
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
File: 6b0118f9-aa06-473f-9164-82651f7287ff.roa (raw, json)
Hash identifier: v0OK7YE4pkqDiNwpPVeDbG4SCPEAxsJROiNIlSaGGS8=
Subject key identifier: 60:BC:AB:AF:4B:F2:99:D4:EF:86:36:FE:0E:52:52:AE:49:4B:B4:B9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 398AB408EC3B3A20D35611EA80472A1D9D055262
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
Signing time: Sun 04 Oct 2026 00:11:10 +0000
ROA not before: Sun 04 Oct 2026 00:11:10 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 128.212.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:8a:b4:08:ec:3b:3a:20:d3:56:11:ea:80:47:2a:1d:9d:05:52:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 4 00:11:10 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=3463f0f61d9f3a6a4d03bacaa99b777e6ed1804d127b227f40f4f4292a081338, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:26:e4:ef:ed:53:d4:9b:32:a2:79:a8:08:
3c:7c:10:67:37:b7:36:2b:3b:2f:73:6c:da:cb:f4:
2e:13:27:c4:e1:6c:6a:4c:75:0d:c8:f0:cc:93:94:
1c:ba:ce:58:bb:3d:a2:f8:d5:d2:ce:7d:d0:f8:79:
4a:25:68:2d:48:87:d8:8c:86:4b:b9:fc:49:c8:a5:
6e:20:52:76:88:1e:d1:d2:64:b3:a2:eb:fb:bb:0a:
49:9b:69:85:1e:31:61:3a:9e:bc:1b:2b:42:85:15:
e5:b1:bd:cf:23:64:31:0a:82:8b:0c:50:77:6f:c5:
6a:41:75:e1:2a:7f:54:11:05:4d:47:46:f7:2e:d1:
12:26:0a:0a:36:4a:19:14:ad:2e:2a:ee:2d:03:90:
42:1d:11:42:57:aa:1a:75:5c:1b:1f:52:e8:cc:64:
df:ff:c9:19:df:3a:0f:55:b7:be:a9:a7:eb:01:48:
e5:f0:92:21:f9:80:1d:f2:7a:1e:aa:89:47:4a:2a:
e5:05:d3:64:24:21:85:5f:e8:2f:35:d2:f7:84:4a:
2b:4a:e2:7f:a0:f6:b3:79:1f:a9:a6:93:ef:98:d0:
4b:96:40:c6:a5:b7:eb:59:1a:26:35:e4:40:d2:f4:
03:ef:ab:84:78:63:32:3f:b0:93:72:a1:3c:aa:75:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BC:AB:AF:4B:F2:99:D4:EF:86:36:FE:0E:52:52:AE:49:4B:B4:B9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6b0118f9-aa06-473f-9164-82651f7287ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.212.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c1:7f:4f:0c:45:5c:1a:e2:4a:0a:a2:23:2b:24:19:23:d8:2f:
75:26:e0:cf:71:6e:7b:cb:26:d5:43:89:6b:ac:58:30:e2:61:
91:2a:44:47:9c:24:f3:8f:48:39:0d:81:7a:ff:c8:dc:82:47:
c9:4e:31:bc:c4:66:b5:2b:28:51:06:47:85:14:35:7c:7e:8b:
d4:fc:bc:ae:d4:75:57:08:0e:35:25:60:62:4e:63:1a:fa:e5:
cf:f3:7a:fc:39:45:06:20:4f:2f:c3:34:4e:59:18:fd:d6:08:
dc:49:89:be:e1:0e:7e:07:37:8c:9d:a1:06:eb:74:9b:12:ec:
b9:a8:70:09:ba:5b:f4:5f:f5:65:81:17:4f:57:60:85:89:4f:
97:b2:74:52:f5:08:15:2b:ef:86:c9:ab:31:c0:63:c5:30:a2:
fc:fa:5a:bf:26:f7:d9:4a:50:a1:36:c5:f1:cf:be:37:1b:71:
f3:25:36:02:d1:53:e2:c6:4d:4c:3e:65:10:43:2c:db:00:8d:
9b:08:f5:86:4d:cc:4e:42:4d:62:05:62:c2:58:74:38:1d:8c:
48:ca:0a:ea:ed:16:45:0f:c2:80:e3:ee:b5:29:03:a6:94:8d:
fd:a1:0f:6a:54:81:37:8d:4d:ec:cd:b2:6a:54:8b:16:8f:9e:
58:19:48:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 12:05:56 2026 by rpki-client