
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71bb72ac-9bb3-4ad5-9677-9828c851be59.roa
File: 71bb72ac-9bb3-4ad5-9677-9828c851be59.roa (raw, json)
Hash identifier: FKZaXBFsXUxBDsQNr+IOLF0TXTN2W1loL31D6I7Dbzg=
Subject key identifier: A6:97:10:8C:A8:A6:6D:10:8C:12:1D:5E:DD:F0:3B:8C:64:AB:41:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6557D69D8380AC2E39868D78AB170483C90CD0D6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71bb72ac-9bb3-4ad5-9677-9828c851be59.roa
Signing time: Mon 10 Aug 2026 00:40:09 +0000
ROA not before: Mon 10 Aug 2026 00:40:09 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe2:8000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:57:d6:9d:83:80:ac:2e:39:86:8d:78:ab:17:04:83:c9:0c:d0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:40:09 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=f43c181fa79d17a71dd383ebae2f127082fe19b8f1433b9b8eac6c88103bcb28, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:5e:72:bb:0c:60:49:01:77:72:05:a8:36:
bf:0f:8a:c0:9b:1e:bc:b1:71:68:d3:42:cf:7c:35:
75:78:c5:6c:5f:29:69:e6:89:a8:cc:c3:ca:8f:4b:
c0:46:7d:d9:47:7d:df:f2:f9:9c:a5:7d:c5:56:e8:
2f:a3:7b:6e:13:6d:a4:a5:d7:41:97:9e:14:23:1c:
17:b4:f5:20:f2:fe:08:59:67:8b:e9:e1:87:c3:8a:
74:4c:ab:08:50:7c:ae:c3:6e:de:a5:99:35:d7:1f:
aa:9e:ec:ef:f4:53:f9:01:e1:28:42:b6:b6:06:29:
cc:62:29:ea:b8:8c:03:9c:4f:e8:e8:7d:65:7c:a8:
c6:d9:4a:bd:33:b4:c5:1e:bc:65:f0:ce:76:ec:b5:
7c:11:ca:c8:ed:87:0a:77:50:04:05:3a:da:e9:a5:
a0:3f:30:57:99:13:2c:bb:a1:6b:25:2d:70:10:8d:
ab:d4:4f:fc:78:a8:75:84:aa:35:12:49:e6:36:97:
56:c4:b6:cc:58:05:d9:b5:32:7f:7a:69:66:21:8e:
32:0e:2d:58:cd:58:a1:02:82:5b:82:9f:76:54:82:
79:7c:56:ad:2f:b7:9e:c1:1d:98:d3:07:f5:d0:cb:
a6:32:00:eb:9c:2c:63:86:0a:cc:93:a3:19:82:ae:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:97:10:8C:A8:A6:6D:10:8C:12:1D:5E:DD:F0:3B:8C:64:AB:41:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/71bb72ac-9bb3-4ad5-9677-9828c851be59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe2:8000::/39
Signature Algorithm: sha256WithRSAEncryption
37:c1:7d:ae:82:43:52:70:0c:29:e2:d0:15:5f:3a:5b:78:ff:
c6:24:e7:b2:9f:bd:20:a4:4d:2c:07:32:db:81:09:ab:7d:8d:
2d:86:38:d5:37:47:01:21:f0:d5:28:7b:a6:9e:cd:4f:11:f2:
35:22:e2:3d:17:97:bb:b2:86:9d:1f:ad:de:40:54:97:12:cf:
8f:88:3b:60:8e:98:61:75:63:61:15:09:7b:17:47:12:03:7a:
fe:b9:c2:1c:c9:71:2e:9c:28:8f:06:bb:f8:c4:c1:85:35:16:
9d:ff:fe:09:17:8d:d2:f6:66:9a:07:74:f2:3f:ab:7a:da:49:
f5:02:c6:0f:7b:bf:04:74:46:9c:c0:68:34:ea:f0:48:84:63:
90:3f:99:a7:03:56:34:89:66:53:86:7b:00:53:b1:83:88:85:
a7:1b:1f:7e:ad:3c:49:09:20:bc:af:11:05:cd:9e:b5:9b:4c:
44:fe:b1:4b:19:6b:6a:6d:a3:73:47:2c:c4:7f:3a:89:5c:4d:
3e:2f:66:46:a0:b1:d2:f8:80:62:8c:a2:eb:8c:63:36:e2:68:
a4:ae:6c:92:ce:b6:a2:3e:8d:ec:5e:03:4b:5c:77:c2:3e:58:
ac:f7:93:46:cd:77:f8:19:05:35:c3:4c:21:42:7c:27:0d:b5:
ab:71:b1:dd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:18:06 2026 by rpki-client