
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
File: 90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa (raw, json)
Hash identifier: kmP2CbAkBBI43bZmOTRRy5uG3kj033RU9/uwKkwLLDM=
Subject key identifier: 6B:D3:E7:DE:B7:3A:8E:37:41:78:D5:D9:01:CC:29:9E:63:A9:6A:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D0EF4315BA374ED84B214E882206C8BA33502AF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
Signing time: Wed 29 Apr 2026 00:21:07 +0000
ROA not before: Wed 29 Apr 2026 00:21:07 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff9:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:0e:f4:31:5b:a3:74:ed:84:b2:14:e8:82:20:6c:8b:a3:35:02:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:21:07 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=251afd8ce80b4bfe9a438c2aa962ad8e64d7c5baeb26bd01cea666fc0e3e5a92, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cd:3c:fc:68:e1:67:6c:2f:b7:5b:d4:09:00:
38:1d:9d:f9:f5:30:aa:79:d8:05:40:8e:cb:72:8f:
36:17:77:76:67:29:00:e4:fb:11:6e:9c:c9:fd:2e:
4b:d6:15:27:82:07:27:b7:e7:a7:16:15:d7:fd:4a:
3c:2a:fc:bb:84:9d:9a:a1:c1:af:c2:1a:6b:44:a0:
81:44:58:0f:81:09:05:60:c1:23:21:7f:6d:14:65:
1d:f2:9f:d8:ea:7d:d5:4b:3a:c7:17:ed:81:c5:c3:
b6:83:56:43:86:50:10:c7:1b:6e:8a:43:46:cd:e3:
87:f7:13:06:1b:3d:b7:1c:bc:fa:e3:91:33:cf:0c:
57:9a:0e:59:95:49:b6:df:cc:7b:1b:29:e3:15:d0:
fb:8c:98:7b:85:de:29:d3:2a:b6:ff:d8:d4:14:de:
59:3f:ec:0f:09:32:a9:37:c6:29:e8:32:78:76:28:
a3:82:5e:30:c7:77:55:40:5a:62:45:b7:dd:0d:0c:
09:62:0d:f5:ee:ad:c2:40:39:1a:dc:93:9f:38:1b:
d8:1d:49:e2:54:10:82:c3:69:6c:b0:e9:d7:65:ea:
a6:85:ba:e1:ca:22:cf:20:a7:5a:2c:91:da:bc:09:
8a:b3:ab:5f:54:1f:a0:45:48:9d:67:13:aa:01:cb:
0e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D3:E7:DE:B7:3A:8E:37:41:78:D5:D9:01:CC:29:9E:63:A9:6A:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff9:5000::/40
Signature Algorithm: sha256WithRSAEncryption
07:18:f5:f1:94:f9:4e:dd:7b:d9:d6:4a:89:3c:4e:e7:6e:d4:
60:40:70:0f:e4:5a:2f:eb:9b:8f:e1:6b:a2:bb:eb:04:fc:4e:
af:1d:27:25:1c:05:88:1f:11:6e:8f:39:9d:ee:ab:fd:8e:64:
c9:5b:6a:d5:c8:c9:78:2a:31:07:34:f2:d2:fc:23:30:9e:10:
6d:f6:9e:6b:8a:e5:03:e9:c8:6d:5f:a1:c5:cd:4b:41:80:72:
e7:85:0d:7b:d2:fa:cd:bb:7f:9b:b4:98:7f:68:eb:02:ef:34:
aa:1d:d8:dc:72:04:33:50:5a:4d:fe:07:6e:94:69:48:e3:57:
6c:98:e1:48:c8:56:1c:bd:46:47:3b:8b:95:1f:d0:b3:2e:2d:
7a:e3:ca:70:56:a1:e3:82:2b:bd:31:1c:60:c3:c0:78:af:e9:
c3:21:20:95:04:28:f4:e5:08:d3:c9:5a:7a:e5:f0:3d:fb:ab:
38:07:1d:68:b9:78:87:68:1b:c6:00:73:2f:95:d9:e4:ff:99:
6a:4c:4b:e2:1e:64:c4:01:9b:7c:c0:7c:e8:2a:7c:70:22:0e:
f6:55:c7:5d:72:b5:ac:ee:39:88:40:56:e7:ee:6f:98:45:06:
3d:2f:ef:5e:38:bd:6a:75:b3:bb:98:99:00:16:40:83:b0:df:
c0:dc:eb:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun May 3 16:12:04 2026 by rpki-client