
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ec402e-85a6-4896-bfd7-d628ba758752.roa
File: f9ec402e-85a6-4896-bfd7-d628ba758752.roa (raw, json)
Hash identifier: uNd/BBbh3GRFWZ8UfYXJAySwbq37NV+7hV+WzsQ1m0Y=
Subject key identifier: 05:E8:98:84:97:72:97:31:2B:0B:FE:DB:2A:C4:82:CE:5A:B1:87:48
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63E34543126D70542692C5AE6F015290BD43FA6C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ec402e-85a6-4896-bfd7-d628ba758752.roa
Signing time: Wed 09 Sep 2026 16:05:18 +0000
ROA not before: Wed 09 Sep 2026 16:05:18 +0000
ROA not after: Tue 08 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe7:6000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e3:45:43:12:6d:70:54:26:92:c5:ae:6f:01:52:90:bd:43:fa:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 9 16:05:18 2026 GMT
Not After : Dec 8 23:59:59 2026 GMT
Subject: serialNumber=bd7b97ddf79053049f820eeed8e660c58f5b3b40fa0f8c6052f53cc6c4416f17, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:2b:8d:1b:f3:32:ca:eb:48:fd:25:1a:e5:
94:a3:1a:ed:66:cd:3d:15:61:8e:71:de:eb:2f:1e:
c1:44:a5:ec:24:90:70:08:f5:2a:96:8e:e3:62:49:
0e:57:3b:b4:96:c5:0c:04:28:86:af:af:a1:8f:01:
13:a9:49:af:2d:fc:8a:b8:a9:4c:b1:41:5c:fe:95:
8e:42:04:64:0d:c6:61:88:92:62:6e:a5:fc:21:da:
a7:5c:94:1d:9a:75:fa:6e:34:4a:bf:b1:ef:8d:6f:
0f:61:f1:f0:6e:ff:36:8d:2d:d2:dd:77:63:07:5b:
ac:d1:bb:b4:99:4b:84:bd:6e:0d:61:09:09:04:46:
b0:32:92:e8:a7:a8:42:cc:09:e7:a0:4f:e0:e4:7e:
e1:14:57:da:b4:a4:54:80:e5:1b:ce:58:29:97:69:
1c:64:d7:ba:f3:69:98:1e:3e:c3:31:d5:ac:64:2e:
d7:77:6e:3b:2e:0a:d1:58:d3:e0:a2:ab:33:50:1f:
e0:9b:8f:db:5c:4a:7b:26:c5:21:ac:6d:fb:8a:93:
70:e1:75:0b:01:50:18:f4:d3:66:e1:b3:73:3d:97:
58:eb:69:12:83:21:67:68:70:66:1e:0e:4e:8b:a0:
eb:97:34:30:f3:1e:d7:95:3e:de:61:10:21:ae:ad:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E8:98:84:97:72:97:31:2B:0B:FE:DB:2A:C4:82:CE:5A:B1:87:48
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f9ec402e-85a6-4896-bfd7-d628ba758752.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe7:6000::/40
Signature Algorithm: sha256WithRSAEncryption
90:0c:ef:e5:dd:d7:ed:71:f7:a8:3c:c9:30:8b:e3:39:35:13:
40:d4:f8:02:c0:8d:4f:8f:a8:15:99:7e:96:28:b2:68:92:0b:
65:3f:67:50:28:a0:17:c3:45:11:3c:b3:06:d2:6b:ad:aa:90:
2f:21:d3:d4:d7:01:e5:6e:89:34:40:c9:de:1d:94:f8:81:8d:
2f:2c:79:c6:bc:d2:35:a5:a9:84:90:d4:99:c1:bc:f6:8f:6a:
d8:16:22:a4:8f:b0:61:e3:f6:91:41:8e:85:c3:53:9e:40:84:
46:c9:38:48:b2:ff:b3:0d:bd:dd:02:ae:33:de:c5:52:48:61:
e1:b1:cf:7e:8d:75:93:3d:c0:0e:78:53:7e:51:f0:b6:4c:cd:
b2:2f:70:87:ea:ab:0c:bc:89:5f:ce:a9:f8:29:7b:d6:e0:8d:
f0:44:b1:92:dc:e1:76:97:e5:ea:a3:d1:3f:19:5f:cd:44:ef:
69:e0:55:c7:37:e2:fc:05:75:cc:8c:96:e5:13:19:5d:95:49:
16:bf:25:14:96:9d:37:f4:24:67:ea:50:16:01:12:c1:e4:a6:
37:18:71:eb:b1:7a:d3:a3:54:55:35:2e:3e:d2:10:52:1b:62:
6b:22:3e:22:81:28:e3:40:93:8e:bf:49:af:f7:b6:c8:47:b2:
60:92:38:53
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:15:53 2026 by rpki-client