
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa
File: c8560206-4c68-46a6-834e-4971768d50f8.roa (raw, json)
Hash identifier: BS4FZdCothJhkujOvYM8YrmrXe9M7A4b41R1X6z6xGI=
Subject key identifier: 96:1C:35:27:0E:4D:54:DE:31:9E:43:FE:96:49:6C:98:64:D6:AF:DF
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 3702D3FE916671A0392A63EC965FB4763B95B4C5
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa
Signing time: Wed 05 Aug 2026 01:50:08 +0000
ROA not before: Wed 05 Aug 2026 01:50:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2606:7b40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:02:d3:fe:91:66:71:a0:39:2a:63:ec:96:5f:b4:76:3b:95:b4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Aug 5 01:50:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=435f8af06f1cadb8970b30bade157fbeb5e9d73a03dd84760f434fb1d8f3c171, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ed:6e:65:ac:ff:2a:b6:8b:5b:90:70:80:39:
e5:7a:7a:1f:c6:53:af:97:97:4c:c9:ed:fb:c7:e7:
62:16:69:b6:3b:53:0e:17:69:f6:93:f0:05:91:81:
a4:db:dd:90:10:b7:b9:b6:c8:7c:e2:dd:9a:cf:91:
f2:55:de:0f:f1:54:f7:43:d6:88:da:aa:fd:cc:43:
74:f3:10:53:fd:46:25:71:87:87:f9:4f:a4:ea:78:
67:0a:0f:ca:c1:a0:8a:00:02:87:da:af:23:e9:cc:
cc:3a:80:69:ea:23:02:be:04:98:65:76:c0:5a:a5:
40:fe:06:f7:26:0e:87:21:c6:70:62:70:66:94:e5:
e9:0f:21:ad:e4:14:83:35:88:f7:b9:c3:8b:e2:c9:
a7:61:9d:1e:4d:04:e6:43:bf:7a:dd:3a:6d:4d:8a:
f0:9b:5b:87:aa:d0:d0:d9:f5:ce:49:6c:b8:38:22:
66:2b:7d:07:4e:fc:28:11:ff:8c:fc:84:84:67:92:
ba:fb:fa:df:f1:6d:c6:8e:99:f1:a5:ab:3f:d4:d5:
81:3d:35:b3:ab:5d:bb:87:1b:22:7b:0a:13:ff:20:
70:d5:c7:77:d8:6c:69:81:ab:8e:bf:92:78:71:4b:
7b:b4:53:d7:35:b7:ea:68:19:5c:fc:2a:83:49:b8:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1C:35:27:0E:4D:54:DE:31:9E:43:FE:96:49:6C:98:64:D6:AF:DF
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/c8560206-4c68-46a6-834e-4971768d50f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:7b40::/32
Signature Algorithm: sha256WithRSAEncryption
95:2e:d3:80:71:57:85:7b:37:80:91:ac:1b:e2:3f:e9:e3:15:
cd:5a:63:85:c9:6f:15:a8:c3:5f:29:14:c1:c1:de:46:92:b5:
98:e0:00:c9:ce:3a:da:d7:7a:3f:53:fd:25:e0:44:db:ab:10:
8e:56:ec:40:b1:ae:f0:dc:f6:4d:84:f6:e4:9f:0a:5d:3a:ef:
39:d0:42:b3:a6:73:f5:cd:57:71:b6:45:45:cb:3f:dd:3e:e4:
27:ed:8d:cd:db:89:ce:31:6e:4d:42:db:7c:2c:4b:e8:e9:10:
e0:83:20:ac:7e:c0:6f:ca:14:30:3b:c5:db:9b:c1:5c:ad:a9:
56:76:10:ee:f7:51:35:e3:00:12:27:5c:1b:88:94:f3:4b:6f:
40:dc:6d:74:1a:4b:8d:44:f7:fa:a2:e3:2f:4c:94:5c:0d:1d:
fe:98:d9:22:08:d7:a9:80:c0:b9:c7:e1:f6:fa:74:be:95:09:
b2:8b:83:7e:67:60:4b:af:1a:d6:69:88:c5:e8:98:ed:65:69:
28:9a:dc:e6:08:83:85:e2:03:b3:08:55:fd:7e:0c:51:99:5f:
f5:36:83:2e:ac:63:d1:07:a1:d7:06:5d:b5:45:37:43:91:30:
6b:60:f5:6d:b5:88:93:09:5d:d4:92:c0:a4:86:cf:c6:78:46:
ec:65:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:16:27 2026 by rpki-client