
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9228b974-3dc7-4d13-adba-9444236c7f08.roa
File: 9228b974-3dc7-4d13-adba-9444236c7f08.roa (raw, json)
Hash identifier: ZN2EE0UCGyt/TtmspyEfSG1IIrt+xnQwJCjZH47lIc4=
Subject key identifier: 36:5B:5B:85:40:76:CE:D0:4E:B4:27:82:71:ED:53:77:88:59:CF:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 584593F0FA9438B0CAF92D82551960DB5800C565
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9228b974-3dc7-4d13-adba-9444236c7f08.roa
Signing time: Mon 03 Aug 2026 01:31:29 +0000
ROA not before: Mon 03 Aug 2026 01:31:29 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f38:2040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:45:93:f0:fa:94:38:b0:ca:f9:2d:82:55:19:60:db:58:00:c5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 01:31:29 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=3cb1eb2c856c1a8b02462651b0fe0413c75a5c76676dee5cd73baab71b909424, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f4:28:35:49:46:33:8a:ff:68:11:ee:a6:16:
6f:00:70:6c:8a:3b:33:bb:2d:8e:3a:79:36:38:c9:
f3:09:1a:bc:e7:d0:52:79:36:bd:39:52:fa:36:11:
cb:7f:a8:da:86:41:5a:18:3d:1e:97:a2:9d:90:a2:
04:99:a0:27:97:fb:45:d7:fe:b5:e0:b6:c3:58:ea:
c3:55:91:2b:cb:c0:91:15:a3:00:cc:b1:ea:2b:06:
d5:74:55:e7:a0:64:22:e2:0f:c0:4a:09:9c:c0:6c:
bf:d3:5a:6c:45:03:7b:e3:d8:46:41:8f:43:98:64:
52:09:91:66:b4:6e:cd:83:e9:86:1e:37:01:15:4c:
25:e0:42:55:00:db:5e:fd:fc:16:74:d0:2f:bb:b0:
a8:ec:a0:08:2d:ee:0c:0f:8a:f7:1f:cf:e9:a0:96:
5a:f9:77:2a:34:43:79:1b:e8:e5:0f:db:b8:9d:7b:
e2:59:d8:d4:d8:63:08:32:b5:09:a4:d7:9e:8b:d5:
3c:cd:c2:ac:c5:a8:9a:ae:c9:2c:3a:c4:6a:04:d6:
7e:3e:03:c6:6c:0c:b4:86:ac:23:e1:9d:1f:11:c1:
7d:ce:26:6a:65:0e:26:b5:86:5f:a9:97:28:65:09:
2d:29:7f:28:17:2e:47:35:e4:f8:14:d4:c5:38:bf:
b5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5B:5B:85:40:76:CE:D0:4E:B4:27:82:71:ED:53:77:88:59:CF:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9228b974-3dc7-4d13-adba-9444236c7f08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:2040::/48
Signature Algorithm: sha256WithRSAEncryption
90:c0:07:70:f9:60:16:88:85:b5:16:a7:8e:0d:0d:f0:79:ca:
ac:33:3e:5b:7b:fe:8d:92:56:01:01:6f:45:ca:49:4d:3d:81:
d3:6d:bc:a6:be:26:24:2a:1a:9f:07:96:7c:ab:fa:88:0a:4e:
2d:ac:4e:99:12:bf:b1:ae:29:90:b5:34:f1:df:78:0e:a7:0f:
44:30:13:15:ee:0c:d7:50:5b:fb:b0:72:8b:fa:d1:a3:a5:3c:
c0:96:1f:59:38:84:43:58:8e:87:80:81:92:96:d0:ba:87:ef:
2b:52:5f:53:35:46:77:ff:9a:ec:08:54:78:5c:17:c9:2f:d5:
ca:c5:32:96:f2:aa:be:18:38:10:df:e1:4c:d8:cb:cc:d0:2e:
83:82:1e:2d:fe:6e:05:74:57:2c:d4:f0:49:07:2d:4b:51:fd:
17:ba:d1:f2:83:ec:1f:97:57:ef:00:52:ec:97:ce:e3:15:b0:
00:e4:a6:7b:a7:f6:71:cd:d8:58:b5:93:d0:d6:67:41:be:91:
f0:80:2b:75:46:69:72:45:56:d1:08:c0:42:46:46:b2:91:75:
50:66:e8:e5:db:4a:31:de:fe:f6:c0:29:51:6a:77:00:b1:99:
3e:4c:c2:1f:28:b5:20:b4:0e:4d:e2:a2:58:6c:cf:a2:26:fa:
05:35:e7:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:38 2026 by rpki-client