
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
File: a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa (raw, json)
Hash identifier: E8zZVpBHjMVR74aGlA3vx+qKabqdr31zhhCDHy+i9f0=
Subject key identifier: 01:67:09:54:B5:32:95:04:76:04:27:51:B9:7E:37:E7:2C:20:98:8D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 084D7B4C7E536F7FA418CAE0AD97EF7D8025FF36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
Signing time: Fri 07 Aug 2026 00:40:33 +0000
ROA not before: Fri 07 Aug 2026 00:40:33 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fef:8000::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4d:7b:4c:7e:53:6f:7f:a4:18:ca:e0:ad:97:ef:7d:80:25:ff:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:40:33 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=fddd187f3ee2b5bde640a93317795a226a8e3e0e2b10f178d1d1dfcec1ad35a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:70:8e:f4:11:0c:55:38:52:06:68:28:37:24:
ee:86:b0:f1:bd:42:40:ba:30:96:7e:0b:86:b1:10:
29:80:c7:82:1b:8b:09:26:8b:80:cf:12:f0:6c:c8:
cf:5d:52:5a:a9:cc:3c:9f:4a:c5:4e:ac:99:b6:e4:
69:4a:a9:3e:95:63:1a:11:16:5b:de:10:8a:5a:d5:
51:b4:43:f4:a1:e8:57:0c:ce:ba:58:05:5a:76:0c:
9f:31:35:33:1e:d3:af:07:b3:2e:d9:84:5e:e2:aa:
a0:11:61:2c:79:ae:bd:e4:f4:11:a1:b6:92:75:9a:
9b:37:ec:c3:2d:6f:7a:8d:4b:1f:60:01:0d:48:36:
57:63:47:e9:79:37:b0:29:c4:be:b8:6b:e5:c3:09:
f8:04:d0:17:04:2a:ad:f1:a6:79:41:c8:35:d3:d7:
04:7e:5f:8f:00:95:b9:28:d0:11:f9:8d:50:0c:2d:
c5:f9:ac:2a:75:3a:b5:91:96:96:32:e5:86:29:e8:
8b:4d:60:53:30:6a:25:f5:43:7f:97:6b:06:e4:09:
bd:d0:60:f9:3c:0f:f3:14:97:c4:8c:e4:d1:6c:88:
1d:e3:87:8d:c2:2a:65:11:98:00:cc:7d:eb:03:59:
5f:a3:ef:85:7f:fc:27:fb:d2:bf:2d:15:b4:05:ec:
ac:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:67:09:54:B5:32:95:04:76:04:27:51:B9:7E:37:E7:2C:20:98:8D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a51cf629-3b5c-444d-a5a3-c49bffcebe3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fef:8000::/39
Signature Algorithm: sha256WithRSAEncryption
88:26:27:fb:b0:17:c2:39:f9:62:1b:ae:21:0e:56:80:93:c2:
23:e4:00:71:08:a6:81:7b:38:0e:27:a9:82:4c:76:7c:eb:7d:
7d:e7:b7:74:83:08:fe:96:e7:fe:98:8f:4d:d3:7d:0f:8c:ba:
98:e3:56:0d:cb:11:2b:f9:77:50:1f:ed:a5:1b:63:10:ea:f0:
55:ee:c7:71:97:ce:ae:f6:13:a5:7d:b2:bd:53:fb:7e:7e:8a:
33:20:fd:bd:78:59:49:85:d8:84:23:85:c1:19:eb:7f:d8:2b:
e9:f3:8d:31:df:66:07:28:5f:08:1a:38:8d:d0:b7:36:3f:c3:
b6:75:cf:53:26:39:f9:c4:b7:5f:a4:f7:94:ca:31:80:cc:93:
49:cd:43:fd:a3:69:7f:b5:f9:8d:3e:f6:2e:c1:95:14:9a:71:
72:e0:7a:5c:a5:f3:70:98:d7:ad:02:9d:fe:4e:71:aa:4d:1a:
73:5a:2d:d3:60:f5:5f:9e:56:5a:29:dd:7a:d9:a5:6f:c4:e1:
ed:65:91:11:3b:d1:14:ed:14:ae:8c:46:ea:af:6f:b5:2c:f0:
46:1d:78:2e:7c:58:09:c5:bb:d8:d4:08:98:fc:e5:e6:cb:11:
91:03:73:1b:20:a1:60:ab:05:3e:5c:52:20:2f:af:5b:3d:2f:
63:72:27:1b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:52 2026 by rpki-client