
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa
File: 9431031a-a6ce-4625-aff8-32a6f17591d6.roa (raw, json)
Hash identifier: gOiiIfkVbSFfYalw1KHwqPGkaeWcp+yr+lOfIcz/qDk=
Subject key identifier: C6:D7:14:F9:1F:B0:DA:CD:98:12:64:CC:91:F8:33:93:98:46:8B:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34540A72ED5E22977DFDECADE5EF70B5D23E7EBC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa
Signing time: Fri 31 Jul 2026 00:21:28 +0000
ROA not before: Fri 31 Jul 2026 00:21:28 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:9800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:54:0a:72:ed:5e:22:97:7d:fd:ec:ad:e5:ef:70:b5:d2:3e:7e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 00:21:28 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=58a7748e512543a8eceff6e5cc1a78aafe0d7954106b3fe24cb290fe42a6250b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:72:10:63:6e:fd:e9:eb:3a:cd:33:08:59:
7a:ed:23:5b:b7:1b:9e:8e:c5:6c:fa:9f:9e:67:97:
d7:ef:a0:d4:be:2f:ce:63:99:b2:e4:20:b7:fb:6f:
29:56:64:07:cc:21:e9:6f:7d:d8:42:6d:f3:75:9b:
a7:97:d3:b8:30:ef:53:78:3f:57:c1:02:1b:86:2f:
9b:22:ad:f7:54:23:63:fe:34:5a:21:2f:3c:04:3e:
8e:70:d3:40:db:87:e3:20:ff:f4:6a:2d:33:a5:33:
33:70:46:f0:5d:28:92:7a:03:8f:ff:8f:4e:33:de:
c5:b0:d3:a4:1a:04:28:80:0b:22:3b:94:21:66:98:
b1:75:6f:b9:5c:d8:83:93:61:f0:ec:57:79:42:94:
99:3b:2e:e9:b2:8c:f6:7a:63:b3:1b:61:6a:b1:5d:
05:a6:0f:19:83:43:a5:fd:b2:e4:d8:6b:b8:4d:ba:
e0:96:1d:b6:53:07:3e:d0:cf:fb:98:c1:c0:f5:61:
b6:2f:9f:5d:a5:fb:b8:59:a1:12:74:e5:fb:a8:0b:
e1:26:d7:fa:e2:9e:3b:7c:f0:9f:23:8f:83:39:7e:
42:98:74:e5:69:ae:b3:98:b9:33:22:ff:67:c7:66:
08:de:6e:22:7f:11:47:b3:e8:51:2f:c5:74:54:df:
8c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D7:14:F9:1F:B0:DA:CD:98:12:64:CC:91:F8:33:93:98:46:8B:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9431031a-a6ce-4625-aff8-32a6f17591d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:9800::/48
Signature Algorithm: sha256WithRSAEncryption
36:26:d1:16:68:71:2a:f0:ed:2e:6c:c9:64:17:c0:a1:7c:72:
78:6c:3e:1b:77:30:1e:19:69:fe:29:f6:cb:45:6a:43:bd:2c:
05:0d:ec:82:36:f7:b1:ae:1d:f7:a7:87:7e:90:a7:5a:2b:a2:
a4:8f:80:62:40:26:24:2c:53:52:b4:a1:32:aa:ee:7d:ad:33:
00:02:65:8b:de:ff:4f:74:a9:dc:04:c6:87:49:8e:0a:03:c8:
34:26:05:77:32:6d:c4:87:b9:c5:c3:72:30:79:f5:7c:5f:e6:
57:ea:b3:1c:d4:e4:35:31:4b:6f:b7:86:b8:a2:a8:77:30:da:
09:a2:52:97:95:f0:f5:29:90:c2:bb:98:1b:5a:3b:2d:84:b1:
8a:06:25:1e:fd:4e:7e:2c:eb:63:19:b6:5d:e9:90:f3:c5:c8:
a9:4d:e1:ab:af:f8:ac:fe:31:7f:80:31:3f:42:66:5b:74:3b:
6f:75:4c:07:85:d4:f1:8b:4b:de:1e:66:cd:5b:d6:9a:42:cc:
73:2d:e7:c2:b3:06:9a:79:ca:c5:d1:85:d2:5e:c7:0c:74:73:
ed:d8:61:02:ae:bc:ef:0e:eb:55:a7:50:8c:ec:f8:f6:80:77:
c2:76:b4:3b:d7:74:6b:33:aa:74:b0:a9:f0:e2:17:72:cb:dc:
f1:69:bc:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:45:16 2026 by rpki-client