
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
File: b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa (raw, json)
Hash identifier: r2uaBEZO/Fq/w/BB9U6nA3DjlX6jWVktUVAYRFNHsXU=
Subject key identifier: F6:01:C9:13:F5:FA:54:E6:7A:BE:B1:A5:48:A9:87:35:02:88:9D:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4BD4E9A79731EE15A9EE28D1BB6FEAF684FD8606
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
Signing time: Mon 03 Aug 2026 00:40:37 +0000
ROA not before: Mon 03 Aug 2026 00:40:37 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:74c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d4:e9:a7:97:31:ee:15:a9:ee:28:d1:bb:6f:ea:f6:84:fd:86:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 00:40:37 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=85e14ef204b282be5fb51a2afeedcc64d219c7d6aa67397459259b8854451a77, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:65:8e:7e:7e:dd:b7:ad:50:ac:4b:b9:c4:
c5:b9:1c:59:19:d6:78:2c:0f:45:f1:7b:b0:f7:f5:
91:17:ce:f6:7b:9a:a5:ce:aa:72:ba:14:74:be:16:
c6:47:99:59:26:3d:80:eb:4c:1f:05:cc:bb:ef:2b:
a5:cb:9b:16:c2:18:60:90:fb:92:3a:83:8d:02:64:
7a:a4:08:9e:70:6f:d4:f6:97:32:81:e6:8d:8e:a7:
41:91:69:3e:6d:9e:4a:1a:69:5c:d1:db:70:b1:22:
8a:1d:3d:2b:38:99:37:23:e5:70:4e:5c:ae:ad:e3:
ab:8b:33:7b:9c:dd:8c:39:1c:64:b2:41:f0:02:e0:
b1:1c:52:37:12:11:a4:3d:e4:a9:d0:ab:5e:73:30:
50:c1:d9:c7:13:15:d5:92:3e:00:f2:a8:26:a4:b6:
da:c5:b1:2a:82:7b:47:8f:27:3c:17:a2:a1:ae:8e:
d0:2a:f7:f2:0a:c6:f7:dc:c7:d1:ac:2c:6a:e5:47:
7e:7d:59:36:7b:d7:96:1a:51:e3:48:f9:77:02:87:
df:0d:8c:a1:2f:f2:92:90:22:3c:ee:5c:3e:38:65:
cb:03:47:78:c7:68:80:21:8f:00:fe:2f:cd:35:c6:
1e:5c:a9:5b:cd:e5:a6:d6:54:58:c8:59:33:b9:ae:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:01:C9:13:F5:FA:54:E6:7A:BE:B1:A5:48:A9:87:35:02:88:9D:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fe7f4e-07c0-4e8e-8785-70f421b52563.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
11:d1:58:ee:ca:e6:a9:91:3e:a4:ba:e6:31:0e:ba:53:2c:cd:
07:d6:7c:0c:8e:00:54:94:e0:e5:48:8f:a7:0a:e9:3e:f0:cb:
8a:9d:f2:a9:a5:24:f2:c0:cb:66:df:b7:59:c6:ee:f1:bb:54:
88:73:e1:43:b6:7e:dd:ac:57:0e:f8:2a:8d:10:85:c8:53:12:
20:5d:af:d4:75:00:59:25:1d:0c:d1:de:ca:ea:2b:07:48:87:
e4:2c:f6:5e:94:35:be:26:ba:0a:14:fb:f4:52:29:69:24:32:
98:11:00:a0:4b:2b:ef:95:2d:e8:7c:49:75:97:14:ee:ff:f9:
3d:0e:f8:f9:48:29:37:2f:f7:ae:5a:6a:ac:91:a9:79:c4:57:
5c:02:18:93:04:7a:60:27:02:76:ae:de:e4:af:df:37:67:ef:
8d:e7:20:2b:e3:ab:65:bc:ae:5b:2d:e0:3d:41:44:d7:5c:e8:
8e:9b:81:ef:4c:f1:43:49:2f:f6:ac:e9:74:95:84:4e:ec:4c:
39:c9:22:73:d1:71:3e:04:ee:24:ee:a9:81:1a:63:64:17:40:
55:a1:6d:6f:b5:44:ff:d7:98:e4:f3:4d:ed:1e:15:a4:bc:82:
65:b9:c4:33:6c:45:30:a4:34:10:d4:ae:f7:a7:d6:ec:33:af:
e5:09:f9:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:24 2026 by rpki-client