
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6245694-8023-45c0-b9fb-372b487035d3.roa
File: a6245694-8023-45c0-b9fb-372b487035d3.roa (raw, json)
Hash identifier: pCKFiCqGljHDZ+Z5770pom23bWKiZXTU4lwe3zNOu+I=
Subject key identifier: 50:56:88:63:FA:DD:5D:3F:85:13:8D:9E:28:2B:18:9F:66:36:84:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 628DB0BD13BB398B667B027D96C7EC7CC4173DB1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6245694-8023-45c0-b9fb-372b487035d3.roa
Signing time: Fri 22 May 2026 16:36:02 +0000
ROA not before: Fri 22 May 2026 16:36:02 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe8:74c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8d:b0:bd:13:bb:39:8b:66:7b:02:7d:96:c7:ec:7c:c4:17:3d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 22 16:36:02 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=b343c16c5cc8e479089e24de09a5e7a4d3d688a47f50e06e1520de142a0127ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:74:d9:9f:f3:2a:74:5c:cc:6a:4b:15:f7:
33:68:90:16:d3:90:4a:44:c7:fc:37:dd:42:75:3c:
07:4f:fd:6b:a9:4e:e3:29:c0:ed:55:38:9c:e6:73:
47:fe:36:e9:da:07:75:d6:3e:68:1d:7a:5f:05:28:
92:72:3a:c1:bd:cc:bf:42:cc:fa:7e:f4:51:2e:c7:
0b:3b:07:7e:be:0e:84:a9:2d:fc:cb:10:32:c6:5e:
6f:e9:f2:b9:d5:19:11:04:c5:98:f7:22:c7:47:03:
91:d9:76:12:08:c8:94:a5:ef:32:7d:08:1a:50:e9:
20:d4:5e:f8:39:9b:ae:77:7d:62:89:06:98:fe:af:
8f:0c:25:f3:01:0e:2c:bd:75:78:a2:7f:aa:10:d9:
31:48:bd:7c:64:76:96:a4:4f:d9:59:f1:fb:60:aa:
e2:32:40:81:5c:89:35:49:05:ea:b3:42:1c:9e:9c:
33:b6:ce:90:ac:8c:12:c3:c5:b5:5a:86:17:79:c6:
ac:91:75:b0:73:47:35:e8:88:d7:00:2a:32:d8:bd:
d2:d4:2d:36:e1:c8:e9:7f:96:4d:16:2d:2c:36:da:
58:cf:1f:b7:13:50:a5:f8:ac:3b:1e:db:fa:4c:11:
b9:57:f5:e6:f0:75:57:ef:6a:78:c8:14:2c:79:90:
de:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:56:88:63:FA:DD:5D:3F:85:13:8D:9E:28:2B:18:9F:66:36:84:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a6245694-8023-45c0-b9fb-372b487035d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe8:74c0::/48
Signature Algorithm: sha256WithRSAEncryption
1e:a8:cb:b2:6b:73:6a:0a:29:83:bb:9e:bf:cb:57:8a:6e:83:
8a:06:86:c0:94:e4:c8:30:7b:6c:85:02:eb:41:bd:32:76:52:
c2:fe:02:30:37:d6:27:46:ab:ac:6e:bb:1b:5b:9f:a0:7c:79:
47:f0:2a:fd:bb:f0:ad:30:96:1a:60:c8:1e:ae:b4:29:0a:55:
99:b0:fc:9a:a6:68:c4:ad:40:02:3f:bf:58:5b:0f:8c:85:92:
ed:1a:74:3f:90:1e:cb:c7:01:a7:1e:ea:26:30:1c:6b:29:b4:
1b:8d:a3:1b:b1:44:cb:3f:28:dd:c7:bf:0b:33:98:3b:f0:24:
81:f2:ac:ab:53:07:28:a8:4b:4b:b8:05:49:5e:c2:58:94:8f:
64:67:75:46:af:d5:b6:cd:c6:81:c8:5d:5b:a7:48:00:a4:c6:
d2:da:da:75:4a:0f:49:34:56:1d:05:64:e2:01:c7:11:1c:d7:
93:08:58:68:db:19:ce:f0:98:67:46:7b:89:1d:c0:f3:1f:d7:
f8:66:1f:64:e0:ac:60:91:c6:bd:cf:c8:d1:80:48:be:46:05:
ea:b9:19:72:dd:49:db:6f:ef:55:65:9f:9a:ff:a1:bb:71:42:
de:ca:9b:0b:e9:c6:4c:ab:2f:db:be:03:dc:30:00:c3:c5:1a:
ca:7a:e2:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:07 2026 by rpki-client