
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76ba4ac3-30aa-4e60-a04c-b8fd5ab7779d.roa
File: 76ba4ac3-30aa-4e60-a04c-b8fd5ab7779d.roa (raw, json)
Hash identifier: P2Wx3kbxi5VMsbv2BBRn8HppO5xAkMTQMYYz588SSy0=
Subject key identifier: 7D:52:5D:4F:1F:BA:4B:91:37:6C:6B:3C:B5:6A:33:39:23:ED:B3:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5C8DE7881BAF0911791E0E385FA25B809F1D6D58
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76ba4ac3-30aa-4e60-a04c-b8fd5ab7779d.roa
Signing time: Wed 09 Sep 2026 16:05:25 +0000
ROA not before: Wed 09 Sep 2026 16:05:25 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff4:e200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8d:e7:88:1b:af:09:11:79:1e:0e:38:5f:a2:5b:80:9f:1d:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 9 16:05:25 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=14ce218d243e3c3707a74db8113140981451338f14682301435d324fb276f413, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:4c:a5:8d:e1:d1:bb:6d:ac:f0:b7:42:2d:8e:
8e:4b:aa:6b:12:dc:4f:e9:bc:74:e7:de:af:69:3c:
fe:77:1a:1c:77:f4:2a:0a:08:07:2b:a8:8a:76:b1:
fc:ba:b4:6d:c1:20:7e:0b:ec:4a:4b:28:ca:41:45:
08:4d:a6:3e:9c:7a:49:40:d9:d7:7e:00:53:51:66:
81:c4:f6:98:59:a7:ca:3c:a0:39:2e:22:50:5d:01:
f1:b6:4c:8b:c8:d5:06:6c:97:a1:00:69:77:b1:cd:
00:9a:f9:cd:cc:c8:dd:c8:a6:73:bf:68:ca:4a:e3:
0e:bc:76:2d:d8:b2:6b:a4:f8:a6:04:47:6b:70:13:
40:fe:ab:62:a9:b7:7c:fc:55:66:d4:dc:db:31:81:
de:6b:e8:51:b8:db:d5:c6:ae:bc:ff:ec:a1:73:91:
d0:5b:59:3d:51:df:8e:f8:6a:f8:2f:ef:19:d0:f9:
2d:a2:fd:74:be:df:34:72:c4:56:aa:e4:0c:26:4d:
59:5c:ec:04:47:cb:d6:ea:18:f9:61:58:17:ee:9e:
57:e1:27:8b:3f:7f:74:54:12:1e:03:b6:8d:d8:7b:
db:61:b9:b0:98:69:54:22:fc:74:47:84:5d:46:ba:
ef:52:4e:9b:ee:f9:90:83:cc:f7:6b:c3:70:cd:61:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:52:5D:4F:1F:BA:4B:91:37:6C:6B:3C:B5:6A:33:39:23:ED:B3:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/76ba4ac3-30aa-4e60-a04c-b8fd5ab7779d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:e200::/40
Signature Algorithm: sha256WithRSAEncryption
28:9c:44:28:93:ce:d9:52:ce:94:e5:d5:df:32:4d:c6:5c:a1:
9c:ed:ba:2f:b3:7c:20:bc:56:1a:c0:65:ff:63:12:8f:6f:37:
0c:8b:e8:3c:d6:80:06:55:25:f6:d2:29:f3:cc:af:46:fb:4e:
b2:61:b2:45:b1:3c:0c:7d:a7:81:a0:7f:1b:7a:57:fc:ec:3e:
81:d2:12:38:a7:b7:73:d6:46:dc:56:53:4e:20:d8:3d:3c:be:
06:92:80:08:83:90:7a:8c:0a:bd:02:24:21:46:f2:39:02:3d:
be:4c:25:5c:ec:fb:86:ba:1d:4d:b3:fa:12:65:d8:72:8b:25:
e5:7c:f9:c6:a9:f9:62:5a:20:3f:1a:3c:aa:c1:ea:cc:a1:66:
3d:54:cc:57:84:8c:0e:b3:4f:1a:75:17:ed:bb:a3:4a:27:54:
02:be:26:d5:30:75:cc:49:01:38:cc:5e:56:9d:00:ef:bc:15:
b9:9a:3f:d3:e8:5d:36:d4:02:fc:17:fa:4a:12:33:53:ea:35:
4f:66:71:e9:66:75:67:80:42:c1:d0:25:4c:59:cc:37:d4:7e:
f2:db:7e:84:20:e6:db:b9:b7:00:dc:25:9a:f2:23:50:e2:9d:
92:32:22:e7:f4:b1:20:97:a5:95:cb:a5:c2:1d:57:63:41:20:
a9:57:b4:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:42:55 2026 by rpki-client