
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af43470f-def8-4840-aa08-08eedf0c4293.roa
File: af43470f-def8-4840-aa08-08eedf0c4293.roa (raw, json)
Hash identifier: yfxMA/0+WxzFZLPqyg5Y1gETcP8H4DB/7OW28lD38XU=
Subject key identifier: A8:03:1F:CC:6F:02:87:58:5D:1E:F8:D9:1C:1D:81:79:47:1E:34:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30ECE2028B8EB988089398EBAC4B2308DB8FD4C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af43470f-def8-4840-aa08-08eedf0c4293.roa
Signing time: Wed 19 Aug 2026 00:40:13 +0000
ROA not before: Wed 19 Aug 2026 00:40:13 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fba:7400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ec:e2:02:8b:8e:b9:88:08:93:98:eb:ac:4b:23:08:db:8f:d4:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 19 00:40:13 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=94fc25357395fe457257c065da2775e3b6f47199421ddb6daa18b16692c4023c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:97:ab:83:11:69:81:e1:fa:24:1b:43:9a:88:
b5:34:18:ae:aa:24:0f:f9:b3:f4:87:09:1f:e5:b2:
94:9e:0e:81:e5:d4:2e:d2:03:d3:dc:a5:a6:ec:c4:
8f:81:9b:5b:e4:45:04:10:1b:0d:99:db:e6:38:57:
33:29:83:d9:f5:16:19:0b:62:e8:4e:40:85:8c:8c:
28:0b:54:3e:a4:d1:00:6c:0b:8c:7f:de:c6:90:e8:
67:5d:a9:60:14:a8:1c:48:c0:39:bc:96:7b:ba:e7:
d4:6e:88:af:8c:ee:16:e6:ed:a1:28:0d:d6:0f:cb:
27:28:02:fd:22:d9:0e:08:ae:b5:c3:66:44:db:93:
15:ed:f6:02:ef:56:af:5e:b4:6b:0e:c9:fd:07:59:
4c:1d:51:53:eb:34:7b:1d:3b:85:46:fb:0c:53:96:
98:78:c7:f0:9d:e9:d9:3a:22:14:77:96:e8:4e:a0:
c0:15:64:2b:a0:49:00:17:df:55:f0:61:fc:b5:3e:
9c:be:93:41:20:1b:37:a2:92:ef:8a:fd:c2:0e:7b:
73:7d:bb:a4:72:1c:8e:0f:a4:6b:56:83:0d:5c:ed:
cb:37:32:ea:9a:ea:56:29:1e:d4:d2:a0:82:21:f1:
27:7a:fb:ad:87:f4:58:ed:5d:d7:de:c1:9b:82:a6:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:03:1F:CC:6F:02:87:58:5D:1E:F8:D9:1C:1D:81:79:47:1E:34:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af43470f-def8-4840-aa08-08eedf0c4293.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fba:7400::/40
Signature Algorithm: sha256WithRSAEncryption
c0:b9:99:cf:88:26:29:af:4f:44:80:8a:0c:4a:57:4d:8d:9a:
e7:5b:44:95:07:02:ff:c4:97:fb:31:5d:c9:84:18:30:3c:2a:
1f:86:33:26:c9:2b:aa:1a:14:bd:5d:50:45:3c:f1:9d:47:78:
9d:ca:4a:cf:15:0d:3a:bb:59:1e:02:be:de:db:61:2a:95:26:
b5:7a:dc:b4:48:c1:8e:c7:3f:a6:ff:38:88:d1:df:bb:b7:62:
f5:1f:54:61:fb:17:b9:d7:62:02:7d:5f:7b:03:b4:8e:f3:8c:
7d:81:33:08:a8:68:a4:26:97:e5:da:cc:4a:55:bf:ee:f7:dd:
af:3c:cf:80:24:8c:a8:ca:c7:6d:70:46:84:13:45:a9:f5:a8:
35:3a:3d:44:79:eb:7a:b0:e9:7f:de:df:bd:9b:d4:55:14:9d:
e3:96:cb:f0:59:aa:69:00:42:51:36:a1:cf:b2:71:50:9c:94:
05:38:bf:3e:7e:d6:1d:f5:14:1f:e1:17:8f:fa:4b:6d:4c:25:
37:45:40:ee:9d:2f:b7:86:0a:71:45:5c:b6:70:54:a5:e7:77:
b3:76:08:24:42:7d:57:0e:b1:19:59:8b:66:95:57:37:55:0a:
b4:15:ac:5d:b6:6b:3d:41:55:3c:dc:32:e3:0e:d5:25:b4:c9:
30:73:4f:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 18:51:39 2026 by rpki-client