
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/886ae314-24f5-4728-87ba-194d4c08d5af.roa
File: 886ae314-24f5-4728-87ba-194d4c08d5af.roa (raw, json)
Hash identifier: pYXK6PyrOPkEptzMmdZklKREbLXoME8nS/EVT9SkBsc=
Subject key identifier: 9F:06:2E:D6:4A:B2:0B:CA:E5:52:35:F5:53:8C:B9:C7:BB:19:DF:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3BD1E06BCAA62D7A63D25E83D134B3065B7E171A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/886ae314-24f5-4728-87ba-194d4c08d5af.roa
Signing time: Thu 22 Oct 2026 02:11:14 +0000
ROA not before: Thu 22 Oct 2026 02:11:14 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:a480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:d1:e0:6b:ca:a6:2d:7a:63:d2:5e:83:d1:34:b3:06:5b:7e:17:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 02:11:14 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=3547d3ff6767ae4d8636f02768290d63023c4bbb63e5e176839e637a933e8c9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1b:51:36:aa:d3:d2:73:ed:57:dc:98:0b:aa:
08:6a:84:ec:52:b4:a4:83:87:ee:5a:17:7b:90:bb:
e9:84:c8:b4:a5:0f:72:27:f8:36:25:f1:fb:a2:b0:
5d:dc:10:0a:ce:6d:57:13:87:97:5c:01:03:f5:fe:
14:2a:cf:d5:f0:e3:c6:ea:6f:79:10:05:92:f8:5c:
35:bb:2f:d7:63:fc:05:ff:a8:e7:c5:b7:1f:7b:61:
7d:7d:1d:1f:aa:5e:a5:95:16:d9:83:ec:03:09:d4:
2e:f4:3f:71:a0:7e:95:aa:32:9b:d7:99:df:35:50:
e4:f1:45:0b:50:71:7d:62:34:af:f7:b0:0e:d4:99:
22:d2:39:51:e5:8e:6e:01:db:ff:9e:bf:ea:9d:04:
21:b7:36:58:55:2a:b4:07:d8:e5:47:e0:af:39:04:
a4:5f:91:e5:f6:c4:4f:7c:91:c7:82:f5:14:a8:aa:
c2:33:ac:79:65:9f:0c:a0:4e:b8:3e:d7:39:9f:ef:
11:db:41:1a:f9:89:6d:bd:72:02:58:f3:42:3c:95:
0e:87:45:37:67:9c:df:02:b4:c0:6f:e2:b5:9d:84:
c4:b9:14:7a:3e:df:40:c7:db:93:2a:fb:75:53:0f:
f3:c5:3f:aa:00:44:48:a8:5c:5c:96:d0:a6:d3:3f:
1e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:2E:D6:4A:B2:0B:CA:E5:52:35:F5:53:8C:B9:C7:BB:19:DF:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/886ae314-24f5-4728-87ba-194d4c08d5af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:a480::/48
Signature Algorithm: sha256WithRSAEncryption
33:b8:a4:c7:f1:fb:7d:a5:f8:57:82:42:a3:41:06:8b:ae:d7:
91:f9:33:ed:10:62:2e:e9:a3:e4:60:1a:e4:b9:95:08:83:ed:
84:92:f6:a8:01:da:09:62:ab:ee:c5:af:ea:07:cd:31:bb:56:
84:20:f9:3d:91:e3:02:de:7a:b6:82:83:e3:54:e3:aa:3b:ce:
66:25:c4:f3:23:8e:a7:bb:e7:bb:12:89:d1:5c:33:24:48:df:
55:0e:5d:4f:e6:9b:d3:4d:83:7f:23:6c:2b:2b:ac:6d:29:16:
15:ee:7f:67:15:fd:d2:93:50:7b:64:e2:16:1a:5a:78:96:a3:
11:f6:c7:84:16:20:ef:9c:3c:7d:b8:30:e0:82:d6:08:6e:2f:
17:db:53:b7:3f:34:ca:0d:5a:e4:84:8d:e9:d4:87:5d:17:6b:
d0:a7:1b:b5:73:fc:87:7b:35:b0:8a:ef:62:be:7f:dd:68:c1:
b0:a7:cf:a2:1b:36:20:13:d2:6e:46:79:d4:3a:24:53:00:7d:
40:b4:45:30:20:2e:b7:c4:cf:37:d3:fa:94:9b:52:43:60:30:
39:89:5f:40:51:fd:75:d8:4e:d8:ba:4e:db:03:96:59:51:00:
ce:ff:9e:cc:e6:4e:1b:ec:6f:5a:0f:61:cf:48:9f:bb:28:78:
55:fe:6e:62
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Nov 3 12:02:18 2026 by rpki-client