
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e32781-6381-411a-bf6b-715806a9af13.roa
File: 63e32781-6381-411a-bf6b-715806a9af13.roa (raw, json)
Hash identifier: 35HO99IpoOzofz31jFiXSUabTs1wdnCu6Aj92XnqxSQ=
Subject key identifier: 12:45:57:A6:0A:EA:E4:5A:D4:85:6C:1D:10:BD:E9:E8:7F:E3:13:3B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54B9CCCC1EC031F8F788D010834A5547B86764E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e32781-6381-411a-bf6b-715806a9af13.roa
Signing time: Wed 09 Sep 2026 16:05:22 +0000
ROA not before: Wed 09 Sep 2026 16:05:22 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe7:e200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:b9:cc:cc:1e:c0:31:f8:f7:88:d0:10:83:4a:55:47:b8:67:64:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 9 16:05:22 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=8f4c875aae351057bd9fe51f2fa8ce25de6d21c433ef07ac3537486209a1044c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a7:28:08:83:18:40:7b:ad:60:f9:6f:20:5a:
e3:eb:3b:79:31:ce:69:5f:fc:a5:25:2a:18:e2:ab:
a9:b0:9f:09:0c:33:33:39:f3:aa:12:b9:ed:ce:e3:
43:92:e5:a2:bd:44:1f:dd:3a:79:90:c8:91:09:69:
68:50:73:af:9c:93:b3:ef:9a:be:6d:0e:36:69:d3:
a5:18:ae:45:e4:ef:5b:07:92:68:3d:e8:3e:3f:2e:
50:9c:13:b5:a8:69:90:2d:02:09:0a:75:fa:e8:e7:
53:d9:2e:f0:46:4d:56:3a:c7:80:f6:f6:49:4e:96:
2b:c4:d2:29:a7:ab:26:df:c8:05:02:51:cb:a6:46:
f5:e3:78:a7:ad:c5:00:e1:5a:b4:09:86:48:bd:32:
49:80:a5:a0:ba:7b:23:13:c1:66:79:f1:ea:6c:96:
f5:82:cb:a6:b5:bf:e4:48:8d:c5:d0:3a:0a:e5:7e:
c6:b0:20:b3:e7:06:85:81:36:17:83:c5:f1:a2:02:
17:19:ff:df:b4:dc:ce:8d:10:c5:46:f1:7d:e6:c9:
74:14:f1:16:3e:9b:9c:3f:ce:97:5b:02:e2:cb:53:
fe:b2:29:ec:72:bc:de:24:f1:e3:52:82:94:4e:8c:
36:70:a8:8a:18:4a:b5:f3:82:92:0a:e8:62:27:d2:
95:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:57:A6:0A:EA:E4:5A:D4:85:6C:1D:10:BD:E9:E8:7F:E3:13:3B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/63e32781-6381-411a-bf6b-715806a9af13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe7:e200::/40
Signature Algorithm: sha256WithRSAEncryption
20:b1:ef:51:fd:2b:c5:d4:cf:22:44:71:35:6b:54:8e:94:11:
83:a5:f1:72:48:75:db:b6:89:9f:ca:04:5c:80:f8:a9:7b:d7:
1f:93:3c:12:5d:82:61:e9:16:0f:10:a9:de:cc:f2:fe:c3:a9:
25:63:68:f8:c6:30:e2:27:ab:2e:97:f5:2e:67:95:20:2c:6e:
88:e3:07:48:28:74:4a:54:8b:bc:8f:84:e5:ce:7b:b3:0c:75:
e5:7d:71:ad:77:17:a7:c5:9a:e1:1f:2d:02:df:12:84:bb:5e:
47:9f:cd:20:4e:77:64:55:ac:32:d8:65:7a:ee:43:94:f5:c2:
3a:3f:64:66:6a:6e:af:3d:6a:7d:1f:94:da:91:5b:55:ef:eb:
3f:37:49:f5:d9:34:cf:ee:d8:d8:b7:0e:29:17:13:00:a5:48:
1c:b4:f6:d3:85:3d:27:ac:32:cd:c9:e6:dc:64:bb:1c:46:f5:
8c:ca:62:3b:5c:b3:63:96:14:aa:5f:c9:52:da:ff:5e:09:b9:
95:2a:ec:62:1d:af:6b:8f:08:99:e0:2b:21:32:16:4b:21:58:
03:d3:af:5d:8a:2e:d9:8e:11:99:83:2c:c0:59:4c:0f:6a:d6:
95:6b:ba:08:7f:e6:d9:64:0f:d1:6f:f4:c3:c1:2a:7c:c8:e8:
bb:43:0a:b7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:43:57 2026 by rpki-client