
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa
File: 3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa (raw, json)
Hash identifier: +NaYUo4Ie1LHnEp/vSx2GW5oe0QXDq+invVNiGDXnR4=
Subject key identifier: 6D:1F:FC:4C:37:16:80:59:19:C0:87:98:03:A6:99:E9:15:1F:78:F9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2970FF0EDA1746354090B08F88BFFAFE054A940B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa
Signing time: Tue 24 Feb 2026 02:20:08 +0000
ROA not before: Tue 24 Feb 2026 02:20:08 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fff:8100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:70:ff:0e:da:17:46:35:40:90:b0:8f:88:bf:fa:fe:05:4a:94:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 02:20:08 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=11441ebb2a51c013d5302cf72e7710724b5b2295eecfa0340faaff35b61a9fca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:3c:47:98:a5:e0:dc:bd:e0:12:a0:5f:b1:
ca:14:c5:01:0b:b0:c6:6d:6b:61:ae:26:90:a1:03:
cf:3f:55:b8:22:c8:52:44:1c:a1:31:5f:d8:f4:9d:
fc:76:ad:3b:03:e6:1c:8e:a7:86:66:cd:ac:f9:6b:
77:bd:db:f5:47:d4:28:ab:65:a7:d8:47:ab:93:92:
8d:2f:d9:b4:80:10:5e:ad:34:cf:e9:79:d1:88:a3:
88:3a:71:f2:bb:89:4f:c8:a5:f3:e9:ae:3d:c4:9c:
12:d0:d8:84:2f:a0:2d:6f:21:6c:09:fc:91:ee:bb:
0f:63:d5:50:da:3d:16:e5:e1:67:9b:0c:61:d6:e0:
18:05:0f:96:4a:30:d2:36:e6:57:4f:eb:d9:72:45:
b9:62:90:c2:9f:a7:82:e6:95:06:76:0d:57:68:11:
09:74:c4:cb:40:c1:c2:0d:98:11:d4:a1:de:e7:f5:
88:9c:8b:c1:b1:fc:3c:8b:3e:fd:ca:6b:6a:4f:17:
05:f1:24:fd:5c:ce:27:33:ac:d9:d7:87:e7:7b:2d:
b6:83:64:fe:43:03:c4:a7:73:ac:0b:86:d6:9b:b4:
9d:9b:82:7e:75:1c:9a:01:d3:28:e2:a9:5f:94:f8:
76:60:bc:0c:63:bf:38:56:f6:3a:ad:9b:b3:c6:c4:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1F:FC:4C:37:16:80:59:19:C0:87:98:03:A6:99:E9:15:1F:78:F9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a707de9-0f8f-4c35-b1dd-bdd213b68682.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:8100::/48
Signature Algorithm: sha256WithRSAEncryption
3d:9e:ce:77:c7:6b:30:b3:3b:85:20:5c:43:6d:4f:b0:dc:81:
bc:aa:e0:7d:1d:91:5e:ca:da:54:68:4b:bb:74:81:6c:22:02:
2b:e7:ad:fd:37:9e:a2:af:58:ed:98:3d:a3:5c:dd:1d:68:22:
02:ba:ae:32:03:9f:df:f7:94:f5:2c:89:c4:ae:69:b3:8b:3e:
e5:2c:fa:17:fd:bf:ca:b0:2b:dd:64:b5:44:bd:7f:04:f2:56:
7f:9a:40:94:aa:20:1d:96:0d:b9:fd:35:5b:dd:6e:7a:97:fa:
ee:ca:44:e2:aa:a4:52:ec:e8:92:9f:b9:f1:48:f7:84:73:cf:
3d:39:ae:76:bf:10:60:eb:a8:1d:75:b5:6b:d5:d5:04:a9:b6:
c5:4a:aa:c0:cc:38:6d:0e:97:fe:71:22:08:61:7d:ba:0b:8c:
09:21:39:15:74:58:f6:36:7f:17:82:47:78:73:41:b4:91:52:
8d:8e:27:ef:5d:b0:6d:26:d9:7b:ea:df:ab:a9:d7:61:a9:24:
f7:36:d6:89:ac:ca:7a:63:b9:8c:03:ce:ed:3b:ce:d7:07:02:
1a:78:0e:35:ab:82:90:19:f1:e6:51:7f:29:78:f5:14:a3:4b:
1b:a3:a5:4f:51:a7:f1:35:c0:1c:1b:e7:12:3e:48:0d:19:88:
81:f6:d1:ba
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:37 2026 by rpki-client