
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa
File: b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa (raw, json)
Hash identifier: l4uxwPD9j3KbXWNTbHE2MbdwrffQom4L2AAQcCsYGJ0=
Subject key identifier: E6:E7:32:F5:08:2C:E9:B1:41:9A:A6:83:C4:F6:46:B6:64:22:19:CF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5A5CC22FD9BFA03A26E82DDB903E2A80E71C3D78
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa
Signing time: Tue 04 Aug 2026 00:20:37 +0000
ROA not before: Tue 04 Aug 2026 00:20:37 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1e::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:5c:c2:2f:d9:bf:a0:3a:26:e8:2d:db:90:3e:2a:80:e7:1c:3d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 00:20:37 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=f10f39c71ab1ebfb2ed9c3285d34bfdbe4b29bd282e83dea1e6290b7f5ab6d8e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:75:09:c1:ea:ff:52:b9:e3:52:1b:ba:d3:
97:41:15:45:46:1c:f2:95:f6:7b:7f:48:70:d7:14:
c1:a3:3d:73:bb:23:ce:69:d9:ef:41:a4:31:f9:b4:
54:f6:fa:6a:30:da:b7:53:11:e6:51:95:61:0d:58:
5b:e6:1d:ca:5c:9d:87:47:fb:e4:5f:d8:3a:a4:4f:
ad:1e:6c:28:8e:e2:4e:d2:af:3c:ef:6f:1b:af:2a:
30:9a:06:75:0c:75:a7:db:b6:2c:b3:8f:01:e8:f0:
c0:6a:40:49:28:d8:54:45:ae:2f:bc:9c:ee:f0:b4:
c0:56:b6:f1:6c:34:66:cb:ed:27:95:4b:45:4c:c9:
35:b4:2b:da:e6:9e:8d:42:db:43:47:39:5f:cd:bc:
8e:2a:a6:5b:91:cc:4c:37:94:f0:40:d8:b3:17:9e:
4c:2d:d8:ef:af:2e:b5:a6:34:f1:b8:9b:39:ae:56:
5b:bf:6d:23:15:5c:d2:8a:93:b2:a9:22:aa:2e:38:
a8:c7:6b:ca:c5:7f:6a:f0:da:b0:33:64:86:68:0f:
d7:f9:e1:3f:f9:f3:1b:17:f7:9e:0b:dc:0a:30:e8:
25:05:09:d6:37:1d:77:c8:aa:a9:c1:98:94:74:48:
83:d8:b6:26:5f:ca:a9:62:dc:bc:44:35:f1:4b:59:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E7:32:F5:08:2C:E9:B1:41:9A:A6:83:C4:F6:46:B6:64:22:19:CF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1f32224-d90c-4834-9dd6-5bb1a05fb638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1e::/36
Signature Algorithm: sha256WithRSAEncryption
a2:ab:40:35:ce:98:42:24:47:c6:df:0f:91:3b:73:42:58:0a:
76:07:9d:6c:84:64:6a:95:d5:0c:e4:51:a1:a9:ee:55:35:bd:
02:85:1c:1d:bf:31:28:ec:09:f4:24:23:80:71:dc:60:e1:96:
d6:23:ed:da:1b:d9:f3:9e:2f:97:34:92:e3:3f:e0:f8:08:fb:
88:31:c1:8c:a8:b4:4d:0d:6a:d2:04:ef:96:cf:39:34:06:13:
0b:fd:30:2e:4a:33:63:10:5a:7b:c1:02:60:f2:be:39:fc:f3:
d7:36:61:2d:56:d3:49:48:8a:59:bd:77:77:e7:18:80:91:b2:
a9:14:a8:25:d9:23:06:f2:67:d9:1f:fc:49:d8:42:c5:d4:e6:
24:b0:1a:7f:b8:e9:98:fa:cd:cc:f7:1c:36:cb:f0:8c:8d:4a:
55:09:ff:24:98:1e:f3:6f:4f:ec:dd:a0:6b:4e:3c:f1:5a:a9:
85:27:18:4c:57:9b:b5:18:96:d0:c0:fc:d0:24:a3:53:5d:0d:
88:a7:ca:a0:6d:a5:47:d9:11:4a:cf:0f:b0:f3:b0:db:41:b4:
52:a9:c9:26:dc:8d:20:64:47:66:1b:86:a6:23:16:5f:f6:8c:
81:08:69:99:ae:38:17:7f:99:30:bf:3e:2b:13:36:12:83:dd:
2b:b1:bf:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 21:50:30 2026 by rpki-client