
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
File: 8c09eb33-9642-4506-acdc-cda09a75dedd.roa (raw, json)
Hash identifier: WV3JEYdt81qYbXEX1ssJGkq3cNMz5J7VEXW29Y3KnVI=
Subject key identifier: C4:49:D8:66:E2:3B:6B:F4:2E:FA:AB:50:B3:A2:26:CB:6B:C6:17:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32BE88A9FE825A59A61901AEECA6A50EE3D9C635
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
Signing time: Tue 04 Aug 2026 02:00:10 +0000
ROA not before: Tue 04 Aug 2026 02:00:10 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:be:88:a9:fe:82:5a:59:a6:19:01:ae:ec:a6:a5:0e:e3:d9:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 02:00:10 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=5cc1954efab3829770cffde5a826916fd120dfee782d37149d7cceafa120a65f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:7b:3a:a6:a5:19:be:6b:85:51:31:58:69:
dc:6a:d6:e5:c4:58:2e:8a:de:9c:41:99:7a:25:2f:
0d:a5:a6:c7:9e:f2:86:fd:23:a5:28:ca:4c:d9:b3:
d1:84:0a:70:51:6a:39:ad:c6:5d:1e:44:24:d1:a9:
01:67:2b:48:b9:76:6d:f9:3a:cf:37:a7:42:2f:1d:
20:76:f3:d8:1e:e4:e1:89:61:69:a0:c3:05:3b:f6:
c2:18:5f:0c:ce:3a:16:c7:ec:72:c0:ec:3a:a3:e0:
94:c0:3a:0c:9b:f4:1c:f7:99:8f:c4:48:f2:51:42:
1d:1a:fb:69:a0:59:6b:a0:60:7c:d4:9a:7b:11:d4:
8f:9d:f4:e9:b0:0f:70:3d:58:20:0b:49:2c:aa:b1:
93:ab:a1:b1:9b:24:e6:8e:0e:77:33:4f:9a:6d:85:
09:fd:c3:fe:e6:75:40:f1:65:26:00:d7:f4:c9:72:
44:c1:89:4a:75:bb:4b:7a:90:ec:e2:08:a5:64:65:
81:58:bb:18:fa:18:f0:03:14:54:01:8c:f1:f0:a0:
fa:1b:80:7e:3f:5a:fc:bf:91:a3:49:4e:62:a3:c7:
49:68:50:c1:d9:41:24:72:87:bd:39:24:38:58:b4:
47:7f:23:91:79:7d:94:21:5f:ce:5d:ef:7e:35:13:
28:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:49:D8:66:E2:3B:6B:F4:2E:FA:AB:50:B3:A2:26:CB:6B:C6:17:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:1000::/40
Signature Algorithm: sha256WithRSAEncryption
40:d0:7e:14:5c:65:47:bf:a6:b1:b5:cc:70:03:3a:9f:7a:fb:
b0:26:11:ed:c2:ef:a5:4a:b2:18:46:c0:a9:87:db:03:18:7e:
8b:e7:b1:af:e6:cc:17:2d:ac:90:7f:0a:44:5e:89:fe:3c:88:
75:31:0d:eb:bf:ac:4f:57:56:18:98:1c:47:97:b4:9b:6e:78:
56:00:ee:56:af:36:ed:d7:8e:b9:3b:24:61:8c:a7:43:db:33:
ad:8b:be:7c:0c:24:86:25:cc:14:40:70:a1:62:64:13:56:d6:
cc:8f:a8:73:c0:37:47:90:ec:55:2e:34:9e:77:b2:61:6a:d4:
bd:62:70:c3:34:db:cf:37:3b:12:bf:9e:1e:dd:b1:01:93:f7:
4f:49:5d:e0:05:74:f6:bf:f4:11:7d:b0:f5:f9:ce:c5:42:79:
d0:90:64:a4:eb:75:78:9c:ef:b3:74:74:13:b5:3d:9b:e2:e3:
dc:d9:4f:6d:5d:6f:5c:e5:1e:dc:52:54:8c:92:3e:0b:4e:34:
b4:fd:59:f3:10:c7:b0:4b:3d:32:51:73:63:3f:ca:ac:6a:d9:
fb:06:24:66:11:ff:ed:6a:1a:72:12:c4:bb:4e:7d:75:3c:73:
94:b3:6d:48:ad:aa:65:6c:88:5e:67:6c:55:f7:9a:70:d5:9d:
cf:98:9f:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:54:25 2026 by rpki-client