
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49e7430-fd14-41b4-bb97-da60e900926a.roa
File: a49e7430-fd14-41b4-bb97-da60e900926a.roa (raw, json)
Hash identifier: oa1oXUiZB6y6DX1LmQ7oO12ZEgyudOhlIQMah5bLMfI=
Subject key identifier: 68:72:D6:7C:4F:D1:39:A2:D3:80:D3:D4:4C:4F:22:81:EF:4D:9D:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 121254C4382D042B0F1B60D8ED2D1F7C678DAE9D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49e7430-fd14-41b4-bb97-da60e900926a.roa
Signing time: Sun 30 Aug 2026 00:00:07 +0000
ROA not before: Sun 30 Aug 2026 00:00:07 +0000
ROA not after: Sat 28 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff5:8000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:12:54:c4:38:2d:04:2b:0f:1b:60:d8:ed:2d:1f:7c:67:8d:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 30 00:00:07 2026 GMT
Not After : Nov 28 23:59:59 2026 GMT
Subject: serialNumber=9ebf36db6add72120f4d28da11859c65cc949c84883ae704521430a5b828946b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:d3:f4:1c:f6:a5:fb:3a:6c:e2:fd:74:82:
f8:a4:57:79:27:1d:90:8a:03:3c:96:53:c6:1c:89:
30:9d:d1:92:5a:01:b6:b3:d7:a2:dc:39:7b:a1:14:
ae:0f:ea:0c:8d:ed:1e:42:55:be:98:78:9f:8d:95:
92:b7:69:b5:7e:e2:9f:ca:32:3b:34:52:f2:16:a4:
a9:fc:1a:2b:02:f0:3e:d2:cd:55:26:a8:11:d2:ef:
77:b3:e1:fa:29:c0:e9:2f:62:73:02:33:7e:ca:79:
72:4d:04:29:b5:6a:de:c6:db:a1:e1:c8:3e:40:3e:
b2:ec:e2:fc:30:d7:ee:9a:4f:2e:fc:f1:f4:fa:f1:
b4:98:a9:fd:e8:f9:ae:9c:37:d7:54:c9:fe:dc:e6:
96:f2:35:26:df:80:15:6a:01:77:6e:8a:d4:9f:2d:
36:5c:1c:40:34:74:20:f7:41:1a:40:96:0c:0d:8b:
79:1d:c7:d5:8b:10:01:c3:5f:df:9d:3e:5b:87:60:
35:4f:b3:85:74:ac:d7:c6:17:b9:07:6c:c6:5e:7a:
99:46:36:b8:62:19:57:b8:af:4f:2d:01:76:15:e2:
95:ad:c1:26:84:92:68:24:ae:ac:b4:30:89:1b:32:
f4:00:a6:aa:24:fc:c8:d8:3e:b4:d5:b5:8d:3d:c0:
79:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:72:D6:7C:4F:D1:39:A2:D3:80:D3:D4:4C:4F:22:81:EF:4D:9D:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a49e7430-fd14-41b4-bb97-da60e900926a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff5:8000::/38
Signature Algorithm: sha256WithRSAEncryption
c8:99:ee:9b:8a:cc:f5:13:2b:ca:7f:15:33:9d:90:d2:6b:70:
78:70:cc:1f:33:6b:17:4f:bf:7d:b4:26:70:f5:45:27:91:17:
53:93:91:c4:68:3a:4f:a7:a1:db:b9:8f:01:aa:63:45:0f:82:
b4:c1:a5:10:9b:ee:e9:55:6d:e3:4c:14:6f:b0:1e:45:a5:a2:
ff:8b:85:bc:48:8c:6f:97:5e:eb:76:cd:a8:37:7a:93:d8:48:
39:3b:c3:ad:c1:7a:9a:e5:4f:cc:3d:a8:c5:c2:5f:17:95:c9:
d8:02:8a:12:d3:61:7f:34:4c:54:25:43:3c:2d:1f:94:40:ea:
17:b8:fc:0c:75:f0:df:a4:a4:42:4f:32:f3:29:5e:d6:c9:b2:
99:e4:73:58:c3:1f:61:8e:2b:46:79:36:1a:ae:b7:41:6d:c7:
f6:1c:e2:fe:4e:e8:3a:a8:39:52:07:03:d2:3a:e7:d2:fc:e4:
51:52:bc:e6:c9:19:09:03:85:58:49:78:85:96:ff:b0:a5:b3:
60:c3:65:93:0e:48:10:46:e2:3b:0e:e5:92:ca:d5:2d:18:4b:
d7:14:39:bf:71:94:a3:8b:1d:b4:b9:e5:cf:66:09:39:af:53:
ab:2f:78:93:b5:27:aa:49:98:d9:0f:82:ea:f3:be:f6:89:b1:
54:71:27:4c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:21:09 2026 by rpki-client