
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
File: 75e564e6-dc69-4fde-a5ef-ec9609456180.roa (raw, json)
Hash identifier: +bY+0agtaFCHsQeym4Uf1WOMahQEA0dOvjsNcgrFOyQ=
Subject key identifier: DF:EC:9B:93:2C:97:B2:9B:9B:93:2F:FD:BD:29:3A:22:EB:E3:C8:EA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A2347304E44E8D036CAC2A9A5405CAFB8717614
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
Signing time: Fri 23 Oct 2026 01:10:33 +0000
ROA not before: Fri 23 Oct 2026 01:10:33 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:3400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:23:47:30:4e:44:e8:d0:36:ca:c2:a9:a5:40:5c:af:b8:71:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 01:10:33 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=96e11548d749544e827a2388575cb4134497031c6cb0c40485933ad60e146028, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:df:5c:9f:1c:a2:d6:90:39:a2:a8:9d:9a:a9:
1d:db:68:b4:45:a7:4e:03:a7:5e:1f:48:c9:e3:83:
f2:22:0d:2a:b2:7f:fb:46:8e:ca:44:64:39:ff:2b:
a0:96:fd:36:de:88:db:15:a4:37:30:50:64:20:22:
0a:6f:bd:48:02:31:86:72:3e:dc:86:9b:f8:e9:cd:
0e:fb:3c:3b:39:24:93:f0:bb:86:38:15:ff:df:59:
36:6d:c9:92:b9:9e:0f:1e:8f:47:0b:13:f5:65:ef:
a7:80:9b:0d:26:94:ff:ab:c2:0c:38:ba:d3:2c:6a:
48:ae:61:4b:62:52:de:a6:d4:41:48:17:57:bc:41:
96:55:bd:f9:62:a6:da:86:87:fe:90:27:31:43:d0:
50:c3:52:6a:17:40:3f:97:b4:8d:80:a1:05:4a:0e:
da:03:34:cb:5f:d6:56:f7:03:98:db:a2:96:f8:a6:
38:7d:b8:41:14:f7:62:1a:2b:00:93:6e:27:f1:06:
4b:e3:60:04:83:fe:51:ca:49:fb:40:ed:00:a4:32:
ad:72:37:01:5c:b5:32:b9:12:72:9b:58:0c:20:82:
29:ca:b8:a1:ef:1c:b8:92:60:ee:e7:db:36:f9:e0:
bb:85:0b:a2:27:bf:f8:4d:69:c8:a2:ff:42:de:15:
e1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:9B:93:2C:97:B2:9B:9B:93:2F:FD:BD:29:3A:22:EB:E3:C8:EA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/75e564e6-dc69-4fde-a5ef-ec9609456180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:3400::/40
Signature Algorithm: sha256WithRSAEncryption
9c:37:a7:4c:1f:a4:57:81:1f:3b:48:a3:8f:88:e3:99:06:56:
88:9d:de:7a:ce:45:65:30:ae:3c:f3:f7:27:7d:d5:6f:5d:a3:
e0:43:80:09:97:7d:44:e2:67:fe:6e:e2:9c:52:90:cd:85:11:
41:eb:a4:51:a5:6e:cc:2d:7e:41:ce:c0:74:ab:0a:68:9f:ad:
73:0d:b3:db:8a:c8:c5:eb:3c:6e:e8:e6:96:95:dc:d6:34:d9:
7e:8f:fc:ea:3e:87:e7:dd:46:f7:e0:6d:a2:0a:80:bf:81:24:
63:1b:ed:ff:5d:8c:9c:b3:d0:ae:d8:15:27:6c:4e:34:00:d8:
df:f5:7a:6f:52:ac:36:73:00:da:07:04:c0:58:e4:32:fb:46:
1c:d9:af:0b:af:92:3b:7a:b2:93:a1:ba:bc:0f:9f:dc:80:64:
12:a7:4d:fe:b5:5c:75:19:ad:91:52:3a:b2:c9:9e:26:2a:ee:
9c:4f:f7:32:ac:28:ab:63:0a:30:46:2c:30:2e:66:d3:9a:83:
ce:d7:57:04:a6:77:51:54:65:24:97:7c:89:ef:a5:78:77:fd:
93:ed:24:25:fd:79:1e:99:8f:71:ea:43:4e:63:ea:1d:d0:b3:
c4:23:8e:cc:e8:3d:fd:dc:a5:3a:87:1b:1f:85:64:85:39:03:
34:59:d3:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 16:47:16 2026 by rpki-client