
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa
File: 538d0377-3611-4c1a-a172-2e35b6509d3f.roa (raw, json)
Hash identifier: ru7aJvZrbUKtJZfDSGC0f/Pdwq/cTRxnXTxcG81k3Ps=
Subject key identifier: 0E:B5:F3:6F:E6:87:A2:FA:4C:1C:DC:7F:11:BD:93:1C:88:61:CD:FF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B18804C8606770D7FFF4200697680BD4761402C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa
Signing time: Fri 15 May 2026 00:31:13 +0000
ROA not before: Fri 15 May 2026 00:31:13 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:80a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:18:80:4c:86:06:77:0d:7f:ff:42:00:69:76:80:bd:47:61:40:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 00:31:13 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=a85a4c306d2a1361a54a38bdca0658fe039370da9e8df1615539e8b66aa91181, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:78:8e:bf:fc:2d:67:72:ca:05:1b:0f:4c:
6c:d8:39:5e:fd:0f:63:22:bf:1e:8e:12:76:49:4d:
1c:b8:09:5a:bb:80:31:84:16:91:b5:55:f3:86:3e:
36:36:36:64:34:39:99:18:54:ab:04:c6:63:1d:04:
bd:5a:29:37:34:4b:43:75:d7:32:54:41:64:7e:29:
58:02:e6:22:33:60:bf:bd:a7:d5:3e:72:62:9b:7e:
c0:f2:9d:4f:8a:e5:00:20:21:45:3c:17:81:f9:c0:
82:f5:4d:57:9d:3a:f7:06:1f:5f:b8:9f:73:fb:7e:
23:a3:8c:4f:67:07:f1:95:b3:b0:e0:a9:04:02:31:
f0:82:a8:ae:16:a1:12:04:6b:0e:08:40:e6:51:1a:
ba:7b:e9:1f:f1:91:ac:0c:63:aa:19:35:a1:95:ce:
14:23:94:18:18:e8:de:56:3c:2b:76:9e:01:32:f8:
2d:87:25:e0:d6:9f:f8:af:99:18:43:3f:0f:c1:86:
0f:7f:49:98:eb:0b:7c:73:62:a2:03:c8:cf:b7:fc:
d2:3f:1a:18:7b:6f:84:36:fd:06:8e:de:b1:6c:2b:
c6:fe:58:1d:84:51:5b:ab:35:9a:38:db:78:a1:54:
fc:8c:f4:1b:d2:01:2e:f7:2d:87:73:af:2a:5e:7b:
89:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B5:F3:6F:E6:87:A2:FA:4C:1C:DC:7F:11:BD:93:1C:88:61:CD:FF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/538d0377-3611-4c1a-a172-2e35b6509d3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:80a0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:b0:0e:c6:77:a3:84:c9:29:09:f0:b7:d1:05:f8:85:10:52:
79:7f:a3:25:a6:a4:f4:39:e8:8b:79:41:94:81:dd:74:b3:e8:
d8:b4:b4:90:14:f2:ff:86:7b:0b:7b:97:d3:f9:7a:68:2c:4c:
a3:f0:f4:96:41:9c:f0:d2:a7:06:0e:e9:20:26:da:0e:3b:e3:
98:f3:eb:eb:5f:c2:67:d0:2f:37:8d:91:71:4c:da:ad:a5:51:
ef:f2:bc:f8:b2:e2:95:ab:7f:42:8e:bd:7b:61:ce:1d:36:cc:
95:a1:63:78:eb:46:72:70:db:f8:4f:48:f9:58:96:66:3f:52:
f0:db:36:3f:aa:73:00:3d:f5:79:19:15:b8:0b:7b:a5:60:eb:
dd:9b:d7:01:dd:db:ce:be:eb:d7:b6:26:7f:74:e9:45:8b:dc:
9b:1f:be:80:b9:16:db:2f:b4:3e:34:84:bc:84:a4:cc:87:9d:
13:cf:0e:5a:a8:1b:9d:f4:d0:e5:7d:8e:a5:3b:21:5c:59:57:
9a:97:72:7d:81:c1:ef:6d:92:98:1c:4e:6a:77:b6:a0:70:e5:
1f:a9:3a:08:f2:5a:1e:6c:ca:0c:52:5a:7a:8e:4b:90:e1:35:
c6:be:80:82:5e:c4:b9:44:13:ea:f9:8b:28:70:0e:2b:52:e7:
19:29:ae:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:18 2026 by rpki-client