
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e3d6a25-c27b-4035-aa95-0f1d7037999f.roa
File: 0e3d6a25-c27b-4035-aa95-0f1d7037999f.roa (raw, json)
Hash identifier: P7yvKHawT3h2g9qa77ie53odDZH6IyTtyjSBxeoZVQQ=
Subject key identifier: 85:D2:82:09:EA:5A:D7:30:27:E7:C2:FC:28:B7:BD:12:18:D0:8A:B4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48BD6E564ECADA5785C4139618D978A84790F691
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e3d6a25-c27b-4035-aa95-0f1d7037999f.roa
Signing time: Fri 03 Apr 2026 00:21:24 +0000
ROA not before: Fri 03 Apr 2026 00:21:24 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:74c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:bd:6e:56:4e:ca:da:57:85:c4:13:96:18:d9:78:a8:47:90:f6:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 3 00:21:24 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=5334cf60a334298812155e77a1ac35ab3165dd66bda5649b496f5a00d0437c7a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:70:38:61:c8:cc:00:2f:80:cb:d3:55:e5:
65:3b:83:23:53:18:18:2f:63:97:2e:da:04:9c:62:
9e:c2:c1:03:e9:88:b6:be:f8:7c:f7:bd:cf:4d:f6:
6d:67:7b:29:de:15:18:85:6b:61:01:10:dd:4f:95:
56:b6:b2:d9:80:f4:23:35:ff:24:0f:38:45:98:84:
f3:b4:fc:90:3e:d4:cb:4c:9d:b3:f5:51:f7:46:2d:
18:67:fa:39:e2:47:06:3e:3f:63:26:70:3c:c2:5a:
c1:ae:48:e8:b2:fa:a0:b9:4b:df:ad:bc:cd:ac:b3:
df:8e:d8:be:38:d9:e5:58:45:e6:08:92:23:c3:28:
15:50:97:1e:82:e4:21:0d:25:0b:13:04:2f:08:11:
9c:36:8e:96:53:de:81:d7:36:1e:9a:83:fe:36:02:
47:ce:27:2c:fa:4d:5d:98:d8:6c:f1:9a:cd:b0:0b:
3b:9a:6e:90:e8:55:b9:e2:fd:fb:00:11:56:97:4b:
a5:e5:91:2e:4b:dc:03:bd:66:1f:4b:2b:ee:ed:0d:
23:47:66:9e:c2:00:11:d4:bc:0f:9d:a9:a5:1d:9b:
1f:cf:29:62:cf:0a:e2:38:5a:be:43:8c:64:5b:85:
fd:c9:21:db:ff:47:cd:db:95:21:90:29:7a:1f:9a:
46:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D2:82:09:EA:5A:D7:30:27:E7:C2:FC:28:B7:BD:12:18:D0:8A:B4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e3d6a25-c27b-4035-aa95-0f1d7037999f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
be:79:b9:0a:c0:89:d9:80:ca:64:1e:0d:a0:24:b8:93:98:b6:
8e:97:90:41:73:b3:fa:a7:ea:6c:66:51:2a:fc:3f:a7:d4:29:
7a:08:cd:44:d4:b6:3a:bb:c5:a1:96:a3:dd:04:36:1f:5b:03:
33:e0:ca:91:49:34:3e:23:5b:e6:6b:a8:67:fe:c1:f0:2c:32:
83:8a:25:58:d2:7b:07:7b:e7:90:4b:0e:59:53:fb:4f:26:06:
e3:b9:6a:75:ad:8e:5b:ec:58:c0:ca:a0:be:00:17:00:fa:a2:
87:4f:e1:97:f7:ce:a8:42:07:56:44:c3:9e:08:76:26:a5:ba:
70:66:f1:ca:e9:51:3d:70:64:2c:2b:f5:a1:84:9f:31:bd:c7:
75:d4:81:8a:3b:e3:35:9f:d5:80:5a:d5:34:6c:86:87:38:38:
0d:e9:41:be:52:13:35:e9:2e:e2:fb:ae:23:fe:31:6a:b1:46:
6d:15:5a:af:f3:56:84:c5:92:b2:fb:99:13:47:85:4e:5b:99:
ec:33:84:77:b5:c5:e8:57:9c:0d:64:5f:99:80:0f:b8:96:f7:
d0:e5:37:7f:be:24:6d:22:62:d3:e7:19:e9:32:1d:5b:bd:79:
90:23:39:b4:16:8a:ac:cc:6b:f1:e0:ef:78:ee:12:2e:33:f2:
69:26:61:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:17:40 2026 by rpki-client