
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb6297a-364c-4d1b-b018-d1b5682ee7a3.roa
File: ebb6297a-364c-4d1b-b018-d1b5682ee7a3.roa (raw, json)
Hash identifier: 4B0Zi/GZkZ8XoPc2anrlvZy9qASoGYja77LXrHL+N8A=
Subject key identifier: 92:17:41:F6:E3:D6:36:D4:5C:83:DB:0A:95:F2:13:4D:EF:0A:FD:A4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 643EEAE55B275FD56F40314E3E18C3E0C61A0CDE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb6297a-364c-4d1b-b018-d1b5682ee7a3.roa
Signing time: Wed 05 Aug 2026 00:10:55 +0000
ROA not before: Wed 05 Aug 2026 00:10:55 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffd:819f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 11 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:3e:ea:e5:5b:27:5f:d5:6f:40:31:4e:3e:18:c3:e0:c6:1a:0c:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:10:55 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=49e0af3d6b3ac2ba68b3f515a20f4f04e0c78da4dcde4802a6405f71958f923c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5b:d9:ea:97:00:23:36:0b:34:db:48:c3:96:
c8:ff:bb:1c:bc:60:8e:5e:3e:e5:e6:9f:ea:20:b8:
dd:90:04:ad:0e:0d:73:63:d7:9b:b5:a9:a5:2a:2f:
88:74:67:12:9e:18:61:6a:6b:df:a3:9c:40:2f:8d:
a6:28:bd:7f:4e:9b:88:d7:b6:49:ed:a4:6f:f6:29:
36:a6:2e:58:e6:b1:e9:7c:a6:c8:36:2b:ff:da:78:
0b:83:12:8b:0a:ef:2b:c2:ec:0b:c9:d5:60:d2:92:
e2:69:dc:a1:d7:52:60:0b:03:d3:71:c0:e7:8e:d2:
1a:bf:32:5a:a8:42:30:17:08:1e:d3:9a:fa:62:e7:
82:6f:20:a0:d8:61:7a:82:13:03:a5:5b:eb:f2:9e:
37:d9:2e:95:a6:e6:6e:d1:87:1a:4c:dc:90:f8:93:
c2:ca:65:8f:69:52:84:88:23:6c:b8:73:cd:22:f4:
f8:18:b3:58:21:d7:ba:e9:f0:e9:9d:af:61:28:02:
88:df:e5:ef:d6:3e:da:d4:b6:0c:11:ec:3b:54:63:
71:ba:6c:0e:f8:91:1e:f4:7c:9f:81:a4:12:47:df:
fa:bd:55:11:65:5f:ed:f9:46:f3:b5:09:82:88:4c:
2c:f8:c8:f3:cc:1f:b6:2d:65:af:53:46:5d:09:d3:
40:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:41:F6:E3:D6:36:D4:5C:83:DB:0A:95:F2:13:4D:EF:0A:FD:A4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ebb6297a-364c-4d1b-b018-d1b5682ee7a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:819f::/48
Signature Algorithm: sha256WithRSAEncryption
66:21:f0:53:27:23:93:9e:71:d4:36:c9:f5:d2:76:4e:e6:46:
28:83:22:51:cb:26:44:ae:60:b9:98:f4:4e:7b:a3:92:6d:09:
a8:77:c1:f4:d7:5f:b9:81:48:8a:78:38:c3:90:1d:d0:63:ae:
1e:3c:07:50:cc:f1:5e:19:a4:30:74:50:55:5d:7f:5c:bb:45:
9a:80:eb:c6:6c:23:2c:21:98:f3:9e:c5:84:73:fe:db:90:5a:
11:b9:18:2f:47:80:7a:e5:31:a1:e2:1f:27:70:0d:50:65:19:
cd:6c:12:58:0f:74:ac:df:3a:85:9e:6a:76:e6:26:dd:ca:77:
4f:74:fd:1b:55:bb:4a:37:8f:7a:68:03:47:8f:66:7c:43:0c:
46:ca:68:42:30:0e:04:67:3c:77:6d:b4:7d:67:bc:a4:12:06:
02:3e:c0:e1:1a:9e:db:04:8c:52:47:fd:7f:e8:6a:ea:34:51:
07:a4:30:bb:a2:ee:cd:18:59:29:e6:0b:1c:68:59:8c:49:34:
d1:15:41:4b:b2:f5:2f:e2:5a:51:ad:78:dd:1a:d1:8b:74:8f:
04:d6:bd:a0:0c:67:f8:ff:35:09:76:5b:6f:4e:f2:44:f7:34:
fa:93:d4:79:db:d4:e0:c3:50:3e:f8:80:8d:48:22:dc:2d:7e:
84:61:2b:3d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 20:04:23 2026 by rpki-client