
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf4c062-7d7f-463f-b9e9-61b944d28ea9.roa
File: 9bf4c062-7d7f-463f-b9e9-61b944d28ea9.roa (raw, json)
Hash identifier: cKjx4JdWosa91xOTo0eCxMRO2FSx6b6w959dXknl5aI=
Subject key identifier: B8:38:04:72:A4:DB:18:23:33:42:34:C2:AC:A1:DF:76:65:54:FF:CA
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3522F6D2D4F48585DD5820CD0043A00DDEDC843E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf4c062-7d7f-463f-b9e9-61b944d28ea9.roa
Signing time: Fri 22 May 2026 16:35:58 +0000
ROA not before: Fri 22 May 2026 16:35:58 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe8:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:22:f6:d2:d4:f4:85:85:dd:58:20:cd:00:43:a0:0d:de:dc:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 22 16:35:58 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=bf13c86fa04e343de3c8ece91b47449086713689f8d554d1f2d779260ec0e307, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:0b:34:69:45:34:ee:62:00:26:f3:b4:9f:
b5:fe:a9:76:27:95:d7:d0:42:00:86:81:33:9f:f7:
9d:be:4d:c9:66:4b:af:48:6f:d0:e4:39:36:ab:de:
63:6a:0c:ff:dd:54:56:39:e8:78:2c:6f:43:1b:9c:
0c:e3:bc:99:f6:1e:75:e8:1a:be:82:14:5f:4b:82:
49:fc:bf:43:1c:b1:57:89:da:8a:15:07:28:60:c6:
cf:71:e3:cb:64:f5:24:d7:cc:1e:d5:e7:8b:a2:55:
12:dc:66:ce:51:00:fb:83:61:f1:dc:83:e4:dc:ad:
60:da:35:46:ba:f5:ea:25:81:60:ba:48:ee:37:26:
84:73:bb:6e:34:d5:cc:d0:57:2c:04:63:b0:d7:24:
44:6d:b6:82:f8:0c:e9:61:ec:cf:53:1a:ce:a0:fd:
e5:6f:5c:83:0d:ce:38:f6:4c:f0:e3:b0:15:df:b4:
3e:a0:91:a5:4b:84:af:13:ce:35:78:94:4f:8d:d9:
71:5d:f6:12:00:0a:80:12:63:a2:e3:7b:45:26:8d:
6d:d1:f8:87:6b:b3:fc:74:bb:d4:db:1d:bb:c5:be:
29:7d:e5:39:e3:39:5f:19:b7:4d:bd:9c:fc:c2:71:
35:24:a3:8c:8c:41:35:7e:5d:79:64:f3:d3:bc:e1:
be:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:38:04:72:A4:DB:18:23:33:42:34:C2:AC:A1:DF:76:65:54:FF:CA
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9bf4c062-7d7f-463f-b9e9-61b944d28ea9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe8:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
84:db:41:c5:9b:10:de:6a:2e:8c:2c:7b:66:63:cd:84:67:2b:
5e:08:f2:c5:21:f8:0e:c9:03:c8:a1:df:b7:c1:15:5a:c8:21:
1f:9b:97:d2:41:36:e1:4c:d3:f7:c7:4c:84:06:c6:8e:6c:52:
d0:d9:89:dd:18:a3:79:ef:7a:65:18:cc:c4:db:d3:5a:ba:cf:
73:f1:91:ee:34:c7:28:87:3f:58:f2:30:47:78:53:c7:0b:c2:
b5:0a:d5:41:f6:81:3e:08:08:23:0e:47:ef:f1:5c:b6:ba:7d:
ab:22:0f:de:65:bf:63:66:e9:14:4b:24:90:cb:d7:a7:6b:03:
7a:14:48:74:39:58:ba:d3:fb:e6:51:10:89:b2:25:70:54:5b:
d7:2f:0b:33:df:04:fd:37:b7:d0:64:0f:f7:5c:9a:ba:f8:00:
eb:31:31:ac:24:b9:25:99:eb:ac:1b:db:c7:a5:06:7f:c3:7a:
a4:b0:18:6d:49:f5:64:e6:d0:5a:60:a9:76:bf:97:f9:29:fb:
cc:46:54:2d:64:1e:31:5c:ba:e9:2e:c6:43:52:f5:09:f2:ed:
b9:26:49:42:ff:80:cd:9f:90:a1:e8:7f:70:99:36:8b:fc:7d:
90:b2:62:b3:b5:76:70:e7:fe:33:25:67:4b:de:bf:d2:94:11:
08:4c:7f:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:51 2026 by rpki-client