
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1043ae04-bf4f-4515-a5b0-4785e571896b.roa
File: 1043ae04-bf4f-4515-a5b0-4785e571896b.roa (raw, json)
Hash identifier: jRfeYiZ/ZtntcUVHW6yI+NV9CD0vJ+9rI3QUPcwALxY=
Subject key identifier: FC:B0:3E:EF:15:DB:AE:3B:04:C3:B7:A4:21:E8:5D:42:F0:D3:3E:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 49F31FF8C3FBA322B3D6A0B11F85AF0C3F9CDE04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1043ae04-bf4f-4515-a5b0-4785e571896b.roa
Signing time: Fri 22 May 2026 16:37:46 +0000
ROA not before: Fri 22 May 2026 16:37:46 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:8c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:f3:1f:f8:c3:fb:a3:22:b3:d6:a0:b1:1f:85:af:0c:3f:9c:de:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 22 16:37:46 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=9d572e4c54ae4f711f9335c6edbfb6062273e838fe8d1613d155c668ac640f17, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a3:42:99:33:84:4d:00:54:85:fd:51:4b:cc:
38:5b:ea:68:d6:50:3c:35:1f:3a:49:c9:05:9d:21:
1e:17:1f:e2:73:b5:ab:98:29:40:83:0d:73:c5:a4:
8a:8e:c3:94:1c:3a:87:c4:58:19:a6:ed:6b:e2:fb:
81:ff:bb:c1:1d:b3:7f:02:78:e0:ec:e4:2c:53:a1:
8b:61:c7:e4:8e:56:6d:06:7c:cf:3a:c0:cd:07:f8:
3e:e7:fd:f3:4a:d6:e5:8a:5c:6e:55:99:f3:14:d4:
e6:86:fe:8e:9e:d9:dd:4f:4d:42:6f:64:ce:7d:b3:
e0:a0:fa:65:b6:0e:3f:c5:f4:77:40:ff:0e:1e:34:
f7:a0:e5:70:37:c4:7b:c2:eb:71:d3:75:c1:51:3e:
51:28:35:fb:d9:a0:2a:d0:e6:90:e1:3e:ec:5e:36:
cf:4f:9f:82:74:63:11:d1:cf:8b:3a:d5:63:ef:0c:
3a:fd:cb:bb:a0:6a:25:38:7b:3f:e6:52:26:8e:ba:
eb:a9:05:b3:0b:53:32:dd:f8:e8:7d:1a:a0:bf:da:
ae:68:e6:3c:28:3f:8c:62:0c:50:4e:64:02:56:97:
95:bf:3e:12:df:98:7f:1b:e1:be:89:39:bc:2b:59:
1d:16:bc:fd:18:f7:7e:8f:fd:ed:9b:bc:b1:7d:32:
40:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B0:3E:EF:15:DB:AE:3B:04:C3:B7:A4:21:E8:5D:42:F0:D3:3E:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1043ae04-bf4f-4515-a5b0-4785e571896b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:8c0::/48
Signature Algorithm: sha256WithRSAEncryption
d8:ec:7b:7d:a1:36:e9:20:97:4c:29:b0:39:e8:1c:5a:c2:53:
da:c5:66:b5:f6:69:20:c3:ce:47:a1:00:45:f4:6c:a9:ab:18:
76:c5:15:61:a3:8b:06:b9:df:61:73:06:ba:59:a0:0c:73:6c:
4d:e3:45:60:27:06:bf:ff:fc:8d:cb:b8:f3:45:5d:f8:a8:f4:
4c:d3:88:00:33:c4:02:8a:2f:e5:1e:85:bd:69:de:be:40:c6:
fd:4c:0d:3e:1c:6b:b7:7f:3c:36:80:cd:d3:74:4c:2f:d0:c6:
b0:e4:d3:49:65:27:9b:d2:3e:b0:71:86:61:ee:16:8d:d7:64:
c1:79:01:6b:7e:fc:32:33:9a:29:2e:08:a9:cc:4f:b1:df:5f:
69:29:c7:46:02:e8:10:43:85:f0:af:f5:34:38:f9:f1:29:5c:
f7:8a:5c:15:c3:b9:28:15:c8:9e:16:da:ff:51:d0:81:47:f1:
07:2d:df:19:87:ca:5a:9f:cc:e7:4b:45:a6:db:67:ac:1e:00:
0c:af:14:fc:f7:c4:74:83:d4:d9:f2:f6:4f:44:af:49:cb:ca:
31:36:2c:c1:9c:46:f5:cc:80:b8:fd:c8:dd:9e:95:41:ca:7d:
14:9f:37:93:8b:a0:04:9a:5e:aa:49:b1:52:c1:d4:42:1a:49:
6e:5d:51:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:48 2026 by rpki-client