
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa
File: 6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa (raw, json)
Hash identifier: IYXEl1vEGxoB8G1ERrgqcfbkciErqC0xi9pgQJKRf6A=
Subject key identifier: 43:6D:EB:E2:5C:46:79:81:BE:A8:EF:E7:A8:CA:18:57:96:70:94:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 635B506EAD83077D40F538B85A5992A306374E73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa
Signing time: Wed 05 Aug 2026 00:41:14 +0000
ROA not before: Wed 05 Aug 2026 00:41:14 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 63.32.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:5b:50:6e:ad:83:07:7d:40:f5:38:b8:5a:59:92:a3:06:37:4e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:41:14 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=ed05ba3f2dc888ad30223ee10d566daa36a8d80cab3ec9c72133e81a5b73c950, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c7:f1:c9:eb:35:6a:c4:ab:71:28:53:ba:da:
d4:4e:7c:59:bb:08:6a:d8:4f:1a:fe:04:0f:1a:f9:
13:87:ce:3d:29:d5:dd:6e:39:78:aa:fa:2d:57:c0:
ea:f7:69:5b:93:0e:00:d8:b7:7a:25:87:5a:54:91:
4b:5d:15:c5:a8:fa:b4:ec:f8:5d:e8:3e:a4:60:5f:
9b:8a:90:83:31:55:70:e9:d5:92:11:16:ba:da:c7:
3f:e9:5c:4f:72:21:79:fb:10:aa:fe:b0:cb:20:fd:
92:c3:75:00:00:1d:39:2d:0d:6c:d3:02:af:c6:8d:
77:af:f2:68:01:1e:71:4a:c5:bd:6a:4d:59:95:b5:
7d:f4:0d:98:f4:84:21:6c:c4:a6:3a:30:53:a8:6a:
6f:83:48:d7:0c:d9:4c:4d:e9:da:5e:ef:48:1d:9f:
b5:00:e8:05:ba:9c:85:82:d6:17:9f:ce:45:0a:01:
1c:f7:29:4e:cd:91:6e:65:a2:4a:9d:ec:a0:cb:b8:
ee:48:3f:a6:41:b8:82:ad:43:1f:db:19:cb:b6:bb:
da:14:36:72:05:7c:cd:58:9e:49:95:74:30:c9:e1:
e9:94:e7:4a:05:5b:af:ad:39:08:29:92:a1:b0:28:
49:a1:c4:19:7b:53:4e:87:d1:a1:be:80:61:80:d9:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:EB:E2:5C:46:79:81:BE:A8:EF:E7:A8:CA:18:57:96:70:94:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6eff0ad6-4f5e-4853-baa9-a5c08ed33bd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.32.0.0/14
Signature Algorithm: sha256WithRSAEncryption
c1:ab:1c:60:65:9f:75:fd:8c:c5:e6:6d:35:4f:99:b5:96:c7:
c3:6c:41:69:da:12:28:34:6d:39:47:ca:e1:eb:94:bf:0d:a7:
12:12:87:fd:5f:65:4d:c6:de:15:81:e0:d5:a9:c1:b0:dc:a0:
9d:b4:58:42:67:a5:8f:a1:ed:8a:7b:2c:6e:11:7f:cb:ac:fc:
45:a2:cf:70:b9:4f:6b:ea:03:92:e4:ce:9e:24:e5:c4:75:5c:
11:08:15:5d:b6:b2:45:58:7f:83:3f:5c:a3:13:ae:9c:e5:70:
b1:e3:82:2b:f1:21:a3:d4:61:f8:41:d7:ea:90:f4:a1:1c:6d:
17:a7:18:11:96:90:f5:22:ec:29:61:f3:b5:56:17:40:a9:1e:
ea:74:9f:02:6f:43:b7:e6:84:31:8e:8a:9e:ab:bd:65:1e:67:
7b:39:ca:3c:4c:dd:8b:7f:8c:55:2d:0d:f0:19:bf:a3:e3:82:
83:bf:66:1d:4d:c6:ea:fb:95:0b:72:4d:a5:67:e4:85:3e:d6:
3f:2d:45:57:65:91:fa:39:dd:07:6b:25:59:8a:03:e3:60:a6:
22:20:42:3b:0c:0c:67:cb:52:be:d3:60:15:d8:4f:76:70:aa:
59:fc:ef:6e:15:7b:f3:72:a9:27:10:39:c4:33:66:b0:5b:da:
f6:86:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:07:57 2026 by rpki-client