
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e3a3230-8e69-44ac-bfb6-92654eb94e6b.roa
File: 6e3a3230-8e69-44ac-bfb6-92654eb94e6b.roa (raw, json)
Hash identifier: +ZdQnc5jo9H6IQI9UJ3IKWrgha28EP8vNDi3fDZBmpc=
Subject key identifier: 42:CB:F5:71:E1:C3:C3:DD:7D:9A:A5:7C:F7:82:03:FE:BE:67:1D:B7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 70EAB2D9C57797A6FAD353EC03F8C972B0F75A22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e3a3230-8e69-44ac-bfb6-92654eb94e6b.roa
Signing time: Fri 23 Oct 2026 02:30:14 +0000
ROA not before: Fri 23 Oct 2026 02:30:14 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f16:800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ea:b2:d9:c5:77:97:a6:fa:d3:53:ec:03:f8:c9:72:b0:f7:5a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 02:30:14 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=3dc1963ac0b50399d88b40263f1e7a8c8d5441f388a4f8315f1828398ef136e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:b8:eb:c9:c6:98:5b:76:97:9a:0a:f1:21:
f6:ea:28:0d:94:e8:26:bc:87:ac:fb:e8:24:76:8a:
c4:b3:82:a0:65:bd:e2:7c:0a:c7:6d:cd:8c:a7:78:
b2:7a:00:18:a6:c7:fd:57:d1:3b:78:b9:0a:7f:5f:
d6:9a:3d:fd:95:95:7f:ab:20:a9:07:2f:d9:01:d0:
25:05:41:03:7e:1f:50:0b:6f:78:24:10:27:6c:6a:
b6:27:3e:78:60:09:59:f7:5c:1c:26:9b:53:41:c7:
22:06:85:eb:64:35:04:fd:0c:63:91:13:50:9b:06:
59:2d:59:17:13:8f:59:88:87:8d:08:1a:2f:30:55:
ff:a1:87:a1:be:70:14:2d:0d:d5:68:f6:bd:8f:67:
09:36:b9:2c:79:14:73:ca:cc:90:2f:32:07:db:f4:
f3:da:3d:8f:ab:d5:f4:31:cc:c2:1e:af:8d:31:9b:
22:7b:e8:ea:05:c9:a3:d5:3e:b0:2b:de:4e:cd:1a:
12:b4:b2:92:fa:86:51:57:16:66:c6:d0:1c:7c:7a:
0e:5f:6c:88:f8:07:42:bd:5f:bc:76:41:01:b9:67:
0d:95:73:6d:91:79:de:08:8f:b2:0a:85:a4:1d:76:
14:a5:a7:b1:37:dd:5e:fd:0d:e2:63:26:03:bf:15:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CB:F5:71:E1:C3:C3:DD:7D:9A:A5:7C:F7:82:03:FE:BE:67:1D:B7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e3a3230-8e69-44ac-bfb6-92654eb94e6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f16:800::/38
Signature Algorithm: sha256WithRSAEncryption
51:7c:b8:14:6b:99:42:b6:e4:50:e7:d0:16:33:cb:69:92:e0:
e1:7b:55:0c:d1:11:b5:c5:5d:6a:1a:0d:e4:78:39:be:8f:c9:
1c:8d:73:55:8f:ea:10:19:05:60:67:af:b7:1b:4e:9d:07:95:
5c:5d:26:21:e7:81:d1:7b:bb:6b:d2:ad:f8:43:1e:c9:da:46:
97:4d:d1:54:f6:9c:9e:b2:de:3d:d9:ec:11:32:80:18:93:5e:
9d:ab:be:c3:11:16:c5:04:4d:02:ab:fe:12:3a:63:51:3e:1b:
81:83:ea:f5:cf:0c:26:71:34:8a:23:66:7f:80:f4:eb:15:7c:
18:52:2b:36:72:a6:c0:8a:c2:be:7d:54:8e:e8:7b:29:c0:1b:
06:d2:3d:9c:08:c5:3b:20:fb:48:b5:38:87:19:7f:2b:01:e9:
26:61:16:ad:50:53:c2:52:e3:16:e0:93:6e:a0:14:82:1a:d3:
34:6d:2f:09:41:60:a3:3d:03:bb:9e:57:bb:e3:1d:4d:2e:03:
88:e9:e9:8b:a1:1f:bc:ae:7e:4f:f5:c5:2d:b9:99:a8:26:10:
f2:b2:c4:29:fd:c6:7a:8c:53:04:07:9b:63:40:fe:d1:18:67:
79:bb:1b:1a:65:3c:b8:64:f1:6d:33:94:14:cf:99:45:82:ae:
92:cf:5f:56
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 20:33:38 2026 by rpki-client