
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72350e05-a538-4cbb-9205-c5d49dba58fe.roa
File: 72350e05-a538-4cbb-9205-c5d49dba58fe.roa (raw, json)
Hash identifier: i8V2naQcVJNrkfVoQ9MOoWTLV3wWx/1zIf1MvvztRks=
Subject key identifier: F3:9B:99:A5:89:00:A6:F5:8D:21:E4:3B:EC:84:C0:E6:14:DE:53:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14F156904DCE1080D72385D83F10991942E3B028
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72350e05-a538-4cbb-9205-c5d49dba58fe.roa
Signing time: Wed 09 Sep 2026 16:10:01 +0000
ROA not before: Wed 09 Sep 2026 16:10:01 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:c200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:f1:56:90:4d:ce:10:80:d7:23:85:d8:3f:10:99:19:42:e3:b0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 9 16:10:01 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=0896230074ee04534136324ca12a32639ce907460b0183d3ff8c3ddcae603019, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:59:a7:76:46:1c:f9:ff:6c:24:36:70:5a:39:
6f:97:0a:31:da:f7:76:8d:22:7b:c2:ff:ab:51:65:
f5:6c:2c:3e:35:96:b3:c8:6c:92:11:c0:eb:cf:d1:
22:f6:55:eb:eb:e7:5e:f1:e4:85:c7:39:67:63:45:
9c:0c:37:01:53:31:06:0f:b4:3d:a0:25:4e:ab:07:
af:04:c6:c7:0d:3b:f2:6a:2c:c4:2c:d6:1f:39:b3:
24:98:25:ad:3d:b2:26:ac:50:ef:ca:82:5c:b6:a9:
61:08:96:47:76:db:41:2d:6a:e1:ce:55:e7:40:f5:
04:a9:9b:89:31:f5:f2:c6:38:99:7f:a1:42:ea:4a:
10:6c:87:61:e4:5e:52:0d:8b:0b:1f:a2:a6:f0:8a:
28:0e:7e:87:1b:22:8d:74:fd:c4:c1:58:43:bd:77:
d9:b4:c3:ef:da:04:c6:ba:83:c6:bf:ac:69:d3:07:
c3:26:71:8f:1e:7c:7c:49:39:90:3b:4e:d2:12:f0:
4d:cc:2d:57:8f:18:4a:0b:72:4f:91:0c:12:c4:5c:
9a:cc:8d:06:f0:4d:ae:c9:0c:0e:c2:cc:b1:f9:9c:
ff:2f:42:28:4e:34:59:13:72:49:a1:3a:79:7b:9a:
2c:d6:45:ad:7f:15:4b:02:8e:35:6d:1f:e5:1b:26:
12:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:99:A5:89:00:A6:F5:8D:21:E4:3B:EC:84:C0:E6:14:DE:53:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/72350e05-a538-4cbb-9205-c5d49dba58fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:c200::/40
Signature Algorithm: sha256WithRSAEncryption
3c:08:d7:4b:79:60:6a:ab:ad:bf:94:12:5a:98:88:a0:49:ab:
09:b3:57:66:59:1b:b8:71:25:07:13:a5:dc:cd:88:30:aa:9c:
30:2b:fd:80:c4:e4:71:85:8a:ee:de:48:c9:81:65:96:c6:48:
0e:2a:2d:3a:ed:76:8b:0f:c5:d8:dd:72:94:97:d3:92:74:b6:
96:f4:60:05:32:cd:e9:b1:df:f7:41:80:31:25:9f:dc:3c:5a:
1a:8b:58:98:b8:c7:0c:81:64:9f:20:59:75:25:27:5c:9e:7b:
48:d0:1c:5c:14:e7:77:37:72:07:b1:d6:f3:ab:48:8d:53:6c:
03:3b:c2:be:cd:17:49:7f:b5:fb:b0:51:cd:28:73:a8:b7:cb:
14:d9:ff:0f:78:24:01:ba:f5:04:9d:63:9f:10:60:32:69:76:
d0:2c:86:5f:11:8c:59:6a:26:59:66:67:14:56:81:b3:0b:be:
e9:a0:39:bb:7c:e6:ef:bd:de:7b:68:55:92:7c:54:83:7e:00:
a0:c6:1a:8c:a3:4c:3f:07:0f:8c:73:dc:cc:13:ee:63:fd:63:
f9:49:5d:73:76:31:05:81:0d:5f:1f:90:f7:7e:cd:b3:b9:f3:
a8:f4:74:1f:44:fb:03:f3:19:b7:57:41:d8:3e:31:dd:0b:fe:
7d:da:fd:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:54:31 2026 by rpki-client