
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f930991f-5aac-428e-ac51-d5d2cb9d9929.roa
File: f930991f-5aac-428e-ac51-d5d2cb9d9929.roa (raw, json)
Hash identifier: WmLRBbvZDPpWqyByaQrJ9TJbRXIDo2Btc+9B/pANQoQ=
Subject key identifier: DA:4A:66:2D:41:31:9F:68:D8:83:5D:A9:93:4E:0E:B2:9F:FD:59:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F9A4CBC5E0B1BDB4FC8FEBDD5C59534F1EC7C5E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f930991f-5aac-428e-ac51-d5d2cb9d9929.roa
Signing time: Thu 10 Sep 2026 00:10:13 +0000
ROA not before: Thu 10 Sep 2026 00:10:13 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:c000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9a:4c:bc:5e:0b:1b:db:4f:c8:fe:bd:d5:c5:95:34:f1:ec:7c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 10 00:10:13 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=4219f16c3f759284b0f14968692d992d2d8b31273d0fc82d10943ee5bd65e2d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:b3:a3:85:b3:87:81:34:1c:71:b5:ce:bd:
66:a6:c0:a9:dc:86:95:e1:35:7a:bb:dc:57:e0:3e:
71:27:45:ad:f8:b3:e9:6b:47:32:59:36:8b:b7:66:
36:ad:d9:88:e6:df:e0:15:3f:a5:bc:d6:0c:20:1e:
aa:e3:71:80:21:dc:ba:0b:46:41:dc:5c:ab:bf:ba:
51:62:a1:d5:05:26:68:bd:00:57:79:6d:c7:1f:bb:
ae:17:0c:d3:65:7d:f6:f4:e5:b8:d7:5f:6d:34:4e:
29:02:af:82:3f:0b:b1:c5:26:c5:ee:bf:6a:8d:67:
8a:4f:71:92:a4:2f:e9:42:77:a1:ca:1c:ba:b9:93:
b6:8b:0f:88:02:58:32:ec:65:27:82:5c:61:5b:23:
5f:f2:cf:d7:f8:9c:dd:13:0d:6c:8c:77:70:81:94:
6f:fc:57:6c:af:b2:00:db:01:9a:9f:bd:70:10:2b:
3c:1c:ca:3f:9b:1b:8d:77:f4:44:49:00:9d:0f:61:
fa:14:72:9c:1c:1d:22:99:fc:13:cf:28:34:83:41:
c8:21:08:6a:ce:c2:6f:5b:40:63:b3:bb:53:7f:fb:
32:43:f2:bc:e9:54:d0:5b:ca:d5:a5:50:3f:a7:76:
80:f2:15:e9:62:7e:fe:01:d4:57:09:df:77:2a:88:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4A:66:2D:41:31:9F:68:D8:83:5D:A9:93:4E:0E:B2:9F:FD:59:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f930991f-5aac-428e-ac51-d5d2cb9d9929.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:c000::/40
Signature Algorithm: sha256WithRSAEncryption
84:c7:c2:56:26:1e:a1:3a:1c:e3:2d:8f:82:5f:d1:69:04:1f:
51:a4:53:93:d7:f1:62:d5:f7:11:d0:0c:a7:cf:13:5b:78:ab:
60:82:67:cc:b9:0a:03:67:f8:58:79:f5:bb:6f:a3:e4:2e:c5:
7d:4d:5c:34:a3:01:79:58:35:6e:87:48:68:7d:d5:fa:2c:36:
ef:1a:bf:f3:8c:09:e0:d2:4c:90:85:cc:db:4d:d7:f1:48:fd:
fb:a4:4f:c8:81:8b:8b:03:3a:d0:c0:1f:83:c9:80:c9:a7:0c:
d6:24:d7:94:5d:e6:f3:b9:f9:b1:b0:c1:2f:93:7f:52:fb:66:
ec:1f:76:17:dc:8a:d5:1e:a8:8e:0b:51:1a:3f:ba:24:9d:08:
72:ea:d0:15:0b:c2:4a:d4:1c:c6:e2:c2:48:75:1c:9d:9b:d1:
a7:1b:44:2d:9b:22:93:c6:dd:9e:63:a4:ad:8e:bf:af:02:af:
8c:db:8d:f0:fd:31:ab:79:14:ca:fe:4a:d3:0c:78:8d:7c:2e:
67:f6:e0:94:da:c2:49:94:80:34:48:e6:b8:aa:fc:73:1e:df:
fd:e7:a6:3e:7e:15:94:ec:f3:f1:71:92:ca:cf:ec:82:e2:f0:
82:75:3e:62:a7:68:ce:a3:17:66:07:51:34:b7:26:e4:6d:88:
0a:05:4e:2c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:22:21 2026 by rpki-client