
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa
File: 9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa (raw, json)
Hash identifier: iOmEpj78imdRmurjbrSYFmZMpiCNcYP/9FyIsZBLpPs=
Subject key identifier: 74:5D:EC:A8:24:A6:CC:7E:9E:82:EE:FD:38:3A:5B:C9:4C:F1:44:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 22F0418D60E4DA62E0C44E2391BD88F41FCB73BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa
Signing time: Fri 23 Oct 2026 00:40:06 +0000
ROA not before: Fri 23 Oct 2026 00:40:06 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:4000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f0:41:8d:60:e4:da:62:e0:c4:4e:23:91:bd:88:f4:1f:cb:73:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 00:40:06 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=582a826db7fed9232b96880476333f7064546b04d1c55fc051244d0e5f1d86b7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:a6:6d:4f:c0:92:64:37:ab:3a:8a:2a:1b:
e4:1d:30:cc:d3:c6:bb:c6:4e:48:3d:a6:07:5f:5f:
e3:97:22:25:78:43:21:6d:29:6b:29:ed:dd:ee:4e:
12:2a:d1:24:22:58:cb:74:12:5f:b2:c7:02:6b:9d:
97:3e:2a:94:ae:32:68:33:90:a0:d6:ea:8c:42:0f:
1d:e6:a2:c9:bf:c6:ba:a4:52:3e:6f:27:0f:c2:8c:
e1:36:e8:bc:b4:37:9d:a8:58:2d:31:73:ee:9f:9a:
19:d7:38:df:21:78:ec:6d:9e:aa:6c:e7:b3:9e:76:
11:48:71:fb:01:31:59:d9:8b:c0:f9:6a:e6:7d:7b:
6b:4c:32:4d:22:e7:f3:2a:b5:2b:b3:63:16:b8:0a:
e7:c7:09:7e:28:1a:b4:b3:da:18:58:f6:9b:19:95:
24:3f:f3:16:1b:41:2a:1c:4a:f4:cd:71:0d:73:c8:
08:96:40:9a:96:d5:c9:49:09:5a:8f:1c:e3:62:6d:
38:ad:07:6b:5d:03:f3:96:1a:db:5e:a8:dc:94:f9:
70:ed:e5:06:82:c3:86:f3:61:82:2d:3e:a0:01:95:
08:ac:69:0e:d1:34:0d:5f:f3:2e:31:97:45:15:dc:
2d:4d:4f:46:0e:de:55:d7:1c:f6:0e:1e:3b:90:0d:
d2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5D:EC:A8:24:A6:CC:7E:9E:82:EE:FD:38:3A:5B:C9:4C:F1:44:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bb5b3ff-d7f0-4096-afb0-76a4caac2233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:4000::/39
Signature Algorithm: sha256WithRSAEncryption
16:4c:af:11:61:1d:18:f2:18:fe:e8:f6:8d:fe:a9:59:fc:28:
e2:89:05:0a:fb:20:d5:2a:6d:17:3f:ae:a7:8f:12:41:0f:9f:
43:f7:62:a2:78:9f:94:80:52:bc:46:20:98:7b:5a:96:70:e4:
bb:2d:c1:bd:66:8f:41:b4:3b:f9:dc:5f:20:81:92:3f:76:fe:
60:c4:8f:40:a6:23:60:1b:87:c9:fb:d1:d4:2f:d9:33:9f:77:
5b:24:4d:ab:cf:cb:86:d3:fa:1e:5a:3f:28:3d:ae:70:a6:f5:
2b:ed:c1:04:9a:6d:34:7b:42:3f:66:2c:6e:90:b1:05:f0:40:
5b:c9:5d:1b:68:a4:21:95:9d:1d:5f:79:e3:2b:3c:03:4f:d9:
be:bb:ac:5c:2e:de:4b:78:58:c2:22:c3:d2:a1:ad:85:65:f2:
6f:7b:95:e0:07:c1:dc:00:aa:fa:a5:86:2e:e8:a9:1e:24:07:
3f:bf:ed:59:a6:f5:0b:4e:82:f1:2c:d7:d2:43:a6:89:e7:de:
f5:95:d3:a7:51:97:35:02:31:b1:d6:3f:d6:f2:7e:6a:18:2f:
b2:79:9d:ca:e6:d2:08:af:24:33:7f:32:18:77:bf:87:f5:97:
81:06:79:c8:31:b3:1c:41:d5:c0:f0:fb:ac:01:0b:8a:ce:e3:
21:b5:54:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Oct 31 08:17:34 2026 by rpki-client