
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9329df6e-d3c0-435c-9a13-f009c71ae52b.roa
File: 9329df6e-d3c0-435c-9a13-f009c71ae52b.roa (raw, json)
Hash identifier: ZPzjqcO9izg5VPN9iA4mJoWJ4TyindJA+SF2L+pfco0=
Subject key identifier: 00:D6:9D:AD:48:99:E4:AE:C7:5C:0E:D0:0B:99:26:96:D7:82:B1:7D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F13BDD04ED0D13EAAA472F8FE64636062168584
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9329df6e-d3c0-435c-9a13-f009c71ae52b.roa
Signing time: Wed 05 Aug 2026 00:40:07 +0000
ROA not before: Wed 05 Aug 2026 00:40:07 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:8080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:13:bd:d0:4e:d0:d1:3e:aa:a4:72:f8:fe:64:63:60:62:16:85:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:40:07 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=c6cded3da2ba43a4715a8cdf19a7db0bf27784c8259a57cfce5f30c39a45eeef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:5d:49:2c:64:b2:77:88:fe:43:58:9e:1c:
b2:2e:23:e3:47:a7:d1:34:3d:ce:d4:d2:01:c5:14:
21:d9:b3:fc:ec:7f:eb:d8:87:ea:bc:ef:80:91:87:
e0:0b:6e:b8:3d:f8:84:dc:7e:f9:ba:db:f4:59:68:
4b:f4:82:b2:ca:53:22:e1:70:7b:27:f2:8c:00:29:
5b:dc:fc:71:f3:a1:f6:f6:10:6c:a8:fa:bf:16:61:
59:d9:97:60:a1:e7:05:dd:0e:ca:9a:b3:e9:f2:5d:
32:b3:a3:c7:f1:30:38:a9:6b:a9:7b:b5:3c:c7:2c:
0c:5f:4c:ab:1e:1b:5d:7c:32:ca:fb:16:e3:69:10:
3e:7f:4a:8b:5e:c8:8e:34:85:f4:43:87:5b:7c:7a:
c8:98:d8:ca:d7:59:f6:b0:0b:be:18:ff:b0:ce:4c:
dc:89:31:0b:26:5b:53:9f:f1:a1:cb:ba:de:6c:1b:
16:4a:5e:3b:7e:b5:ea:8b:df:05:fa:d9:6b:ce:21:
04:e4:64:b6:5a:a7:1c:54:c8:b6:38:4a:ec:76:bd:
22:6c:fe:54:21:81:34:45:a9:0f:93:4e:87:d9:5d:
82:9c:bf:7a:cf:3a:34:77:0a:cf:df:bd:88:c5:c8:
0c:fe:41:ae:96:20:7b:30:ea:0d:da:c3:76:8d:e9:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D6:9D:AD:48:99:E4:AE:C7:5C:0E:D0:0B:99:26:96:D7:82:B1:7D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9329df6e-d3c0-435c-9a13-f009c71ae52b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:8080::/46
Signature Algorithm: sha256WithRSAEncryption
9c:28:f1:ea:a2:e8:7c:9b:71:be:21:a4:06:e6:55:76:55:82:
0c:4e:0b:3b:be:b7:be:c8:ce:04:84:60:48:18:7f:44:63:46:
27:3f:a4:c0:42:ca:16:6f:41:66:a9:bd:27:d2:12:7c:a8:05:
83:96:32:12:b0:d6:e6:7d:62:33:2e:27:c3:e1:e3:2a:c3:3f:
a5:63:0c:64:36:b2:73:50:fe:5f:3f:e6:82:a0:1e:ab:84:28:
70:ad:d0:27:de:f4:2c:91:d0:5a:2f:53:b6:46:e0:68:75:2d:
21:a9:eb:7a:ce:80:6a:22:3f:30:34:82:a9:5a:9d:69:1e:16:
f5:ca:8b:eb:46:95:24:fe:71:ce:80:3f:2e:89:2a:f9:4b:8e:
d1:7f:e1:66:fd:90:60:a8:12:2e:30:d2:4a:67:d2:a1:e1:9e:
8b:26:bd:c2:9e:51:00:ae:a1:ed:f0:71:34:9d:5f:a1:e3:2a:
6a:3e:4f:c6:59:9d:87:39:53:cb:22:a0:32:43:3c:42:41:85:
0c:93:d5:58:e8:dd:11:e1:c7:a5:9c:7f:62:58:5c:39:57:81:
10:88:47:7c:38:f2:bd:32:be:dd:20:f4:bd:b0:8c:9f:c8:8c:
5e:0b:87:1b:71:8a:93:9b:75:28:bb:42:f5:4f:b9:63:e9:4e:
fc:1f:41:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:48 2026 by rpki-client