
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
File: d6d34fe3-6c6a-4c49-903b-bcae88048613.roa (raw, json)
Hash identifier: hVNW6YYOB+oF4wyKJ+el9XPV2o7LqNh+8HOKMhdy60A=
Subject key identifier: 6F:A6:2B:B0:39:5E:62:66:96:DB:1D:BA:48:16:A6:A7:B3:AA:3A:DA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 320BC3C9A23CFE0ED5AC7CD987F6FDE1842EEE6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
Signing time: Sat 02 May 2026 01:10:46 +0000
ROA not before: Sat 02 May 2026 01:10:46 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:7480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0b:c3:c9:a2:3c:fe:0e:d5:ac:7c:d9:87:f6:fd:e1:84:2e:ee:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 2 01:10:46 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=fa00067b77eaf5147d6ace9f46f3d8a7d3d562a4f7864866642f29cff3a87ced, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:db:e7:4d:42:c5:73:d5:35:07:a4:75:d5:8c:
7b:f9:af:15:22:1a:9b:1c:96:24:07:e1:5c:1b:bc:
24:2f:2e:29:45:05:71:23:e9:01:23:f5:3d:b3:fc:
0d:f9:05:43:0e:3a:4c:99:c4:d5:f3:20:00:c4:3b:
93:c4:b2:21:48:1a:d0:68:8f:e5:00:94:d8:98:99:
87:f3:4e:bf:3a:a8:0f:83:a4:34:6e:35:36:f9:d4:
8d:e5:e9:0a:1a:f6:18:42:12:f0:1d:b5:c0:a0:42:
fd:6b:d8:07:58:e1:cf:44:b8:71:a0:4b:6f:d8:0d:
76:d0:e5:0e:ad:62:87:91:f5:46:32:d3:d4:fa:78:
cb:68:c9:99:d8:f0:85:7b:23:ae:29:ff:dd:97:80:
c3:5e:3a:da:b3:34:24:b9:ef:21:ef:c0:cb:d8:bc:
ee:53:54:e8:49:58:0d:b7:5c:c0:37:43:16:1b:4f:
fc:6d:0f:a1:d3:0b:ff:bc:d7:8d:e3:e6:2a:50:45:
e8:a0:29:70:26:2e:2a:d7:eb:b0:24:7c:73:7a:6b:
ad:eb:9c:c8:a9:36:90:e1:f1:80:2b:7d:ff:94:94:
08:94:95:76:90:c1:3a:73:e5:0d:96:49:21:1e:25:
81:d2:5c:3b:4c:5a:57:64:bb:88:da:2f:0e:19:45:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A6:2B:B0:39:5E:62:66:96:DB:1D:BA:48:16:A6:A7:B3:AA:3A:DA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d6d34fe3-6c6a-4c49-903b-bcae88048613.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:7480::/48
Signature Algorithm: sha256WithRSAEncryption
66:b6:54:83:66:cf:0c:a0:29:e2:48:68:0a:47:d6:9d:71:5d:
69:3e:78:e3:d5:ba:7a:92:de:ab:98:a4:b4:73:01:52:a7:65:
24:79:cd:59:d4:0b:41:ea:7e:44:85:50:ee:57:23:67:78:68:
cf:2f:c3:5f:31:b4:4e:46:09:6a:fe:6b:91:54:1a:ca:73:0a:
ee:66:4b:98:31:42:6f:33:82:7c:df:57:c5:c7:26:c4:93:66:
14:e5:09:2f:1c:13:89:77:54:b3:85:59:6c:89:e9:00:01:3f:
13:11:57:d6:aa:6c:53:85:7b:6e:b1:a2:f4:e6:cb:53:f1:ea:
13:72:d2:fb:56:d6:05:25:95:d8:f5:37:95:94:97:ca:e3:69:
20:ff:e9:11:57:ec:a6:e1:4f:d5:34:28:09:f7:00:1f:7b:7a:
d5:fa:f7:a8:34:e9:61:ee:17:c2:a5:a8:3b:c5:71:b7:87:b6:
89:69:e4:5c:40:9d:76:0c:a3:90:bf:9a:eb:e4:b3:7b:9b:7a:
3b:d6:05:2d:5f:0e:8b:4e:62:96:05:ee:c5:40:82:a5:6b:16:
22:08:48:0e:b8:b2:3e:86:40:30:5c:1d:0b:80:28:b1:12:24:
8d:fa:4e:bd:86:fe:3b:3a:99:79:ea:03:3a:b5:c7:d8:b6:6c:
43:84:80:2b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 3 16:14:23 2026 by rpki-client