
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/667d0247-2905-4f6d-8409-8aae47c9b71a.roa
File: 667d0247-2905-4f6d-8409-8aae47c9b71a.roa (raw, json)
Hash identifier: U+OyufnWPB+kL2IqnyMdXW6IYpJu6QMapNrM9Gtz1SA=
Subject key identifier: 61:CA:CD:78:4C:80:A9:52:DA:2B:15:BE:62:02:B6:09:D7:7E:B7:C7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61906109B0D4FE89E8E0367FF55A14AB94F53A7C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/667d0247-2905-4f6d-8409-8aae47c9b71a.roa
Signing time: Fri 22 May 2026 16:35:57 +0000
ROA not before: Fri 22 May 2026 16:35:57 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe8:4040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:90:61:09:b0:d4:fe:89:e8:e0:36:7f:f5:5a:14:ab:94:f5:3a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 22 16:35:57 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=1f9aafd605e54480ee03ed70eff0b73b9534c33736817d0a8c2da60eb11783a4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:5d:ed:4a:e1:d4:08:86:93:21:a4:48:ea:
7e:31:4e:18:50:cf:f0:27:15:30:79:b2:14:69:44:
c3:4a:5a:90:97:b1:f9:a8:03:bb:14:f6:ae:71:89:
fc:cf:b7:eb:02:17:7f:bc:c4:3d:0d:30:ce:9e:fc:
67:f9:4b:dc:25:ae:64:43:48:3b:db:00:ce:06:52:
f2:49:90:9f:b9:ad:0f:72:27:4c:ea:9d:21:50:9b:
62:bd:2d:2b:d8:a7:76:32:f6:42:b6:08:48:15:57:
cf:4a:c6:0b:a6:53:0b:01:78:7d:37:59:52:73:de:
c9:37:ff:74:d2:ad:9d:9b:31:b4:fd:6d:8f:76:85:
40:b9:d4:fd:62:39:6d:b1:09:63:bb:a1:94:92:20:
d2:be:9e:a7:1d:72:1a:e0:be:ed:84:52:df:e6:20:
ad:f6:0b:ca:ab:5d:12:84:0b:24:20:7a:03:18:2f:
51:f2:33:ee:a5:4e:bd:54:05:9d:b6:8e:a4:c5:c9:
bf:cc:0f:62:52:27:33:ab:90:39:58:fd:05:38:d8:
ff:2d:89:1e:c4:4a:49:bb:1c:c6:ad:ae:3d:c3:12:
91:7b:9c:f9:db:31:43:7c:2f:c1:fa:fa:07:6a:5a:
f5:ea:e4:9e:76:93:42:02:33:2f:1e:0c:9c:55:01:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CA:CD:78:4C:80:A9:52:DA:2B:15:BE:62:02:B6:09:D7:7E:B7:C7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/667d0247-2905-4f6d-8409-8aae47c9b71a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe8:4040::/48
Signature Algorithm: sha256WithRSAEncryption
18:11:74:f0:4f:eb:7e:8a:02:f3:43:49:9f:f6:c7:46:2e:97:
aa:2d:13:74:d8:c7:c7:bc:f3:28:29:e2:b8:10:ab:8a:a5:bf:
f6:00:c8:b5:4e:d4:57:bd:bf:3c:43:4b:8d:3e:ea:10:af:ab:
c9:76:2d:20:fd:16:a7:59:74:47:88:4d:c3:76:71:e0:84:c8:
e1:c8:ea:4d:f9:63:db:87:fa:96:f3:09:03:53:8b:1d:93:8c:
5b:cd:2a:c9:45:aa:e5:e0:e7:40:9e:87:c0:11:51:2c:eb:37:
1c:9c:62:36:0a:44:3a:19:34:bf:84:10:20:23:85:45:b7:dd:
8a:4b:89:11:27:7d:3c:df:5d:31:1c:78:a1:b9:bd:2d:9d:5e:
37:1e:45:3d:83:28:25:1b:e8:9c:c4:69:47:96:a3:ef:b1:7f:
ca:95:37:20:e8:e2:38:7e:11:c1:e8:54:f1:42:97:9f:1d:fc:
1b:d2:71:27:e9:51:2c:03:f7:b0:98:1f:58:ef:9c:05:18:78:
c7:69:b9:aa:06:c4:9a:b6:f3:27:2c:e1:e5:8f:af:f8:f5:c8:
3d:3b:96:32:b5:83:1c:cb:bb:ed:e7:a7:d5:ae:b2:87:ff:6f:
df:0f:a2:87:48:25:27:72:3d:4f:25:f3:c3:7a:82:bf:2a:0a:
0b:27:16:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:34 2026 by rpki-client