
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
File: 402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa (raw, json)
Hash identifier: AC951lMtSVHpzWDggObmyg/8IlDgIihDtESCKF5hHFk=
Subject key identifier: E8:EB:7B:B3:40:0D:1C:1D:C4:E5:AF:78:6C:6E:B5:E9:A2:19:51:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5360C989E652B87DD77C244806403C652835C5D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
Signing time: Sat 16 May 2026 00:20:48 +0000
ROA not before: Sat 16 May 2026 00:20:48 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:7400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:60:c9:89:e6:52:b8:7d:d7:7c:24:48:06:40:3c:65:28:35:c5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 00:20:48 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=7c126884c537dddabc24c55e56b2fc783fbf93a376ec1969e0c67cf989dc71a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:ac:fb:ef:30:dd:17:ad:c9:d4:71:36:1a:
a9:43:13:8c:56:ee:ed:93:ac:54:bd:ba:fe:29:3d:
f9:13:d8:97:69:f2:23:ba:c1:55:43:1c:08:1d:22:
82:8b:83:67:50:78:51:01:f8:39:38:47:27:58:1c:
55:73:60:4d:c6:e6:8b:8b:fa:96:8f:db:9a:d4:b6:
83:74:24:53:e2:f5:33:3c:cb:2f:3f:c3:71:b8:c2:
38:c9:1b:bd:16:1e:12:c8:69:90:8b:62:d9:e2:0c:
ec:4b:25:e5:b2:7a:16:60:4b:44:14:aa:a6:99:78:
17:3d:47:02:cb:43:58:4b:6b:35:47:b6:93:f4:10:
7c:61:21:bf:7d:88:ee:36:ed:81:07:a1:8f:db:06:
29:8a:ec:a2:98:a2:03:2e:9e:84:f1:5e:b7:1d:95:
de:4b:06:76:36:d5:00:97:ec:77:13:1a:0d:d2:18:
9f:05:b3:16:61:70:7d:ff:c9:70:37:83:3c:93:ab:
c4:a1:a4:be:61:c5:e8:2b:73:cd:9b:b3:70:25:b0:
81:f5:51:45:58:fe:77:5e:c8:d6:63:d6:1a:6b:9a:
a1:2d:cf:32:b1:9f:7e:04:8a:eb:cb:99:88:9d:c7:
83:2e:8f:bf:b4:16:a8:f1:5b:f7:79:78:07:7b:b1:
b1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:EB:7B:B3:40:0D:1C:1D:C4:E5:AF:78:6C:6E:B5:E9:A2:19:51:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/402c7a3a-8627-4d6d-9145-42e2b1f544cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:7400::/40
Signature Algorithm: sha256WithRSAEncryption
be:8e:79:fa:1a:aa:0d:8a:73:48:78:45:34:5e:ea:91:c5:a3:
71:49:bb:dc:c2:f2:41:d1:5e:95:78:b7:a7:cc:fb:92:4f:d3:
78:9f:a7:2c:fe:a8:e6:da:0c:6e:67:23:f0:f3:51:57:4d:14:
63:fa:e7:98:af:74:c2:d2:b4:15:9b:c4:aa:17:ec:4b:e9:87:
88:57:2c:b2:d0:a6:48:90:d9:8f:3a:14:79:ce:e1:d4:3e:a8:
bd:6c:e0:11:95:05:e6:04:0e:05:4f:7a:d4:7a:45:14:6f:ee:
cf:c0:4f:01:b7:9e:6b:c8:03:3e:08:34:97:f9:ba:00:8a:bf:
1d:e5:f5:28:c0:e3:5a:0b:9f:25:37:7b:f0:a8:d5:ce:02:ca:
65:43:41:23:04:c7:b6:94:24:9d:ec:8a:3a:c7:88:87:2e:21:
4c:5d:13:b3:6e:f5:8c:a2:76:df:9d:41:c9:bf:5d:6c:33:ee:
0b:38:92:be:fa:c5:fd:f2:22:e1:ac:96:6d:15:c9:6e:d1:dc:
f2:64:98:00:1f:8e:5d:a5:7f:bb:f4:78:09:a3:f7:26:af:df:
5a:f0:d2:94:4e:ab:d1:d3:02:b2:2e:d3:bf:76:fd:02:70:06:
38:be:3f:6e:63:a6:4d:d6:12:33:fb:e4:74:1b:72:d3:23:18:
c2:48:70:62
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:05 2026 by rpki-client