
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa
File: 7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa (raw, json)
Hash identifier: 6M3QaiNqaemLu1KzaVK5jWw4fWuYKmMJh4npcpl+0bo=
Subject key identifier: A9:6D:DC:72:2E:77:5D:D7:CD:4D:2B:F2:36:4B:9F:DC:1E:37:28:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 098E57E1CD20D1386960C8CAF28E3F00C971D295
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa
Signing time: Mon 03 Aug 2026 01:11:28 +0000
ROA not before: Mon 03 Aug 2026 01:11:28 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:8020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:8e:57:e1:cd:20:d1:38:69:60:c8:ca:f2:8e:3f:00:c9:71:d2:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 01:11:28 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=1d9625ab59b8459dd69d4996f5113a9a38bc126a9fc1e84b2428ae14f8f2c91f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:60:3b:cf:cf:0c:8a:12:1c:9a:58:5c:d7:
44:bb:6b:ba:79:f4:1b:e0:e2:6f:67:ef:e3:27:32:
1d:02:e1:ed:73:6c:0c:60:79:b6:f0:5d:56:89:d4:
29:55:77:b7:09:dd:1f:02:94:cf:5a:11:03:de:8c:
49:ac:d2:96:e7:7c:5a:89:f5:5c:b2:cf:d5:81:a7:
f7:50:59:9c:34:e6:d9:b0:12:6f:69:ba:fa:ab:a5:
e8:1d:f9:4e:b5:e4:da:4d:a7:94:f2:7d:f3:53:46:
3c:a2:0b:f3:20:b3:6e:34:19:8a:ff:34:e0:c2:a8:
f2:b6:71:42:2d:4d:cd:78:ab:1a:75:94:d5:e5:9e:
c0:b2:46:ad:b5:2f:2a:95:0d:7a:0c:ca:29:75:db:
82:c8:cb:4e:e1:63:e1:e7:c3:7a:5b:13:4a:ca:c6:
db:8f:9c:55:e3:3c:75:e0:01:73:dc:47:a1:fe:c0:
71:f9:23:55:ea:b5:a2:2f:ee:fc:74:30:af:c5:bd:
ac:40:6e:53:56:56:d9:a8:12:0a:44:a5:df:7c:f4:
af:f0:b3:dd:53:12:55:43:21:9c:8f:c4:b4:3c:21:
a0:b9:fe:a3:dc:57:2c:e8:ef:06:e0:1a:31:dc:c1:
db:69:88:75:5c:e1:ff:57:4d:08:03:62:bb:92:60:
a3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6D:DC:72:2E:77:5D:D7:CD:4D:2B:F2:36:4B:9F:DC:1E:37:28:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7ab2a0a7-60f3-4a9f-9098-2b33486a7a43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:8020::/48
Signature Algorithm: sha256WithRSAEncryption
35:4e:cf:01:bf:81:95:42:62:5c:01:36:af:e4:6f:1e:16:b9:
50:ee:ce:89:89:09:c7:7d:d4:2a:50:55:0d:ef:6f:29:60:4f:
b2:45:24:c8:7d:f7:e2:5f:57:50:63:2f:00:e0:87:2d:fe:a0:
f7:72:0e:1b:aa:d6:d8:f0:0c:0b:30:bb:d0:79:93:1c:6d:ea:
6d:f8:30:50:9e:49:e1:0e:0c:d9:29:ee:1e:35:61:11:10:63:
36:77:d8:48:f7:4e:c1:ed:4c:00:ef:7f:6f:c6:2a:03:eb:bd:
b2:31:e9:03:16:5b:4b:d0:c6:be:1a:ef:6f:fc:1f:fb:51:0b:
37:2e:77:1a:91:76:82:8e:14:3c:28:d1:31:7d:27:7c:df:1a:
3c:81:8a:41:6b:22:d2:d7:64:19:11:08:21:38:d1:1d:22:4d:
9d:50:b1:19:9b:e3:8b:ad:16:09:d3:b7:09:56:f3:79:5c:00:
bf:5c:47:0b:84:0d:c3:66:5c:09:11:22:f3:9b:a0:42:15:53:
7c:bf:33:2f:44:3a:c0:d7:f5:61:fd:e0:6b:54:ac:f1:02:8e:
3d:de:f4:46:c1:2b:14:87:00:59:7f:e1:40:85:ff:b4:1a:52:
2a:0f:5b:8a:9e:8a:ac:c4:ed:54:03:6b:f6:37:76:25:a1:c7:
0c:98:c7:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:42:08 2026 by rpki-client