
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86491bff-a18c-468b-8ce7-feb5e225cb7e.roa
File: 86491bff-a18c-468b-8ce7-feb5e225cb7e.roa (raw, json)
Hash identifier: dU5nfq1aUxkHBqN7ScHe8rGD4lrFCuj8ciN34e5gMTI=
Subject key identifier: 4B:FE:75:0A:6B:E1:E7:94:5E:B0:9F:01:DB:AE:D2:B8:95:03:15:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 094B89D5318B85B5C2207F51713174D166278114
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86491bff-a18c-468b-8ce7-feb5e225cb7e.roa
Signing time: Mon 10 Aug 2026 00:41:23 +0000
ROA not before: Mon 10 Aug 2026 00:41:23 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe0:4000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:4b:89:d5:31:8b:85:b5:c2:20:7f:51:71:31:74:d1:66:27:81:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:41:23 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=0650aa6c3a50ede496085041afbe726718e5f335249cb0d05ccfe2b9d30dc50f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:57:b7:03:8f:a1:92:1e:0f:b6:2b:a8:a2:
d3:52:f3:71:29:a3:fa:50:ad:ab:47:7c:df:c4:2c:
4f:d1:d9:a1:f6:26:37:fa:f3:62:ca:76:41:99:06:
19:2b:ea:62:35:05:49:d7:3a:87:0b:d3:cc:21:d4:
d3:48:3b:f6:6f:a6:e9:6e:d9:95:6c:5d:55:88:cf:
a5:86:5b:03:44:93:41:f6:4a:e3:b7:95:11:b8:b3:
b3:60:cc:6f:df:52:33:e9:04:43:65:25:b5:35:60:
98:da:5d:94:be:65:fe:bd:14:0d:ce:ad:18:22:f7:
51:ba:e0:03:c9:b4:32:c0:82:45:2f:38:e7:ae:74:
33:49:d6:8e:69:66:40:3d:b3:1f:d6:f5:dd:00:54:
42:c6:4c:2e:d4:d2:72:a2:74:6f:fc:88:64:4a:f3:
4d:3e:82:89:1b:d4:25:cb:4f:53:6d:20:f8:46:45:
36:bd:5c:0b:87:c5:8d:56:12:51:c6:25:07:fe:20:
3c:da:86:a5:e8:cc:7c:ab:2b:61:27:eb:ff:54:2f:
ee:b1:03:00:3d:25:ad:96:cd:b5:f8:d5:e4:61:26:
51:e5:22:f8:c5:dc:e9:ad:16:a8:85:63:12:ee:06:
58:f9:fa:9e:6c:3a:64:ac:c4:3e:d1:4e:95:61:9f:
61:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:75:0A:6B:E1:E7:94:5E:B0:9F:01:DB:AE:D2:B8:95:03:15:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86491bff-a18c-468b-8ce7-feb5e225cb7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe0:4000::/39
Signature Algorithm: sha256WithRSAEncryption
4c:12:72:70:90:2d:9c:5e:6b:95:a1:56:e0:45:4a:7b:be:66:
e0:57:5c:fc:a3:da:3d:0a:aa:0b:32:92:d3:b6:20:50:f9:0a:
08:3e:7f:0b:13:c4:40:9a:04:73:d7:94:16:dc:2c:d3:e3:ae:
cc:b3:ac:39:89:4b:db:c9:d5:ce:53:5e:c3:40:87:94:e8:8b:
94:76:70:6d:24:5e:78:6d:af:c1:28:60:1e:62:1f:65:f8:36:
a4:0e:71:f9:ef:b9:b7:e1:fb:dd:95:e7:1b:e8:13:e8:f6:b8:
36:51:fa:1a:ed:12:fc:7d:7d:97:ec:a6:8a:59:ce:15:e2:2b:
7e:dc:97:5e:42:e4:33:82:00:7a:af:84:98:62:8d:34:f2:c7:
0c:16:75:9b:f0:b2:b4:ee:92:fc:c9:f6:3d:15:f3:20:50:05:
5b:0a:75:ce:42:dd:d5:f5:5f:b0:ba:64:3f:82:c1:be:54:48:
89:0e:48:62:28:ef:90:c9:76:41:71:5b:8c:7e:36:01:ff:33:
00:98:7a:36:05:2b:40:c1:b7:bd:5c:85:18:c2:ef:2a:45:dd:
f1:74:7b:14:78:cd:62:7c:dc:3b:ba:d5:68:2d:3f:56:d9:8e:
42:df:6c:f8:18:30:15:34:5c:a1:8b:58:9b:60:b7:52:a2:91:
51:4e:ab:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:48:00 2026 by rpki-client