
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7041e330-ade8-4af4-8d5c-9c25621b0294.roa
File: 7041e330-ade8-4af4-8d5c-9c25621b0294.roa (raw, json)
Hash identifier: RsC962dJ08bMbCU5SMwFM5ZyOYDK+Dtnx48b4iugs1k=
Subject key identifier: C6:AC:34:16:11:1A:32:3D:4A:F8:8C:4B:77:F8:94:F0:45:0F:0A:40
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4858B57C8BA36503C78CE73DB77A12DF8E405959
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7041e330-ade8-4af4-8d5c-9c25621b0294.roa
Signing time: Fri 22 May 2026 16:32:24 +0000
ROA not before: Fri 22 May 2026 16:32:24 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f61:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 05 Jun 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:58:b5:7c:8b:a3:65:03:c7:8c:e7:3d:b7:7a:12:df:8e:40:59:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 22 16:32:24 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=c63b66487ad0d05d7aa5d2d63f1051f466bcba18d96028f1eca23dffc408dff9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:d5:e8:62:e0:d8:cf:03:24:74:40:d8:44:
e1:2e:a0:b7:3a:0a:8e:91:ee:eb:e3:cf:1b:82:5c:
f7:eb:46:e3:86:b4:b5:11:fa:17:66:8d:0a:95:1c:
d2:c7:47:8f:6b:6f:ad:ef:95:25:f9:da:fd:f5:48:
04:dd:d4:f0:f4:4d:b7:65:12:b9:df:eb:57:4e:f5:
ff:8e:77:50:75:d4:7a:36:ec:84:5f:e6:5c:3e:bb:
66:37:6b:10:4f:46:0b:66:83:6d:b3:57:66:43:96:
b9:af:3f:6d:92:32:44:ae:68:11:a4:99:83:25:88:
2f:14:84:83:ac:fb:a7:c6:e9:54:e5:a4:70:53:fe:
3d:5e:fc:d9:06:47:0f:fc:a1:54:b6:16:74:8f:67:
64:25:c2:98:ba:18:6a:63:9c:b9:fd:00:84:e0:c4:
ce:62:c0:cd:09:37:e8:ae:d9:98:36:ca:1d:93:b0:
b0:91:d4:a7:50:94:02:02:6c:48:41:23:1a:ab:ed:
0d:35:87:75:aa:5f:11:7b:93:f2:02:40:62:25:8e:
13:bf:95:04:b9:04:9e:4c:15:b9:4b:8a:e1:c5:21:
96:d0:f3:7a:fd:9d:47:6e:69:95:d0:de:e6:5d:59:
c7:3c:93:4d:f6:85:07:4f:69:39:0f:f8:7f:02:1a:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:AC:34:16:11:1A:32:3D:4A:F8:8C:4B:77:F8:94:F0:45:0F:0A:40
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7041e330-ade8-4af4-8d5c-9c25621b0294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f61:2000::/40
Signature Algorithm: sha256WithRSAEncryption
0d:90:4b:03:ea:71:59:f0:33:2a:d9:f0:fb:02:1d:f1:4b:29:
29:5c:b8:f6:b6:c2:f0:4e:14:21:aa:b5:71:a7:7c:a2:63:97:
16:ae:75:47:84:b2:02:87:1e:30:d7:4c:12:83:8d:a5:c7:ba:
ec:eb:57:03:15:f7:51:6a:af:e2:e1:d8:f1:43:0a:ed:1b:4f:
8d:4c:45:02:05:ed:a4:b0:7a:c8:c6:a5:1a:57:12:1c:45:d7:
1a:d8:ff:f8:f5:7e:01:5b:b2:2c:74:12:d3:77:2f:df:b4:c4:
b3:95:70:f5:9c:92:90:8a:9e:3a:c5:4b:8b:2e:14:9e:24:86:
77:3b:68:ce:6c:6d:11:b9:4b:4f:cc:92:8b:22:a8:39:d4:92:
8e:24:10:c9:a2:88:81:2a:e2:36:db:2e:3a:6a:4e:ab:4e:4f:
1e:41:5d:f7:7e:f5:2c:6d:e4:2b:0a:0f:93:18:b2:9a:29:e9:
65:aa:0a:c3:0b:35:f2:85:54:7c:04:d2:76:3f:a1:86:9e:99:
b6:e8:1b:48:89:06:bd:35:bc:17:7e:68:ff:d4:57:85:52:35:
73:77:57:95:8d:8c:27:91:a1:c2:5e:3d:74:36:6c:98:bd:ec:
f8:c4:7f:de:75:83:0e:36:08:3f:ed:4e:28:68:ec:ae:eb:50:
e2:93:14:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 3 20:38:34 2026 by rpki-client