
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa
File: 97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa (raw, json)
Hash identifier: s+RN3O02BWbsHJoiV3LNjB6gkpT7jvxmO403YycXQ4k=
Subject key identifier: AF:6C:30:8A:CE:E9:F5:AD:6B:B9:E2:7A:21:C9:6C:60:F5:C3:F4:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2407D82D594201D314A2A6BCB2117EED425164
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa
Signing time: Thu 10 Sep 2026 00:20:04 +0000
ROA not before: Thu 10 Sep 2026 00:20:04 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2d:c000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:07:d8:2d:59:42:01:d3:14:a2:a6:bc:b2:11:7e:ed:42:51:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 10 00:20:04 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=5f5138b550f2272de30ed78c7fabba4fcc990414669044304012f445203636fd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:9d:9a:63:5d:a0:35:c6:4d:1c:00:32:b2:f8:
d6:a9:8a:2b:d9:b2:61:4b:76:0c:5c:36:85:55:ce:
b7:7d:0d:a6:ba:bc:45:00:11:1d:47:8c:60:4a:8d:
8a:8b:90:20:08:3a:b8:63:d8:a9:a7:e8:07:4a:e0:
bf:6b:95:44:2f:18:aa:21:84:44:cd:7d:68:e1:72:
d6:a4:fb:63:6d:24:86:0a:6a:de:79:85:66:e1:27:
5e:9b:df:18:01:0b:70:be:88:bf:ad:1f:94:1f:fa:
61:bd:c2:e0:0d:38:f7:22:96:29:f2:0f:e3:96:45:
6b:55:30:83:bf:00:5c:8c:4f:9a:d3:e7:24:a3:31:
61:76:b2:d1:93:39:4c:d8:96:0e:9b:55:88:5a:33:
21:98:5b:26:c4:0f:22:a9:e7:1c:c3:41:36:ca:e6:
2b:8e:0d:da:25:d3:30:56:d8:11:5c:ac:86:5d:88:
1c:b6:18:25:56:36:1e:7e:c9:cc:77:dc:ea:79:9e:
4b:ae:00:3f:7a:94:4b:2f:d4:31:0c:4c:9e:bc:cb:
2b:75:00:67:f9:c4:cc:84:29:6a:8d:fb:c1:ef:30:
cb:71:41:97:54:1d:de:2a:e4:5f:8f:81:72:ea:10:
89:ac:78:80:82:8c:a7:63:f3:75:89:48:cb:4e:39:
1f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6C:30:8A:CE:E9:F5:AD:6B:B9:E2:7A:21:C9:6C:60:F5:C3:F4:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/97b3cbc3-4709-409c-b305-fcfb0195d1cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2d:c000::/36
Signature Algorithm: sha256WithRSAEncryption
cd:a4:59:c3:d7:ab:82:d6:76:83:43:32:61:55:b9:da:64:60:
95:24:35:0f:83:13:55:0c:76:33:ad:6a:3e:74:bb:9b:ae:d5:
f0:e4:fb:88:a7:25:a2:c4:cc:ae:dc:0f:4b:53:8f:4b:7c:9b:
76:bf:67:d7:7c:fb:39:77:ca:b6:aa:37:49:b5:b8:66:7a:53:
8e:09:b8:e7:29:45:5a:f3:9c:05:f0:3e:1c:66:d9:04:53:53:
78:99:9a:6c:b0:98:14:30:34:43:95:91:39:2a:65:f6:a6:f8:
37:d0:15:fc:6b:b2:43:01:50:63:00:62:6a:70:34:71:f1:15:
3b:a7:56:da:23:bb:8c:d1:be:88:fc:d2:78:d1:de:bd:a7:55:
1e:54:61:54:10:2c:a2:84:02:47:fa:f8:a8:d0:b2:c9:c6:bb:
7b:47:7f:43:6b:54:43:21:11:a3:73:0e:63:4a:b8:f2:c7:7d:
78:d0:1c:53:7e:a7:5f:70:1e:e8:6a:4b:c9:df:bd:9d:a7:5b:
bc:b1:39:e8:cb:55:a5:2f:f7:8c:99:22:c8:80:55:ae:a8:63:
ae:e5:30:5a:d8:5b:7d:74:6e:b0:d7:23:69:1f:8c:3d:28:36:
ef:32:74:fe:c1:5c:35:ff:f1:4d:48:c3:fe:74:b9:5c:c8:55:
35:62:1d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:15:12 2026 by rpki-client