
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f5667cf-3895-4afa-9bc8-2d328400bfb2.roa
File: 5f5667cf-3895-4afa-9bc8-2d328400bfb2.roa (raw, json)
Hash identifier: xQe/c8TPjLUTgaunEvMqlB/XIirOVWfDfMHfsFuh86w=
Subject key identifier: C9:01:A5:B5:BA:86:E8:BE:80:B7:25:88:51:14:CB:2F:38:F9:9D:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 705AFFA735E3C17A2C2E85950FCF39D275236313
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f5667cf-3895-4afa-9bc8-2d328400bfb2.roa
Signing time: Sun 31 May 2026 00:41:18 +0000
ROA not before: Sun 31 May 2026 00:41:18 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fe9:8060::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:5a:ff:a7:35:e3:c1:7a:2c:2e:85:95:0f:cf:39:d2:75:23:63:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 31 00:41:18 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=b655de73bce059a1f2afc662609088c33f3dbea811131c005d4da9f50296dd3d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:28:7b:a8:c3:5a:2d:ba:19:ab:a0:40:14:03:
1c:c1:7c:76:a3:cb:41:fe:1d:ae:81:1d:05:8b:62:
f1:38:f8:4a:6e:ee:e7:98:b0:ed:a6:ff:b9:f3:7b:
3a:8d:2a:43:c2:2c:e9:5b:f0:c8:d6:56:c8:9b:80:
d3:28:b1:5e:f2:90:53:93:bf:14:5e:5e:5d:a2:85:
0c:93:fe:3f:b5:90:45:8c:ab:19:2a:b5:d6:a6:e7:
8c:13:31:73:ea:83:57:c3:56:94:a1:23:23:fb:9b:
51:3a:e8:89:4f:ef:28:ca:09:3f:07:5d:e2:fe:1b:
e7:98:48:63:2c:49:1e:a5:ce:d1:90:b3:ba:48:df:
73:d6:81:ed:a4:aa:e0:cd:ce:52:3e:bf:0a:1a:b3:
c4:38:8a:96:9f:26:27:85:17:f8:43:e8:38:8e:75:
27:85:76:9a:c3:e6:5f:75:86:01:6c:a2:c9:76:89:
1c:84:1a:1b:77:29:8c:34:34:f1:dd:12:0c:3e:8a:
36:db:9e:9b:3d:68:b3:e2:de:c7:1e:be:30:35:80:
51:db:9c:20:1e:12:80:48:cd:26:cb:ad:d1:a7:6b:
1a:fc:3d:57:b9:f3:b8:2c:47:58:fe:9d:61:5d:87:
b8:1f:53:6a:0b:81:97:a7:fc:ff:85:92:b6:81:6c:
54:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:A5:B5:BA:86:E8:BE:80:B7:25:88:51:14:CB:2F:38:F9:9D:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5f5667cf-3895-4afa-9bc8-2d328400bfb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe9:8060::/48
Signature Algorithm: sha256WithRSAEncryption
a3:1b:5f:12:3e:27:34:e2:1d:e3:14:d2:31:20:76:dd:07:cc:
17:de:5d:83:1e:33:fe:3d:20:01:99:1f:72:8a:a1:45:bf:6e:
e9:9d:e1:9e:7e:69:87:9c:4b:6b:a5:8b:4e:dc:2b:59:06:21:
2a:f2:90:ae:42:53:21:ae:4b:86:cf:01:5e:fc:5a:0a:af:6b:
de:73:c0:0e:b9:f3:90:12:55:f0:0f:39:17:52:fa:3e:1d:ce:
c6:5a:3a:cf:be:63:8e:3a:b9:d6:68:0a:62:64:84:b8:1f:2d:
31:f9:89:80:bd:ac:69:6e:9f:a2:5a:82:94:13:0d:a1:5f:a8:
4e:c8:62:f3:fc:9d:05:10:93:2e:d1:eb:a6:68:ef:bb:41:dc:
17:15:d6:84:ec:00:09:f9:ec:42:5b:40:92:1a:5b:b0:71:b8:
4d:50:11:20:ac:76:4f:48:8d:1d:b9:03:3f:89:a2:8a:13:8e:
3e:eb:44:6b:3a:06:bd:4d:7f:97:f7:b2:94:f5:8d:50:df:f1:
8c:2f:02:50:67:2f:87:f0:97:36:0f:09:b1:96:df:d3:b6:56:
39:23:91:bb:5e:2a:a5:38:e9:50:5c:d7:eb:4f:5b:3c:a9:73:
4e:46:c2:a8:d6:ee:9d:f4:ec:81:73:86:17:85:02:a2:1e:7c:
6c:f5:b6:40
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:15:45 2026 by rpki-client