
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/939318d0-97d2-4b27-ba23-677a8a85bc63.roa
File: 939318d0-97d2-4b27-ba23-677a8a85bc63.roa (raw, json)
Hash identifier: abW0jzDzXOqNV146Olab0mJWPMVM0vnVBFwim0D6RxU=
Subject key identifier: 62:77:FB:66:2E:6F:24:B7:A6:3B:01:81:70:F9:43:15:B1:21:A8:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 02239D87C1A3116FEB7ADBAD69C812AB0D51919B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/939318d0-97d2-4b27-ba23-677a8a85bc63.roa
Signing time: Thu 29 Oct 2026 00:51:11 +0000
ROA not before: Thu 29 Oct 2026 00:51:11 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:8c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:23:9d:87:c1:a3:11:6f:eb:7a:db:ad:69:c8:12:ab:0d:51:91:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 00:51:11 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=48e2fc6723956ca9b4e7b2658b9c978fe50f8f8502f0d9a1344d41bf3dd1d713, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:e1:38:64:1f:af:5b:8a:b3:84:03:4c:0f:
03:1d:c4:6c:53:62:28:2a:c4:9f:55:11:47:2c:b5:
dc:c7:3a:4b:6b:da:00:22:fb:9a:d3:b1:31:44:a6:
6d:41:f3:fb:21:50:27:fa:9b:ab:35:d8:af:17:1d:
ba:b9:55:e4:3c:54:58:ff:4b:07:d2:32:f8:e2:09:
fd:5f:e2:84:69:10:51:35:97:f8:5e:db:ff:d1:10:
9f:0c:40:c0:e2:09:15:c6:b7:b5:e9:c5:56:33:15:
4a:bf:db:24:81:42:6e:13:e3:b4:a2:38:7c:b6:e8:
86:0d:e2:23:51:49:b5:16:f6:b1:8a:e5:2f:d3:84:
cd:31:ce:e8:2a:41:17:87:32:a8:e0:bc:b6:08:50:
e6:65:ef:1e:5a:ca:b0:01:04:7e:1b:7d:5e:d2:bb:
f6:f0:32:fc:f9:6a:58:43:bb:a1:a6:8f:09:6d:fb:
41:db:96:23:f6:62:02:fe:46:ba:f8:1e:e1:8d:18:
84:9b:d2:c1:f7:31:f8:10:de:52:93:55:67:74:c3:
2d:5b:00:5a:ef:39:61:63:ca:7c:bb:5a:d2:3a:92:
10:ef:98:e6:48:0c:7e:01:a9:fd:7e:f5:6d:03:29:
c2:a8:45:cc:1f:57:c2:1d:d1:d4:63:71:8a:16:95:
fb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:77:FB:66:2E:6F:24:B7:A6:3B:01:81:70:F9:43:15:B1:21:A8:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/939318d0-97d2-4b27-ba23-677a8a85bc63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:8c0::/46
Signature Algorithm: sha256WithRSAEncryption
d4:63:a2:6a:c8:1d:62:58:b0:5b:aa:c4:f4:7a:05:d1:9d:04:
e0:68:01:56:e6:e2:83:2b:20:97:ff:41:82:fe:32:a7:f3:f1:
f5:f9:9f:3e:e4:13:cc:06:0a:ee:d0:d3:0b:e6:e1:09:73:34:
7c:a8:3e:23:e1:a3:a3:ee:cd:da:5f:a9:4b:2b:83:a9:40:e1:
c0:6f:68:83:4e:f5:82:ee:f3:ea:ca:92:2e:6c:74:0c:9c:f0:
9d:6a:cc:60:37:56:56:7c:c7:db:2b:45:a2:44:70:fa:41:c8:
4f:58:d3:21:97:39:65:fa:5d:13:fe:ae:cb:8b:eb:65:db:69:
89:fd:fb:e0:af:59:05:9d:9c:48:c4:07:98:19:39:97:06:71:
32:37:40:b3:f5:ec:60:6e:99:8c:5f:ae:18:b3:7a:52:c2:24:
ec:d6:24:7c:e5:16:22:b3:85:b2:b8:6d:22:0e:80:1e:14:cd:
b3:ef:e5:9a:e3:5e:d5:83:cd:73:05:30:74:10:13:c1:53:4c:
29:fa:0a:a7:1d:f7:7f:87:9d:6f:1a:26:54:94:b2:75:22:69:
8c:1d:b8:6e:e4:19:16:b7:d2:b3:ce:eb:82:7a:aa:0b:86:a5:
b8:84:ef:ea:c8:f2:98:95:43:78:d2:c2:d9:14:ab:63:f2:53:
41:b6:d2:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:48:28 2026 by rpki-client