
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7028fc-cc8b-4503-93ce-fd292b687eb9.roa
File: 3c7028fc-cc8b-4503-93ce-fd292b687eb9.roa (raw, json)
Hash identifier: idYssAgGy8OgO6vTIUz8s7x0NBpu/WmxzapEHlpyoDI=
Subject key identifier: 04:33:47:D9:69:B8:C7:70:83:70:FC:E8:03:22:CC:27:ED:9E:35:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1BB360A5E30D1C9C9BB1520AF2D7F1295C31D226
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7028fc-cc8b-4503-93ce-fd292b687eb9.roa
Signing time: Sun 31 May 2026 00:30:50 +0000
ROA not before: Sun 31 May 2026 00:30:50 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f33:8000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b3:60:a5:e3:0d:1c:9c:9b:b1:52:0a:f2:d7:f1:29:5c:31:d2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 31 00:30:50 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=ee25a0a6b5e0926e177a6a5c510694af1c0dfb8f0bada6c6941409cc0d8a49c8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c4:97:b1:b4:fc:66:da:8a:b0:f6:66:aa:44:
71:43:42:3b:96:b9:c0:74:70:3f:9d:40:39:23:b4:
ae:9f:12:d2:ff:4f:16:87:c5:25:da:2a:24:33:7e:
57:30:13:ed:a3:bf:79:87:18:5c:18:26:1f:fc:af:
53:fb:35:91:64:5f:a4:b1:ca:ff:f8:9e:f1:a5:dc:
19:30:ea:4e:b7:ff:da:a6:9c:a2:27:75:93:8c:05:
6c:74:9f:f8:b6:ae:3a:fb:2b:c9:57:66:db:d6:af:
78:46:10:e2:18:e5:ac:f9:6c:54:45:40:09:f0:87:
5d:1d:9b:e8:72:1e:a1:04:61:89:7d:9a:e0:74:1a:
81:15:4b:ab:98:19:8c:74:eb:93:ac:6a:55:9d:d7:
68:96:2a:04:7d:13:a2:71:01:98:9d:d3:52:96:fb:
4c:1b:07:78:e0:10:22:00:a6:10:f3:46:cd:61:a3:
f1:d0:c6:d5:a7:11:6f:bd:0c:bd:a8:e3:e0:d4:db:
e4:42:6f:e0:72:a0:b3:f7:13:8d:80:91:49:bb:d2:
76:7d:dd:c0:e4:7d:4c:77:4d:4c:fd:5b:0d:72:f7:
46:1e:94:5d:0a:ce:b7:87:b4:af:bc:31:32:9e:27:
31:11:9e:1c:36:c2:0d:b6:a7:93:21:79:1e:44:30:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:33:47:D9:69:B8:C7:70:83:70:FC:E8:03:22:CC:27:ED:9E:35:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3c7028fc-cc8b-4503-93ce-fd292b687eb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f33:8000::/39
Signature Algorithm: sha256WithRSAEncryption
b9:76:1e:22:d0:9e:61:a8:ad:fd:4e:d7:3e:86:c1:21:13:81:
e6:d0:b9:3b:50:3f:e6:55:09:eb:c1:04:57:3b:a4:a7:8c:8c:
71:e5:d3:09:e6:3c:dc:31:7f:d3:2b:5f:92:40:e2:b5:94:d1:
f7:fa:19:9b:08:57:0e:78:f7:68:d0:fd:74:75:e3:8f:19:aa:
3f:91:bc:f3:14:7d:01:69:28:86:23:82:78:a5:96:57:3f:3e:
0a:99:0d:8a:54:f1:35:13:5b:9e:d4:c7:b4:54:57:7f:94:8f:
0c:c6:74:54:48:d2:fa:d2:05:c1:55:5e:44:c2:19:b9:03:94:
7e:fd:04:4d:34:de:9b:78:87:51:27:42:5f:f2:12:d7:3c:cd:
08:64:08:09:69:5b:90:40:6d:42:45:61:fc:9a:db:3c:39:b8:
87:2a:5f:ce:13:b5:b1:5e:db:96:31:e4:f7:68:d8:43:dd:7b:
82:90:90:af:f0:01:73:c7:92:31:b9:4e:0a:8e:71:39:c4:7b:
17:4a:62:52:a4:c7:88:30:09:87:ea:84:84:80:42:28:61:e7:
5c:15:15:b1:45:67:d8:4c:fd:8c:d6:55:ca:3d:d6:a9:e9:f0:
12:7b:ae:6c:13:e4:ec:3e:4f:f8:74:df:8b:06:00:c2:60:d0:
eb:03:40:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:18:55 2026 by rpki-client