
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
File: e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa (raw, json)
Hash identifier: rXg9/iFInT3WKKTZvgnUo2We9DOSiabzAvLAEUQKOeA=
Subject key identifier: A4:3C:31:CF:C0:87:74:54:42:A3:A4:D6:A4:0F:FC:DD:00:B7:E2:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B08A918D82295B86EDA9C0484291C5F16D5455A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
Signing time: Tue 04 Aug 2026 02:20:12 +0000
ROA not before: Tue 04 Aug 2026 02:20:12 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:6020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:08:a9:18:d8:22:95:b8:6e:da:9c:04:84:29:1c:5f:16:d5:45:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 02:20:12 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=b9f82e89ad26ade9b8a5d362a7eb81abb867e662abb4fe6a4115ccbaeff26650, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:83:d0:09:c7:ab:f9:d2:9c:19:9a:fb:2b:
c9:df:79:ee:55:15:55:34:b1:c2:c2:08:6e:78:88:
7d:89:10:1f:ab:13:42:86:7b:51:f6:b5:1a:a3:b2:
16:72:d0:99:64:51:1b:87:67:87:4e:ed:79:97:f0:
8e:7c:6f:7c:be:6a:1a:48:8a:fb:9e:ef:6e:a1:c6:
ea:93:af:a7:54:ae:09:2e:9b:1b:1c:69:f5:73:b2:
d5:d6:54:14:ee:e2:1f:7e:27:38:ab:f1:fc:c2:27:
0d:43:b2:7b:c1:1b:fe:71:63:88:46:0c:9d:f1:53:
9d:ea:03:3a:81:c5:44:cd:a8:d9:1f:3b:2c:29:ce:
c6:bb:b9:8f:d3:1c:97:a9:57:f1:d6:6e:34:33:23:
2a:fc:8c:a8:78:a2:50:45:c4:e9:99:b5:06:34:fe:
9e:95:e7:3b:8f:7a:bb:7f:d3:37:da:b7:e7:b3:e9:
bf:33:38:00:e7:ec:fc:44:82:39:e9:11:65:06:b2:
bf:96:37:5a:6c:8d:53:35:3c:b6:44:a6:e2:ce:2e:
2e:7b:f5:33:dc:74:56:53:72:a2:ea:43:dc:13:d5:
04:c9:c1:01:fa:a7:44:58:ac:34:ce:ae:ac:d6:fb:
1b:0e:20:da:e4:da:d7:4c:c5:84:fa:67:bf:89:cb:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:3C:31:CF:C0:87:74:54:42:A3:A4:D6:A4:0F:FC:DD:00:B7:E2:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e4c919f7-0b3c-4caf-adc1-3e1fca45f396.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:6020::/48
Signature Algorithm: sha256WithRSAEncryption
86:fa:32:7c:38:a6:c5:1e:1e:72:63:83:ad:3d:62:78:86:68:
b7:88:ab:59:67:f9:44:52:7a:3c:bb:b2:0b:50:13:65:1e:b1:
75:62:3f:42:a1:b3:51:f3:c4:e4:b3:25:7b:5e:c1:f1:ea:b8:
93:34:76:a8:4e:a1:8d:2a:5c:27:6e:93:9d:4d:0c:e3:cf:52:
e9:7a:20:09:12:d4:ac:a4:47:61:9c:00:b9:33:fe:6b:4d:c4:
dc:bf:b1:c6:41:20:c0:02:49:07:3d:c0:47:ab:4f:77:ff:c4:
6c:b2:4e:ef:9d:dd:f6:9b:f6:bb:6c:e6:fb:64:d2:a8:0d:36:
c9:b2:e5:9e:08:51:0d:3d:a5:d3:94:09:dc:a0:b1:ed:b1:6b:
95:1b:67:e7:a9:2b:98:c7:3b:98:c7:b1:08:6d:d3:e1:c6:19:
0c:28:19:c7:f7:b7:e4:ee:d2:c5:01:28:5f:53:fe:8d:38:3c:
97:80:d4:35:97:bb:e4:af:99:1c:fc:da:ab:f6:00:66:04:f7:
ec:6e:4e:1d:cb:66:ee:17:cd:5e:9a:f9:c8:43:85:b2:6f:0e:
dd:fd:11:23:68:9d:c8:59:51:8f:c6:38:d8:b4:00:f3:83:cf:
52:87:7d:8a:eb:12:80:fe:08:11:b3:54:27:a1:e4:a3:a2:1f:
5a:59:1e:5c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:22:00 2026 by rpki-client