
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9814519b-e29c-45df-b37a-f202bfa4d2cd.roa
File: 9814519b-e29c-45df-b37a-f202bfa4d2cd.roa (raw, json)
Hash identifier: mnx99LLRnJ5mLkEgb0Z5VseIIp+1d9mPNA+xyNUYHuA=
Subject key identifier: 03:11:38:3B:AE:12:79:FC:FA:4B:E9:2B:39:28:4B:85:D3:EE:59:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 75E6E03896ECE59DA6513CBABDE1AE4107C962CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9814519b-e29c-45df-b37a-f202bfa4d2cd.roa
Signing time: Tue 04 Aug 2026 01:51:17 +0000
ROA not before: Tue 04 Aug 2026 01:51:17 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f70:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e6:e0:38:96:ec:e5:9d:a6:51:3c:ba:bd:e1:ae:41:07:c9:62:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 01:51:17 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=28a3cabcff80fdeadff618a1edf41846c240be6db48aa12bea71623eabee1d85, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:26:f6:13:d6:54:3e:89:3d:e1:2f:9e:0b:
ac:9e:41:46:4a:5e:36:cf:6e:74:f8:73:3c:d4:e3:
4a:fa:15:13:49:33:38:ea:d7:8b:2b:67:f9:f7:a9:
7c:97:c4:83:fd:b4:a9:21:cb:15:38:f5:8e:ea:c4:
39:8a:22:5a:03:e0:c1:43:f6:37:32:7f:4e:02:4e:
36:fb:40:fa:4c:e0:6d:fd:52:10:fb:87:48:b8:20:
83:7f:1d:41:fe:11:05:3b:08:8f:81:d5:ad:1b:96:
75:81:ab:93:f0:cc:c3:1c:fe:2a:4c:59:3b:1b:56:
e8:c0:89:32:47:94:7c:12:94:4a:84:ec:15:64:05:
3e:c4:24:18:87:c7:ed:17:41:df:ee:db:51:45:7d:
a4:56:93:52:1f:89:1e:73:00:eb:fd:81:88:b2:fa:
5b:b2:2d:5c:0d:d5:c3:af:d8:fa:fb:8e:30:8f:c7:
24:7f:79:41:eb:4d:93:69:2d:85:33:13:22:f3:d9:
b1:59:7b:46:bc:a6:0c:af:f4:09:29:b7:fa:65:77:
7d:66:3b:ec:47:de:0c:47:45:c9:8c:97:84:b7:a7:
4e:6a:46:6e:69:4e:fe:c5:a0:1f:81:f6:e0:27:a2:
52:40:ab:42:84:75:67:71:dd:ed:ab:6c:8d:58:b8:
42:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:38:3B:AE:12:79:FC:FA:4B:E9:2B:39:28:4B:85:D3:EE:59:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9814519b-e29c-45df-b37a-f202bfa4d2cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f70:5000::/40
Signature Algorithm: sha256WithRSAEncryption
18:30:8a:52:2d:f5:1a:26:e2:46:4b:d7:18:4f:0a:85:3e:e3:
b4:59:f3:98:d1:cf:79:a2:eb:ab:3f:cd:8c:74:38:71:7d:64:
e9:c8:83:67:e0:f7:ed:67:cc:5a:8c:98:ef:a7:9b:ad:02:c8:
18:01:1d:e7:c7:43:a8:a6:94:14:69:d2:e1:ba:14:28:de:8a:
67:ee:3a:b5:78:79:2b:b9:4f:42:1d:af:2d:c3:7a:2b:19:e3:
30:97:c2:c6:f1:36:c1:76:1a:42:81:ef:94:a2:c2:12:f1:2c:
70:74:6b:da:7e:b5:e1:ed:b4:54:21:fa:a4:18:12:a2:fd:4d:
31:b6:e2:40:ea:7f:df:d9:40:b8:29:19:13:75:09:4b:e8:71:
ec:71:44:f9:12:d4:80:87:a5:bc:52:78:3f:e2:2a:5e:fa:22:
ca:00:a7:4b:ad:0a:ed:72:5b:18:76:a6:d2:84:6a:e6:f7:30:
e6:96:a3:5d:7c:2b:b3:2f:b2:42:a8:bb:b2:a1:79:04:31:cc:
5e:4d:9f:5b:6b:24:9e:3a:28:73:56:96:31:cf:35:76:be:15:
79:ec:bc:ba:07:e9:7e:52:9a:6f:05:c7:2c:03:39:d6:63:51:
a0:8a:fc:e3:9a:1e:f0:eb:ba:f2:32:38:7f:94:5d:e7:d6:a2:
40:40:2e:0a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:44:58 2026 by rpki-client