
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa
File: 74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa (raw, json)
Hash identifier: dQRoJtLRFyoBG9dMDZcYCV6Gd8WplzTMytZ9BNjpUHo=
Subject key identifier: A4:56:50:B0:2C:C0:AD:93:7B:4F:43:2B:1D:B9:95:CF:3D:60:78:03
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D5FCCFF43294DD5AC7DEE42304CDEFDCC405CB0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa
Signing time: Mon 27 Jul 2026 00:20:45 +0000
ROA not before: Mon 27 Jul 2026 00:20:45 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff6:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5f:cc:ff:43:29:4d:d5:ac:7d:ee:42:30:4c:de:fd:cc:40:5c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 27 00:20:45 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=d56bfef7c9509116694ae63f01815627c93ab63537065947e7b09103b99c81cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:33:4b:7c:83:91:09:96:97:ce:0c:9d:56:06:
cb:ba:4f:05:d2:f0:81:4b:cd:8e:c4:b5:b0:f6:be:
bb:10:bd:e9:09:64:62:92:18:7e:ec:dd:d6:04:21:
39:2e:e6:6d:6b:3d:b5:ad:ce:5f:85:30:39:22:54:
43:24:57:1c:d8:e9:7f:bf:ff:fd:55:33:ad:9f:94:
c4:91:6f:67:4e:f3:1e:e1:35:b4:8f:42:19:f0:f0:
de:6d:45:5f:be:07:2f:70:ef:b1:f1:2b:15:86:00:
07:18:df:77:80:06:44:69:c9:c9:51:5f:5f:31:28:
8c:61:b7:c1:47:ac:fe:4f:bd:0c:0c:a9:22:39:07:
b7:1c:ea:7c:d5:3a:07:45:81:72:1f:43:e5:02:83:
98:53:f0:f2:dd:47:2e:16:4d:71:95:36:03:10:16:
31:73:98:35:4e:be:14:dc:2b:86:a3:1b:8c:0a:45:
3c:52:c3:7e:30:0b:bb:ea:c4:5a:67:ca:3f:bb:4e:
94:8d:67:a6:68:e4:44:02:c4:60:65:ed:9b:9f:f1:
fb:e5:51:b1:b4:09:dd:fe:1a:a7:3d:62:20:c3:a3:
2c:a0:c6:a4:d3:61:a4:31:0f:e5:a9:d4:b7:cf:e1:
23:3e:f3:38:48:fc:5a:e3:7b:9e:9b:40:07:49:c1:
ac:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:56:50:B0:2C:C0:AD:93:7B:4F:43:2B:1D:B9:95:CF:3D:60:78:03
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/74a60e67-a460-4b24-b4ff-3e3adb9ae7c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:5000::/40
Signature Algorithm: sha256WithRSAEncryption
71:da:6f:f4:4e:e8:9e:db:14:b1:ba:b9:15:a4:ed:28:78:68:
58:fb:6c:e2:0e:fe:48:ab:34:e3:63:ac:aa:ce:c6:0c:4a:39:
8e:84:d6:09:86:af:de:d2:ea:1e:24:11:d5:3e:db:25:11:2e:
69:61:87:f2:28:e3:84:36:5d:19:c5:43:10:26:5f:9b:25:5c:
0d:27:b7:fe:86:fd:5f:79:c1:65:c1:8b:6c:83:d1:2f:7d:67:
a7:03:de:db:7f:08:04:d2:fd:91:4b:84:1e:5f:dc:48:a4:9f:
13:9b:a3:94:12:73:06:ea:9e:06:33:eb:7b:7d:46:3f:4c:84:
f3:8d:c1:a3:9d:4d:23:f8:a3:02:d3:59:f8:d9:6b:98:ae:f1:
e0:2a:fe:d6:12:7e:a4:f5:18:c3:a1:ed:8b:61:c6:c0:1e:da:
e4:d5:bc:70:e2:90:c7:50:5b:7d:5c:db:cc:e1:1e:29:45:66:
5e:2e:76:e5:65:18:52:c5:72:d8:ed:3c:6b:cc:f7:5f:09:76:
73:b1:4d:61:5a:0f:db:27:0d:ba:4c:77:ae:87:e9:9f:41:32:
b9:d6:24:89:5f:00:88:56:3b:f9:3b:3e:ce:eb:72:48:6b:21:
59:d5:58:c3:04:44:d7:47:f2:7f:dd:b5:a4:b4:fa:41:42:ea:
4e:0b:a0:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:01:57 2026 by rpki-client