
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa
File: 6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa (raw, json)
Hash identifier: kec55Bo0/duc/0EicaWF9acC/ySaESgLQA89pzalDa8=
Subject key identifier: C8:24:3D:71:8F:95:03:09:8B:2D:D3:0C:C3:05:23:F2:2B:3E:5A:73
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F790FDC81EABF87C4877E4A10110D3CD91836A0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa
Signing time: Wed 11 Feb 2026 01:10:39 +0000
ROA not before: Wed 11 Feb 2026 01:10:39 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:79:0f:dc:81:ea:bf:87:c4:87:7e:4a:10:11:0d:3c:d9:18:36:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 11 01:10:39 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=2da981b9d5daf235b4bcb6e045763e3d4039afc8432676a78c81daaf74f490e4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:e9:d0:ec:f0:e0:3a:6b:11:1e:70:4e:84:
57:75:11:7f:0d:c8:42:11:c2:69:4c:a0:db:48:54:
fb:43:4a:7e:d2:58:4b:19:e1:50:fb:aa:ba:b9:3b:
7a:4b:76:0d:2d:34:b6:7c:5b:6c:24:34:fe:75:26:
32:7a:39:a6:0f:28:e9:6d:d8:a1:3b:01:27:22:f1:
09:95:64:66:98:3f:c2:c3:a6:56:c1:66:47:58:86:
4d:f7:87:03:4f:7c:17:45:f8:60:0d:75:ff:e9:5b:
63:6e:31:35:13:dd:e4:25:ea:e6:33:38:0f:df:87:
e5:97:14:69:b0:67:ce:d4:1a:74:b4:f6:bb:b9:5c:
af:66:5a:d9:03:3d:4c:99:ad:e3:58:7d:85:e3:40:
e1:3b:e8:76:7d:a0:d7:38:a4:a9:3e:6c:65:ac:11:
1a:cf:d2:e1:13:1c:95:00:0a:58:c9:e6:ad:79:b0:
1a:b3:9e:b2:bf:fc:fd:5b:45:ec:b2:81:e2:25:9c:
08:ac:56:b9:f2:ca:d6:fe:41:fe:45:9e:25:ce:8e:
03:7c:01:04:44:ef:89:e5:a4:b9:bc:3c:de:4a:ba:
ed:20:c0:d6:90:1c:3d:d6:f6:a9:1a:80:43:97:cd:
56:45:6b:1b:33:c7:fd:a5:8f:b6:d5:d3:f2:b6:01:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:24:3D:71:8F:95:03:09:8B:2D:D3:0C:C3:05:23:F2:2B:3E:5A:73
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c1a5029-7410-499a-b77d-92c3cfc4dffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:1000::/40
Signature Algorithm: sha256WithRSAEncryption
9d:0a:78:21:cf:3d:a1:a0:32:1d:e4:9a:58:b9:17:1a:f4:9f:
3a:93:2b:43:ba:21:13:1b:7a:1a:25:9e:76:69:ee:7e:e6:38:
50:07:d5:73:e2:4f:f1:f3:ad:98:db:27:ae:9e:b2:e1:77:c7:
05:a0:a6:e3:9b:f4:f9:1b:8a:a7:9c:68:8e:28:fd:0a:fe:bd:
47:78:2f:62:52:22:b5:0b:6f:f7:d5:9e:0a:52:ea:4f:dd:b1:
a0:f9:67:93:a2:38:ea:e6:12:fb:b9:84:f0:b1:d0:7e:df:c5:
9c:16:df:6e:06:f3:cc:8f:9d:53:8b:d1:f5:5d:21:ee:36:58:
dc:8b:82:66:28:bf:01:77:9d:d1:7e:1e:c8:29:f5:97:16:cf:
d5:7d:8f:b0:13:a7:3a:83:8c:f8:0d:e8:96:68:33:20:98:a8:
00:91:39:e5:b1:f7:cb:ea:b8:15:93:b6:08:71:f2:94:96:3f:
1f:94:cc:3f:83:48:3a:ae:7a:d8:f8:b4:8c:2f:25:5f:ef:a3:
b0:14:58:a1:54:a1:09:6a:ea:00:c1:ca:3b:e1:43:3b:99:00:
59:9b:10:30:44:88:79:8d:c7:71:c7:1b:fd:5d:b3:87:e4:c1:
55:92:f8:f1:e8:c5:27:53:71:e9:2f:11:ba:f4:4a:33:b5:c3:
5c:39:1c:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:52 2026 by rpki-client