
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa
File: 88fc7b11-27c5-436c-9c47-2bc31fd12223.roa (raw, json)
Hash identifier: 4UkBwBbE+vu1lDKwKqkMs6lQLQzqjL7adCL4Bd+BxRg=
Subject key identifier: 80:12:F4:66:06:F4:B1:18:C6:AE:F0:AD:0D:D4:F4:FE:5C:4A:E9:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A963DCCC5DD9AD28630EC0BF3F1F337C6774CBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa
Signing time: Thu 08 Oct 2026 00:51:04 +0000
ROA not before: Thu 08 Oct 2026 00:51:04 +0000
ROA not after: Wed 06 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f68:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:96:3d:cc:c5:dd:9a:d2:86:30:ec:0b:f3:f1:f3:37:c6:77:4c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 8 00:51:04 2026 GMT
Not After : Jan 6 23:59:59 2027 GMT
Subject: serialNumber=ccd0812fa77cbcc33e6341dde0292cd27df8c014118d203fd2676cde280c365b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:59:2f:28:d8:56:4a:9c:d3:00:92:c2:d1:50:
b0:63:87:06:e1:b7:58:d7:62:af:27:9d:92:00:10:
81:2e:d8:6f:d4:94:00:9a:f5:15:3d:72:3d:35:85:
f9:60:6c:5d:69:d4:43:b6:24:fb:a2:15:69:da:cc:
33:e8:69:e0:2f:5a:1e:66:65:18:d9:45:24:4e:86:
74:86:05:ec:9f:be:c1:4b:d8:ee:a6:6a:a0:1a:27:
c2:fc:18:33:ba:58:30:51:d2:c7:75:f7:e8:fe:09:
0d:4e:dc:ff:28:7d:73:f9:22:47:0f:d6:61:08:6d:
9b:18:bc:af:67:54:5d:18:36:a9:57:dd:f0:85:8f:
a8:31:e8:e8:68:0a:0f:7f:a8:5e:5d:d4:7f:db:01:
d2:7a:d2:2c:30:32:9d:ed:4b:7b:61:9e:4a:3f:4e:
63:2e:c2:f3:95:61:29:96:45:f3:0b:90:24:8a:49:
7e:d3:94:6e:43:88:58:29:93:e5:e6:3b:9e:9e:b2:
5e:a7:65:08:b0:a2:4c:8b:c6:4b:b1:8c:8f:e7:9b:
98:0f:e4:73:97:4f:c9:22:e1:37:b0:5e:1d:18:64:
b1:2f:ce:15:06:5f:7b:68:fd:25:e7:f6:9c:26:6b:
1a:74:f3:ae:a9:29:ae:4a:27:5f:1a:5c:df:9e:5b:
d3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:12:F4:66:06:F4:B1:18:C6:AE:F0:AD:0D:D4:F4:FE:5C:4A:E9:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fc7b11-27c5-436c-9c47-2bc31fd12223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f68:c000::/40
Signature Algorithm: sha256WithRSAEncryption
17:b3:b2:94:f3:d1:cc:0e:26:8b:27:57:a1:fe:01:e4:f7:d9:
b4:d7:7b:d5:f9:a8:64:92:a5:c4:cf:19:d9:14:dd:d5:10:18:
46:4b:da:56:f7:66:94:3a:53:da:f8:37:ec:4b:b6:53:0c:f3:
88:aa:6d:6b:b8:02:31:75:f4:6f:7f:ab:f1:e1:f7:34:3b:c0:
f9:2c:ae:a3:be:c0:c5:8e:6f:ec:0e:cb:41:64:8f:d1:05:df:
0f:9b:c0:cf:c9:4a:ef:88:86:fb:bd:9b:79:b4:4b:44:b5:ce:
9b:0f:8a:fc:a1:3a:56:41:3d:c1:d2:dd:92:69:05:bd:6c:6a:
ca:a5:11:01:c5:b4:c9:eb:28:ac:a0:bd:a8:0b:05:68:84:46:
2d:b6:53:82:1d:49:99:12:9e:b6:d0:f9:d1:42:ee:d3:99:23:
4c:96:b7:57:9f:97:a0:36:ab:de:5d:dd:42:70:b6:c6:32:de:
0d:4e:9d:81:bc:a6:e6:dd:49:98:63:35:60:92:04:01:fc:98:
aa:12:d1:81:3f:9b:4c:a4:60:82:0c:d9:2c:ff:d2:5e:2c:52:
43:15:8e:da:84:3d:ea:fa:1e:36:15:1e:90:ea:df:bc:1a:1d:
3d:18:be:64:8e:54:d1:d8:a6:14:c3:71:a1:da:ea:4c:87:43:
cc:7a:2d:ce
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:44 2026 by rpki-client