
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
File: 940d4db1-8435-4b14-9f65-40384956f3cf.roa (raw, json)
Hash identifier: AE+W9RylpyqH44S0yceexoRy/JQwjB8BFi7Pu9tLAfI=
Subject key identifier: C3:FF:6D:68:E9:AD:04:2F:0C:54:DE:F9:9E:66:20:A6:16:D4:98:0E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 640EC2189DC96A145533EE631CA1F2C9255F3571
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
Signing time: Sat 08 Aug 2026 00:11:19 +0000
ROA not before: Sat 08 Aug 2026 00:11:19 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.51.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0e:c2:18:9d:c9:6a:14:55:33:ee:63:1c:a1:f2:c9:25:5f:35:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 8 00:11:19 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=69917005d723475fe8bdc136795147ab2fce20779fbce9e1d99d191200e09c95, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:cd:34:60:4e:a8:94:e6:b6:85:73:93:ea:
b8:b4:30:56:74:2a:d7:04:5e:4c:c7:50:f3:fa:65:
04:b5:71:53:21:5f:07:71:87:95:38:b4:a4:8d:e8:
ca:93:91:cd:50:e7:d5:21:6b:3c:89:3a:66:be:9f:
c7:40:2a:b1:7a:af:fd:02:0a:33:01:a5:6a:dc:e1:
06:a6:71:1b:be:c0:06:29:d3:7d:37:36:03:69:a4:
48:cf:04:3a:b2:f0:53:96:61:57:d6:3d:c5:af:2f:
d3:8c:f1:d0:18:1a:2c:64:93:42:63:2e:de:d5:80:
8a:c8:f5:94:7f:49:9c:25:b2:47:69:cd:95:10:0a:
cf:ed:ea:52:40:44:dc:fb:15:ba:d3:60:5e:c1:31:
c8:c3:b0:37:dc:a2:76:93:d1:09:20:6f:4c:1e:56:
cd:d6:6d:f6:67:a5:53:99:0d:86:42:08:d5:fe:16:
7f:47:7c:df:10:3e:f0:e5:e4:5e:b3:aa:a3:34:1b:
62:ea:d7:82:f2:3e:f0:3f:7e:0d:6f:6b:f8:58:36:
b1:6c:74:85:5d:4d:c3:09:25:6d:9b:04:ce:01:1f:
e8:ca:25:06:f3:91:4a:12:df:40:06:b6:0a:f0:7e:
02:fa:1a:ab:c3:68:54:02:93:50:9b:ba:61:82:d3:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:FF:6D:68:E9:AD:04:2F:0C:54:DE:F9:9E:66:20:A6:16:D4:98:0E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/940d4db1-8435-4b14-9f65-40384956f3cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.51.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:61:b5:99:51:4a:29:9f:54:fd:b9:77:c7:6e:bf:62:7b:99:
f1:77:78:e5:d5:24:fe:f3:60:b7:09:9f:be:94:ca:53:7d:a8:
29:c2:36:97:5f:0c:2b:1e:12:20:28:09:08:c9:41:46:f3:5e:
4a:18:d7:b8:bd:04:1b:45:c7:31:b8:a7:e4:c2:28:04:38:c1:
8c:82:bc:57:8a:a4:cd:71:ec:e0:e6:3f:0b:4e:47:eb:25:48:
9a:de:f0:17:92:cd:b2:da:d4:a4:29:1d:eb:f2:06:2e:d8:df:
3b:01:87:5c:6b:6e:d3:72:b1:12:8a:9e:1c:24:1a:b3:1f:2d:
5b:90:33:6f:a2:a5:0d:07:c8:52:9e:7e:6d:6f:6e:04:41:99:
a3:c5:6e:4c:71:7e:87:85:e0:5a:dc:9c:d1:69:f6:79:ed:27:
27:95:b5:00:3e:2c:a2:69:21:28:3f:62:d4:74:e2:2b:1f:04:
a6:9b:e7:a7:78:c9:d9:31:26:61:6c:ef:32:95:57:41:6c:27:
d9:4b:d4:6a:ed:86:d1:20:a6:b1:58:ef:3a:c8:73:3d:67:5d:
b0:49:4d:04:a2:4f:00:f1:79:ab:40:9f:d5:84:ea:57:6b:14:
0f:23:70:79:64:fb:c7:64:ad:eb:c4:e5:05:7b:a7:77:6c:f2:
7f:b3:6f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:09:09 2026 by rpki-client