
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4cd2f16-381e-4dd3-9650-cb96b18f1160.roa
File: f4cd2f16-381e-4dd3-9650-cb96b18f1160.roa (raw, json)
Hash identifier: d0y/b7uk+798s8Ft/9L/bnc5lZlRwtEdxz+LqtRKvAs=
Subject key identifier: 4A:1F:64:4F:03:8F:8B:EE:88:31:BD:ED:6F:19:64:C5:87:FD:58:58
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0E2F33360C88E7AB4612DC2FDFA635A74C1044CC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4cd2f16-381e-4dd3-9650-cb96b18f1160.roa
Signing time: Mon 10 Aug 2026 00:40:51 +0000
ROA not before: Mon 10 Aug 2026 00:40:51 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe2:7400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2f:33:36:0c:88:e7:ab:46:12:dc:2f:df:a6:35:a7:4c:10:44:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:40:51 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=af4cbddd5014a3dc50cd478587263233b50dd034b7b2e21809a3ddcec616e141, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:fd:83:0c:11:fb:97:26:a2:54:f5:8e:7f:
b3:18:18:25:5f:4a:48:3a:96:5d:57:17:11:e6:55:
a3:d1:71:2a:9f:f9:24:97:90:a4:42:91:4c:82:b2:
4d:ff:99:c2:50:18:25:f2:6a:ef:93:9d:c8:e1:3c:
ca:1c:47:b4:90:47:bc:04:11:f0:3a:68:86:8f:71:
f1:b9:65:46:af:9f:2b:0c:50:c4:24:45:7c:27:51:
a8:6e:4e:94:fb:4b:7e:f1:1b:1d:dd:54:76:30:5c:
5f:d2:5a:a0:70:af:5d:3c:e5:bd:08:d9:b8:d8:37:
d1:fc:c8:17:2f:ba:ca:df:86:7f:69:ef:e3:7e:42:
72:d5:6d:63:fb:72:b9:23:b1:a5:5f:22:c9:a2:66:
17:03:2a:53:dc:f7:89:69:35:e7:e8:10:69:4a:ae:
b9:4d:28:ae:3f:cb:95:18:39:60:33:86:f1:cb:26:
4d:4d:6a:ea:5e:58:e2:b2:62:b2:66:29:22:9b:55:
af:cf:30:b2:03:ec:bd:05:2b:66:1f:e9:b1:d4:fc:
24:4a:eb:ac:b1:59:46:11:c3:67:8e:e9:3c:1e:fe:
73:ce:b5:8c:ea:0e:30:89:1c:fc:1f:b4:93:a6:9e:
2e:83:94:31:6e:8b:4b:82:b8:b5:1e:d9:82:d3:c4:
f6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:1F:64:4F:03:8F:8B:EE:88:31:BD:ED:6F:19:64:C5:87:FD:58:58
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f4cd2f16-381e-4dd3-9650-cb96b18f1160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe2:7400::/40
Signature Algorithm: sha256WithRSAEncryption
a5:43:9d:62:70:60:0f:02:e8:6c:36:7e:0c:09:43:af:56:0a:
1b:9d:63:91:07:4a:df:d4:df:01:99:71:ac:60:4d:34:a0:01:
cd:e9:3e:07:41:41:b5:f3:f4:db:3e:c6:84:d0:3c:d6:fd:63:
2f:3a:d4:a7:c6:2b:6b:03:eb:f5:a7:2e:c6:70:a1:95:ba:e6:
77:5d:92:36:7d:e4:67:e0:91:83:48:13:72:f1:3d:bc:5f:8c:
79:ff:e4:95:09:70:6d:7d:d5:4e:5c:45:b2:90:4f:39:9d:f6:
98:ea:72:a8:bd:6e:27:f3:35:d2:2f:ae:1a:6c:bc:8b:c3:aa:
1a:d5:b0:1b:3b:89:ba:e7:7f:a2:03:45:19:46:87:0f:59:be:
f4:9d:0e:3b:cd:3c:15:e1:fe:16:1b:2e:c1:56:a3:cc:ee:42:
8c:e9:e4:fd:86:ac:c7:ab:dc:00:b1:4f:66:2a:13:68:ae:b8:
ba:d5:56:f1:a2:7f:40:de:3a:65:b9:4b:82:6d:35:f0:b4:8b:
39:af:70:cb:8b:78:51:de:68:e3:d3:74:09:e0:e1:9a:ba:04:
be:e1:64:12:5c:6a:39:34:3c:7f:6f:b0:de:ab:73:ee:42:a7:
bc:11:c2:b0:7f:c7:6a:68:7f:9f:75:66:4f:44:55:37:ec:69:
b3:96:c4:70
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:53:19 2026 by rpki-client