
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa
File: b395dc86-1b36-4467-9052-5f1e6560d976.roa (raw, json)
Hash identifier: 2sYs7ZqCrfN1PT4PQN27Yq1iiJuwmw+lAKdfhcpraR8=
Subject key identifier: F0:5D:3C:19:50:0C:2F:17:4A:2E:43:FF:97:99:F2:E7:B5:D2:E6:AB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66968E45C64379812B08DD2F611613C9BE970B95
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa
Signing time: Sat 16 May 2026 00:20:45 +0000
ROA not before: Sat 16 May 2026 00:20:45 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f18:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:96:8e:45:c6:43:79:81:2b:08:dd:2f:61:16:13:c9:be:97:0b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 00:20:45 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=143eb75152f715a1101ceb5167bac681201c78f533338a6ca0d83b7d506fe8f1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b5:17:a3:65:06:26:fa:e4:ff:91:05:8a:b1:
a9:c8:5b:e4:29:02:4f:7b:5b:8f:8c:85:09:7a:7d:
3a:c0:91:0f:7b:89:1c:ea:75:aa:70:ae:45:b9:f3:
ef:b4:fd:83:99:00:73:fc:4d:87:06:e5:fd:c1:c9:
71:41:3e:f9:01:e5:ed:a7:ef:69:5c:13:4a:a2:f4:
90:28:19:c0:cd:08:85:ea:c5:b3:8b:cd:f2:cf:32:
c4:6b:ae:53:7e:00:ee:95:73:d2:ca:b8:e5:78:d7:
b6:a7:44:f3:f4:d4:db:d3:92:18:0c:95:f5:0b:25:
8e:9d:a5:b8:72:dd:ea:fa:bb:9e:79:70:e3:4e:c3:
c4:70:f0:c6:78:79:20:38:d2:8f:89:23:c3:a4:ac:
a4:3c:cb:33:3f:98:f5:da:cb:77:e2:6c:6d:97:02:
b3:43:3a:0e:14:46:19:e9:78:60:98:6c:62:f3:04:
0f:50:c7:cf:6a:fe:0a:b2:a3:8a:f9:5f:20:71:91:
b0:b0:b0:e2:0d:b3:a2:94:ee:d5:47:41:7f:fc:33:
34:db:d1:b1:e1:e6:fc:6c:44:7d:d8:a8:21:1f:ff:
69:eb:7f:f6:50:08:2a:6a:98:8e:9d:d4:cc:44:aa:
78:8f:1e:aa:b2:3f:2b:9c:cd:9d:24:6a:1f:8a:b3:
95:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5D:3C:19:50:0C:2F:17:4A:2E:43:FF:97:99:F2:E7:B5:D2:E6:AB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b395dc86-1b36-4467-9052-5f1e6560d976.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f18:8000::/36
Signature Algorithm: sha256WithRSAEncryption
b6:52:67:a3:3a:dd:3e:48:6d:15:2a:ad:a3:66:ed:9a:cc:d4:
ba:72:6a:bc:f2:8e:38:68:31:63:43:b1:3c:00:2b:9c:d2:b0:
b0:d1:53:e9:11:20:61:a1:d5:59:24:65:cc:65:a3:26:ec:d9:
75:5b:26:d1:3d:b7:02:b0:a6:29:2b:d9:2e:c2:2e:61:55:e3:
6b:a8:76:1b:b5:86:5e:b6:b0:53:1f:1d:40:89:c8:57:e1:b1:
40:df:41:3f:3f:da:97:7a:95:f9:b2:18:e1:07:75:84:72:49:
57:ee:bd:23:06:31:cc:a1:74:45:bb:05:a4:6e:c7:25:3e:97:
3f:4e:28:be:c9:99:42:60:09:c5:65:58:65:f7:ca:de:82:d8:
97:9e:14:09:a1:60:3d:be:18:98:07:a0:0d:35:cf:be:9d:da:
f9:db:bc:17:24:db:c8:cf:0f:fe:3f:ed:c3:22:c8:e8:2d:94:
6f:fc:cf:6b:67:1d:2e:3b:1e:21:71:56:8e:3c:62:56:19:78:
95:b0:cb:5b:aa:8d:9a:a2:47:c3:99:5b:21:cf:a7:43:29:6c:
e3:d9:40:1d:d7:4b:a7:f5:22:31:00:ff:a9:62:36:73:db:60:
2d:b7:7b:da:30:10:15:a9:fc:30:74:eb:19:25:e3:68:4f:66:
0e:b4:75:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:50 2026 by rpki-client