
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa
File: 7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa (raw, json)
Hash identifier: jmacWAsjDH3rAq4q9bdJ5NSp09DsSwOy489eBEcWbPs=
Subject key identifier: A8:C1:D3:A7:9A:4B:BE:89:E0:12:82:02:75:C1:65:A4:32:29:B1:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F2C292A0910F6638ED3C746C4DB17AA09E20556
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa
Signing time: Tue 06 Oct 2026 00:31:46 +0000
ROA not before: Tue 06 Oct 2026 00:31:46 +0000
ROA not after: Mon 04 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:2c:29:2a:09:10:f6:63:8e:d3:c7:46:c4:db:17:aa:09:e2:05:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 00:31:46 2026 GMT
Not After : Jan 4 23:59:59 2027 GMT
Subject: serialNumber=ad4c6ca1fccb020d4b1db102b8ab9bb5d025b34c145c59d9b43c2ff19af220a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:62:cc:c5:7f:36:8f:87:01:6e:c7:d2:3b:17:
da:ad:b5:72:21:6d:5f:d2:01:95:f1:6e:07:4e:3e:
61:27:2f:47:f9:7c:1e:4a:c2:06:f9:69:b1:bc:42:
80:ac:03:ff:67:42:8d:fe:8d:50:d7:e9:6a:c5:c4:
73:74:c3:b9:66:54:24:9f:8d:65:a3:80:39:6d:4e:
8b:35:64:db:b9:4a:c2:05:1d:2d:d6:55:71:0e:4d:
60:af:de:55:d7:94:a0:ad:83:49:65:f8:87:03:79:
8a:68:59:4c:59:9a:40:58:c8:6d:47:c0:43:d7:df:
7f:c5:8a:52:9c:46:c6:e6:9c:7d:72:5d:14:8c:21:
64:a8:0e:74:93:bf:55:49:60:2b:b5:d2:8d:20:53:
19:e4:28:6b:af:66:32:ff:9b:fe:68:65:94:6a:3e:
7b:17:3f:0a:fb:33:4f:a3:a1:fe:af:a2:fc:0c:ef:
89:01:d2:7b:c2:00:db:96:a5:48:c2:01:4a:7f:51:
f3:08:46:63:17:fa:eb:ef:e8:a7:94:32:1a:ba:ca:
67:f3:6e:66:b1:07:ee:5f:f3:6f:ca:92:b5:7d:b5:
c5:55:9a:c4:ab:05:ae:81:ef:05:a1:18:cc:37:28:
32:13:78:1d:31:f6:80:35:05:02:34:ee:7c:86:c0:
c1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C1:D3:A7:9A:4B:BE:89:E0:12:82:02:75:C1:65:A4:32:29:B1:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7488d36c-11a1-4b7f-ad9e-71af6b1fa8ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:c000::/40
Signature Algorithm: sha256WithRSAEncryption
cc:41:d4:ce:88:03:65:df:52:f1:bc:41:65:97:82:5e:92:ca:
61:0b:d2:a3:cf:6e:3b:29:5e:38:c7:4f:d5:c5:7c:cf:cf:a7:
60:f0:59:1d:2d:14:63:92:da:13:25:5d:d0:49:54:56:f4:a3:
87:ee:3b:35:0c:3a:9d:92:37:d9:e5:47:80:04:fd:02:e3:06:
32:da:f9:77:45:33:39:c1:21:66:d8:e4:6f:bb:ea:14:e1:03:
85:36:80:45:4d:72:28:3d:45:52:9b:c4:71:1c:e1:5d:a2:de:
93:f9:fa:33:3d:d0:b9:09:ce:73:73:44:71:e2:28:a4:08:89:
a8:d4:aa:50:7b:0c:6e:2c:66:95:03:34:e2:29:2d:5a:d7:97:
68:31:b4:ea:80:fb:bb:26:51:7f:18:6f:2c:a5:70:ca:60:0b:
9f:50:3c:9f:e3:51:25:25:1e:e8:62:6a:5c:91:f7:32:49:b2:
d6:d0:d8:67:7b:31:bc:1b:68:54:90:0e:54:4c:8c:94:c3:82:
b6:07:86:bd:2c:cf:f3:16:7a:57:c1:82:3a:c9:d4:85:33:ff:
74:b1:02:0f:58:2e:44:65:08:2d:e0:a9:f3:8a:8e:99:e1:4e:
36:79:69:c7:85:67:59:51:72:fc:22:87:9c:fd:8b:57:8d:e5:
04:52:ce:01
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:56:46 2026 by rpki-client