
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad702a38-189a-4b35-9a97-7ce961164bf1.roa
File: ad702a38-189a-4b35-9a97-7ce961164bf1.roa (raw, json)
Hash identifier: diXCy2TTuSyR/oL44yajLGVu7qFS/k3LPBcngCTA3Ac=
Subject key identifier: 50:CB:EF:C2:0D:B2:85:EA:D2:9A:D4:70:6D:6D:F8:6F:48:93:92:CD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34FCEBB8645489430D961D666113E0867D984084
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad702a38-189a-4b35-9a97-7ce961164bf1.roa
Signing time: Mon 03 Aug 2026 02:10:03 +0000
ROA not before: Mon 03 Aug 2026 02:10:03 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fc:eb:b8:64:54:89:43:0d:96:1d:66:61:13:e0:86:7d:98:40:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 02:10:03 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=f016519267839c05b6ee62d51aa169904827aeb1fba48cfdbc706b1d89a59824, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:ed:df:71:85:8a:2c:1c:01:64:b2:14:9a:
81:bc:77:79:7e:9b:8f:7b:70:cd:c4:17:e4:85:fa:
f5:25:30:d3:a7:98:f0:74:cf:6b:6b:c0:0e:b2:89:
33:d0:cd:28:3a:b0:b6:27:7e:e2:04:47:61:8c:c7:
08:19:1e:d4:1b:2f:c7:06:ae:e2:91:a6:aa:e7:fa:
a2:bc:77:72:e8:48:4b:97:0c:d5:8b:77:c5:7b:94:
5f:01:96:ba:bc:0e:f0:40:2b:82:37:c2:1b:13:03:
cb:05:fa:ac:31:51:33:c2:a0:fd:64:f9:02:c3:d1:
5e:e1:9b:0e:32:eb:f0:e1:59:14:af:0e:2e:62:75:
e6:a2:3a:7a:0f:0b:61:14:a0:4f:8e:61:c1:a3:9d:
fd:1f:18:c1:bd:10:80:e5:81:29:fc:93:6b:1c:80:
43:02:d3:45:b6:df:5b:e7:6f:73:44:1d:d6:72:46:
b7:55:47:ee:27:3d:84:3f:41:58:f7:2f:4e:ad:c8:
d7:61:07:83:e0:77:63:4d:e4:3e:24:82:16:2a:aa:
25:fc:ac:44:20:15:a1:8d:b3:69:11:4d:2e:18:91:
ac:e4:25:2b:2d:61:7d:18:d0:f0:6e:e0:d9:db:35:
1c:2b:32:a5:4b:64:b3:27:38:0e:55:39:19:25:5b:
f5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CB:EF:C2:0D:B2:85:EA:D2:9A:D4:70:6D:6D:F8:6F:48:93:92:CD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad702a38-189a-4b35-9a97-7ce961164bf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:4040::/48
Signature Algorithm: sha256WithRSAEncryption
3a:ea:85:40:c9:20:df:14:9c:24:bc:1c:1a:79:5a:2d:46:aa:
db:b6:01:bb:6c:d1:57:07:4b:f1:9f:f1:48:e8:a0:0f:9a:b0:
1a:2e:85:1a:77:aa:f3:79:8f:02:31:2f:51:29:1f:2b:5d:79:
8d:04:2c:0e:ac:10:68:ca:7d:cf:a9:7b:d3:4f:91:21:c2:95:
51:73:05:78:0a:0d:da:5f:c2:09:0a:c5:9f:0a:e6:84:34:43:
99:39:ec:3c:0d:80:b2:23:e1:a3:55:8a:bf:4e:6c:3a:32:06:
73:b8:a6:4d:8a:0f:56:c8:7c:85:1e:29:2e:99:ee:d1:52:bf:
7e:7b:a6:b1:ba:91:4b:0d:90:6c:fa:00:a6:55:0f:a1:7b:f2:
cf:f9:85:3e:05:ee:1b:d9:67:e2:f3:8c:de:35:ec:18:f1:76:
73:89:60:44:95:24:72:c5:8d:29:65:2d:a8:74:25:22:05:05:
3d:79:cb:38:fb:f3:b6:8c:01:19:cd:c1:42:70:24:80:97:e2:
77:66:9b:6e:46:87:d8:b4:e9:80:85:b8:5c:72:28:ec:69:fa:
91:77:90:2b:79:32:d3:c4:29:43:44:59:43:a9:56:e2:67:7a:
30:75:20:fc:fc:00:93:c7:b9:18:eb:ab:21:5e:39:4c:69:71:
04:4a:ef:42
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:44:27 2026 by rpki-client