
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa
File: 94209e4d-7b05-4729-b164-804591eea8be.roa (raw, json)
Hash identifier: 1W/Z2uWvsLQmzYK1p1OauW/Wao02bztYVgdW3gQg2Cs=
Subject key identifier: 3F:89:5B:C2:9F:DB:7C:F9:07:51:48:CF:86:37:BF:36:F2:7E:45:16
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 01D42E08EA3370F3A32AD8F40B34F8FA8737AC82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa
Signing time: Fri 23 Oct 2026 00:30:15 +0000
ROA not before: Fri 23 Oct 2026 00:30:15 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb8:3400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:d4:2e:08:ea:33:70:f3:a3:2a:d8:f4:0b:34:f8:fa:87:37:ac:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 00:30:15 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=d1dcc3a586eb05912e3a9a206e64f4bc86ae80b4bf729318956716762bdde22e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:96:11:82:f0:d7:f0:77:9e:ba:4a:78:0f:
84:df:9c:a9:6d:72:4a:56:46:53:76:32:25:9f:b4:
5e:87:e0:ba:0c:8d:45:87:f6:b4:2f:71:47:49:16:
71:71:6c:0a:bc:fa:57:50:e6:77:21:c2:09:44:9b:
7a:27:05:91:c5:6d:8a:5f:6d:b3:93:ca:a1:f0:90:
e8:02:b7:70:2d:e5:34:5b:60:4c:b7:0e:95:23:47:
39:3a:01:9f:ad:5e:eb:3f:a3:f1:da:df:fd:54:fc:
8a:77:40:1e:64:ec:40:4a:ab:88:63:bd:8e:74:80:
4e:22:93:58:7c:f6:b1:a6:8a:37:83:d7:ee:9a:17:
21:d5:5f:1b:92:cf:85:35:f2:63:9b:eb:c6:4f:c8:
6e:4c:e6:92:bc:d6:ce:8d:b0:fa:1c:f5:39:61:2e:
df:30:3f:0c:59:b7:d4:67:a7:b8:79:4e:c6:2f:33:
cb:22:ce:33:12:51:da:e7:79:b2:49:05:a5:78:ab:
f1:5f:b8:b6:36:42:3d:df:5a:48:e4:0f:9f:f4:c1:
87:00:71:2a:c0:3b:0f:4c:0a:68:62:42:90:c0:44:
8e:d1:2b:2a:11:0a:78:71:73:5b:ea:f8:27:d9:5f:
79:d1:d0:2a:6b:a8:8e:49:bb:28:57:05:a2:a6:c2:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:89:5B:C2:9F:DB:7C:F9:07:51:48:CF:86:37:BF:36:F2:7E:45:16
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94209e4d-7b05-4729-b164-804591eea8be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb8:3400::/40
Signature Algorithm: sha256WithRSAEncryption
21:b5:55:51:dc:8f:a0:70:8f:84:6c:4f:d8:d5:d7:79:70:ba:
89:e6:d0:ab:5a:ec:49:88:7c:09:0d:04:3b:87:ba:00:13:fa:
33:d2:e4:d7:62:57:18:f1:69:bb:4b:90:85:1a:4f:01:b4:64:
99:86:c3:4c:d7:d0:97:5f:3a:96:68:75:8f:cc:07:04:63:ef:
2f:e9:4e:68:9e:98:5a:db:3c:1d:3c:42:ed:2f:fa:3f:e0:b8:
f5:60:8a:f0:e4:fc:c4:c5:95:21:03:96:ae:ed:1e:83:57:49:
1f:25:8d:f4:20:2d:57:c3:99:9a:0a:c7:ee:81:60:45:83:99:
4d:67:86:ac:2b:fe:6b:d1:12:a1:16:e2:c4:9c:6e:4f:b0:9c:
98:5f:82:db:d1:a1:8f:53:93:4e:88:4c:07:bc:29:b6:34:03:
9e:fd:9c:4c:10:0d:5c:30:91:a9:7c:32:58:1a:3f:89:1c:80:
38:60:fc:e5:be:a4:79:37:a8:9f:6a:8c:88:24:35:46:be:cd:
0f:1b:49:a8:6d:00:0f:13:08:a8:3e:d2:c1:c5:2d:c8:9f:f7:
cb:ef:24:25:b6:3e:5d:1a:ea:74:f2:78:c1:2c:20:d2:41:51:
16:1e:d2:63:c8:4e:ed:b4:0b:a3:7f:8f:f3:58:a4:87:06:8d:
0e:8c:f9:a6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:52:15 2026 by rpki-client