:d4:e1:c8:81:37:b9:
1d:59:16:3b:50:2d:a5:df:b4:65:db:0d:77:2f:7e:
cb:e2:af:52:f2:4f:09:63:77:b6:05:31:ca:2a:75:
1b:f7:77:fa:3e:4a:a0:eb:19:81:51:6c:2b:29:76:
85:ec:f3:e0:d5:88:e5:e0:7f:ca:d8:8e:ef:ac:ba:
bb:d9:b9:9d:b1:60:e1:3f:c4:17:7a:82:97:82:76:
6d:d0:db:f9:10:d6:02:ff:de:6a:78:b7:12:3d:36:
c9:13:81:eb:57:17:5a:bc:5c:0f:7e:aa:f8:e5:a2:
2b:16:fe:c5:fc:0a:bd:41:fa:ac:10:71:14:8f:85:
0a:0f:bf:60:12:07:3c:c1:f4:a4:12:38:e4:e2:29:
17:b6:ee:7c:11:98:87:d3:51:7f:85:48:10:cd:1e:
74:5b:27:cb:19:1a:70:45:cd:cd:a2:43:45:dd:87:
bc:1c:cb:51:24:51:1d:ac:d7:ce:d0:9c:dd:0b:09:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F5:80:5A:CE:4B:49:DA:D4:A1:FF:65:9A:58:F4:B0:C5:9C:48:2D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/588a58f0-ec02-43de-bdf8-3b8c967a9d8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:5000::/40
Signature Algorithm: sha256WithRSAEncryption
b8:27:a4:23:35:f0:fe:92:4b:06:d3:27:ae:13:32:31:f3:1e:
a1:dc:27:f1:8b:3f:f7:3d:1f:f6:b4:07:b0:1f:1e:48:e2:14:
83:a6:39:5b:51:ec:c8:9d:a8:a2:0e:d9:1d:a8:88:08:d2:ed:
9f:98:5b:c7:38:b3:35:38:c3:6a:28:ff:6a:6e:be:f3:e7:ca:
bc:3e:d2:a4:5d:4a:cf:30:da:92:37:68:ff:db:fb:4d:74:37:
55:1c:54:fc:25:39:c8:c3:31:03:06:5f:14:db:38:73:2f:9c:
f4:53:ec:f5:3e:1b:e4:70:ad:b5:d7:65:db:b4:6f:8a:16:c0:
5b:39:24:af:a5:be:c6:90:8a:44:bb:0b:20:08:11:ea:bb:69:
03:c4:b5:94:56:d9:7e:63:51:2b:85:64:ac:52:e1:f5:37:aa:
b6:9d:2e:b3:f6:68:83:ae:24:77:1f:60:9f:d0:c6:fb:89:42:
a7:4e:16:9c:e5:b1:38:56:a5:83:41:47:50:d4:2c:27:2c:d1:
dd:1b:72:43:10:a7:eb:cd:92:f4:1b:eb:6b:4a:a0:a8:8d:27:
a5:01:da:ae:ca:2d:c2:10:4a:60:3d:c3:f4:79:7f:46:a7:7a:
fc:f3:b7:7b:ca:b2:8b:fa:0a:74:9e:98:4e:09:64:b9:5f:05:
14:0f:11:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:48:06 2026 by rpki-client