
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fcd84a1-3134-4005-9224-b48d476c9564.roa
File: 6fcd84a1-3134-4005-9224-b48d476c9564.roa (raw, json)
Hash identifier: il5Km8aJb2BvSowe0+p1Q51qODdUnCVrtGQnUdMyZS0=
Subject key identifier: 67:62:AC:57:39:90:F2:C5:4D:C0:D8:CC:14:92:D4:9C:DA:C3:CD:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B3485A60B5E4CFDDFAB049A831179DDA2BC94A2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fcd84a1-3134-4005-9224-b48d476c9564.roa
Signing time: Tue 06 Oct 2026 00:30:59 +0000
ROA not before: Tue 06 Oct 2026 00:30:59 +0000
ROA not after: Mon 04 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:34:85:a6:0b:5e:4c:fd:df:ab:04:9a:83:11:79:dd:a2:bc:94:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 00:30:59 2026 GMT
Not After : Jan 4 23:59:59 2027 GMT
Subject: serialNumber=fd5eb6d497fb5ccbdc27311505027080e4001f3903a90cbb5ed3ffff8651fe3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:85:c3:03:e3:f9:7f:fe:7a:d4:db:fd:6d:1a:
15:38:57:fb:39:2c:3c:9c:d9:35:30:90:03:cf:03:
e7:84:ad:1f:3b:39:bf:e0:d7:f7:74:be:53:37:5f:
f8:7e:89:21:8d:1d:fe:f3:b1:78:8b:9a:2f:81:b4:
35:a8:e5:0e:d7:19:93:75:cc:e1:41:fa:4d:28:e0:
0a:6e:bd:93:d4:6d:23:7a:e1:1b:86:f8:87:c1:67:
b6:c0:7e:8a:70:35:15:3f:ca:7f:e7:a6:52:90:df:
77:2d:de:a9:08:63:46:6b:0f:ff:1c:1f:a7:d3:1e:
61:cb:91:1a:de:7b:34:e1:c0:2d:9a:c2:18:f0:2b:
25:54:41:31:ee:df:02:81:22:eb:b0:c7:82:92:65:
a1:b7:7a:94:8c:c0:5d:53:58:fb:67:20:c1:04:fd:
8c:8b:51:f6:47:50:41:d9:f4:cd:cb:8a:1c:23:49:
ce:4a:ae:a9:b5:38:ee:ee:14:09:98:99:f3:9d:1f:
e6:03:53:d9:eb:9b:8d:b2:49:4d:12:8d:6a:1f:bc:
fe:77:42:4b:7a:81:e9:19:9c:9f:06:94:55:40:88:
5a:7f:c3:d7:5a:e5:23:95:e5:68:eb:66:8e:86:e0:
23:de:07:8a:31:91:1b:b3:83:d5:ee:7e:95:aa:18:
7a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:62:AC:57:39:90:F2:C5:4D:C0:D8:CC:14:92:D4:9C:DA:C3:CD:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6fcd84a1-3134-4005-9224-b48d476c9564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.113.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5f:a8:59:5f:2b:aa:00:0b:ba:18:cb:a5:1c:3a:b7:04:e6:
1b:46:bc:d1:52:c1:1d:ac:7b:d1:4a:66:18:5c:f7:e1:98:eb:
ad:7a:ea:40:06:57:ce:90:dc:a3:7f:56:13:58:4c:f4:1f:e7:
11:4a:26:8e:26:d2:c1:59:14:f5:ae:37:9e:b0:6d:12:be:d3:
ee:62:d2:b9:e7:e3:61:ed:5f:41:d6:d1:45:c5:ca:31:c8:81:
79:fe:54:a9:fa:f6:46:0c:03:d5:a1:5a:ef:70:d1:4e:0a:22:
b0:38:75:d5:80:80:66:1e:8c:8c:ef:ea:ed:8e:df:48:bc:84:
7f:ea:35:52:80:2c:c5:ac:c2:08:2e:34:71:b2:89:d6:9b:07:
44:03:b8:d3:0b:55:4d:5f:76:d2:df:e4:25:92:32:f8:c5:e3:
e6:ee:57:aa:8a:58:54:9e:22:11:86:e6:1e:b2:16:12:58:4f:
b9:d4:43:94:5a:26:68:9b:3d:80:f6:51:0f:fd:a8:6c:3d:c8:
c7:63:ac:7e:33:ec:ee:78:96:b4:7a:88:47:da:37:9d:0a:59:
3b:a1:83:68:96:eb:91:10:27:5d:a8:eb:58:79:b5:5f:16:76:
3d:0b:b7:4f:75:da:56:18:5c:1f:63:0d:c8:c3:5d:b4:bc:e0:
e8:f3:90:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:29:11 2026 by rpki-client