
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6585280b-21cf-4117-b60a-a89406148b03.roa
File: 6585280b-21cf-4117-b60a-a89406148b03.roa (raw, json)
Hash identifier: RaEXyPKiCWoFtEiYfr98gqHDy4JxP/G8+klgb+J9jJQ=
Subject key identifier: 84:81:B7:83:E9:51:05:83:9F:19:1B:05:EF:A3:3D:F0:E0:84:4A:CC
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 665AC43B264D71EFCC03A045F74683C693C584A1
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6585280b-21cf-4117-b60a-a89406148b03.roa
Signing time: Sun 02 Aug 2026 00:00:11 +0000
ROA not before: Sun 02 Aug 2026 00:00:11 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:8380:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:5a:c4:3b:26:4d:71:ef:cc:03:a0:45:f7:46:83:c6:93:c5:84:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Aug 2 00:00:11 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=3199e86a29b552c8f0494da8583333cc4292801823a0e7e5155b5f57091ce41d, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:d7:de:34:dd:29:bd:d6:67:8a:3e:f9:6f:
ad:e8:de:86:e7:0d:9d:3e:d3:ea:e0:5d:87:46:6b:
0e:46:7b:f5:0e:4b:25:d5:6f:e4:6e:3b:37:ee:4b:
41:75:ee:b6:17:71:74:48:d1:94:be:cf:e1:ee:1d:
f5:69:98:eb:80:d1:6e:91:0f:98:cc:1b:83:c0:2d:
12:ad:a1:9a:3c:ff:84:38:d3:1c:c3:93:e0:eb:7d:
be:3c:c1:4e:b3:50:4d:30:45:65:c3:4f:25:12:d8:
ee:b2:da:3d:95:01:01:46:d9:50:66:f7:35:b1:23:
80:6e:ee:c3:fe:b1:cc:bb:8c:42:5c:df:4b:a2:8d:
ab:03:5e:73:78:32:44:fa:58:f0:c6:c5:85:ee:ec:
6d:40:ba:c4:17:76:38:ca:d4:fe:fe:a1:0c:bc:df:
55:74:f3:5f:07:04:bd:e0:fc:77:08:c8:1c:aa:b9:
87:55:c4:7d:ad:36:88:2c:a2:61:6f:bc:9a:d9:88:
f9:51:ba:b1:29:21:04:39:26:c5:59:1c:81:87:14:
dd:ae:9a:47:0c:19:a5:78:6f:7d:36:55:0e:8f:6b:
1c:36:12:0f:71:24:6d:64:b5:bb:25:bd:47:f5:13:
d9:e7:e2:03:fa:e6:75:9b:c4:92:84:29:dc:c3:30:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:81:B7:83:E9:51:05:83:9F:19:1B:05:EF:A3:3D:F0:E0:84:4A:CC
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/6585280b-21cf-4117-b60a-a89406148b03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:8380:2000::/40
Signature Algorithm: sha256WithRSAEncryption
6b:bc:53:8c:58:e8:24:03:47:39:21:27:ca:42:b7:25:22:9b:
23:6c:47:9b:5d:04:34:0a:95:8f:2c:fc:66:ab:bc:b6:18:18:
6d:f0:ba:7f:b8:63:fc:d5:5b:a1:12:68:f4:59:25:b4:40:ae:
2d:9d:ad:26:06:05:46:87:95:1d:ab:89:7f:d1:04:7f:f1:c6:
f6:bf:3d:16:ed:c0:97:96:e8:20:d2:8e:ef:27:7e:79:c4:fd:
93:02:69:d6:67:1f:9c:77:c8:cf:7e:f6:fb:3d:ee:93:57:72:
20:93:76:4e:8d:1e:48:54:af:d9:c4:11:b8:af:8f:7f:51:08:
10:b9:aa:83:0a:92:9b:ab:fb:42:94:cd:ad:06:8d:98:f4:9f:
c9:86:a9:54:d0:c5:73:d9:78:cd:92:ea:11:50:c6:27:77:8d:
58:13:42:27:b7:67:f2:c2:07:d1:fa:33:54:1d:21:a7:d1:ac:
01:c9:c0:0e:07:af:71:fc:56:7f:e0:7b:bf:21:e2:76:b1:21:
0f:86:16:b1:59:51:3c:52:9c:e5:bd:2e:5a:27:79:3f:dc:c6:
6c:7e:08:53:9a:d5:bc:1e:35:4c:0e:c9:2c:b2:ce:8d:f1:04:
a2:c0:df:11:0a:26:ba:8c:2f:7e:99:4b:7b:87:99:2a:1b:87:
76:2c:5b:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:31 2026 by rpki-client