
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa
File: 9df526d6-2843-463e-9ea7-c558b6deb39e.roa (raw, json)
Hash identifier: yBjpFv+ggoSvI+8ENezbCY1LgyEa14nXNMqiWiAeFqY=
Subject key identifier: 25:C2:2B:8A:1C:0E:35:57:A2:3E:34:3A:A5:A2:04:E0:35:C0:14:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2637BAA7CC88C79F54E39F2F04EF897E06485B49
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa
Signing time: Fri 23 Oct 2026 01:03:28 +0000
ROA not before: Fri 23 Oct 2026 01:03:28 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f38:4000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:37:ba:a7:cc:88:c7:9f:54:e3:9f:2f:04:ef:89:7e:06:48:5b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 01:03:28 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=9010f304f01162dec95bcccec9f9eddad049678b111357b3f4e4efcb478890c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c7:a9:13:87:7e:f3:c3:3b:d7:ea:44:6a:a4:
a9:4f:f0:9d:c5:fd:99:7c:a5:f0:d3:5d:b6:8d:5b:
61:78:33:a2:cc:a9:29:e2:e2:33:5f:37:56:53:7b:
97:d4:a7:2c:7a:12:a0:5c:8d:45:f1:77:0a:f0:81:
e1:ef:5e:f8:3f:43:95:31:3e:ef:a6:40:6b:7d:76:
57:8d:67:90:f1:64:6e:92:8c:84:fd:80:d5:5d:c0:
06:57:3f:bf:96:77:96:04:46:28:f8:9b:ab:2d:89:
dc:5e:25:32:a4:99:a9:7e:47:9c:77:38:bd:ee:3b:
c2:67:35:8e:48:5d:3e:04:d7:d6:b6:49:93:70:d0:
90:c5:91:ed:3a:bb:5a:ea:a6:41:9e:a8:cc:56:f8:
d8:bc:0e:f0:4e:ec:fd:b9:14:a2:9f:d4:cf:53:3e:
89:90:b3:e5:a5:05:22:ac:c4:73:ff:ce:e9:3c:6e:
a2:b5:ad:ce:c0:38:72:38:46:b3:d8:a0:74:9b:af:
d2:f0:a5:e7:f0:f9:e0:22:64:ab:35:8f:4a:93:84:
75:f1:a9:42:7d:7c:bc:e6:d0:97:18:e0:e4:a9:77:
d4:de:d0:95:c5:65:25:15:8b:b6:66:4a:06:fb:76:
95:8b:bb:dc:30:7b:e0:bd:48:60:86:81:e9:d0:8f:
72:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C2:2B:8A:1C:0E:35:57:A2:3E:34:3A:A5:A2:04:E0:35:C0:14:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9df526d6-2843-463e-9ea7-c558b6deb39e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:4000::/39
Signature Algorithm: sha256WithRSAEncryption
3e:ae:a1:1b:e0:d5:b7:39:14:25:82:22:75:f0:ba:52:78:05:
84:e8:b1:99:6b:f0:59:5d:ea:10:d9:91:dd:06:36:4f:a1:af:
9f:e2:54:50:db:f4:07:58:74:c4:05:91:94:16:b6:6d:99:6b:
1d:f3:36:4a:ec:b7:15:fa:f8:f5:cd:4c:60:44:d1:92:4f:32:
b3:71:85:f5:89:2c:0c:78:d2:d1:1b:88:45:95:b1:39:45:22:
32:9c:3e:cf:b7:35:e9:9f:52:f3:62:69:cc:2f:6e:46:1a:e9:
5b:1b:9a:ad:e9:95:29:41:ad:37:b7:55:53:b9:35:5f:82:78:
df:22:33:08:19:c0:fc:1d:f8:74:01:df:6f:5f:7a:0f:ec:44:
26:d8:12:9d:f0:fe:96:73:80:5f:9f:cb:00:73:56:cb:7e:7a:
ac:cb:1c:0b:3a:20:38:7c:50:df:1d:e9:0e:e6:c2:39:9f:1d:
fa:28:81:38:9e:5c:bb:f4:89:74:35:e2:de:24:15:d8:cb:a3:
f3:56:e4:bc:ab:66:02:7a:c5:93:5b:64:43:ca:57:ad:23:11:
a3:2d:a5:40:ed:8d:30:dd:ee:b6:78:e1:8a:b0:0f:1d:24:47:
08:c1:cc:39:66:f9:16:3b:17:1f:3b:5e:db:e0:8b:28:86:ac:
6f:7c:40:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Nov 2 16:46:29 2026 by rpki-client