
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8df2c2c-dc4e-4de0-921f-473e414af165.roa
File: b8df2c2c-dc4e-4de0-921f-473e414af165.roa (raw, json)
Hash identifier: zcFnrLu3rVGw1Y4igvH8unPLNlTarGqyjNWv/3Hi5q8=
Subject key identifier: 9C:1D:C8:06:0E:EE:27:33:DD:01:7C:FB:13:1C:55:50:9A:16:06:95
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7389B603277C8B41B793FF29B20C00CE27D49DA4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8df2c2c-dc4e-4de0-921f-473e414af165.roa
Signing time: Tue 24 Feb 2026 01:21:14 +0000
ROA not before: Tue 24 Feb 2026 01:21:14 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:89:b6:03:27:7c:8b:41:b7:93:ff:29:b2:0c:00:ce:27:d4:9d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 01:21:14 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=a4b7da145258ffb9e8ee8d1e28b36270218903208d415628e7578cd2e1b409ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:10:fa:bb:e1:c1:e9:50:9c:e5:06:70:bb:55:
52:70:f4:c3:61:13:19:93:6c:a5:f7:70:b1:c1:7b:
34:79:75:5b:31:f3:ed:7c:32:32:97:27:51:a9:18:
da:1b:22:9d:ab:f5:b0:77:d2:f0:c7:69:aa:ad:cc:
fe:8e:70:5d:59:a7:78:62:c2:24:48:15:56:7f:b1:
ab:b4:fe:d2:64:78:f2:15:10:34:02:05:43:f7:ca:
89:6d:98:f1:9c:bf:18:3f:7d:05:d5:ec:61:09:06:
e1:a7:0d:95:b0:14:de:ae:d7:fb:b5:a5:1a:5a:bf:
f3:7f:70:9f:bb:65:20:01:1b:a6:4a:3d:c5:8b:de:
96:f5:d8:b2:0a:33:35:90:bb:f3:10:be:77:fe:7b:
d6:b5:5c:de:32:12:db:e3:bd:52:08:51:5b:57:67:
11:94:ee:ef:74:c9:21:1b:30:fb:38:b4:f4:cf:1e:
c4:c3:9f:23:e5:db:f1:c0:53:66:cf:79:3e:bc:99:
65:75:d1:ea:80:38:90:79:ee:35:05:2b:42:44:d5:
29:c8:37:3b:22:2a:0c:0f:2c:e8:bd:c4:53:68:8e:
72:d4:9b:77:17:c3:61:aa:99:2b:11:1d:72:09:f7:
eb:56:42:70:f5:fb:b9:b9:00:61:e1:d2:67:15:0b:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1D:C8:06:0E:EE:27:33:DD:01:7C:FB:13:1C:55:50:9A:16:06:95
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b8df2c2c-dc4e-4de0-921f-473e414af165.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
c8:e2:e7:64:e7:f9:66:ef:dd:4e:94:cd:b1:63:f5:83:43:97:
8f:bc:2c:5d:92:c1:d5:33:85:54:87:18:7e:8d:85:87:bd:f1:
0e:2c:2e:98:21:f1:7e:22:fa:87:5d:4e:e7:91:98:02:61:7e:
a8:a5:81:69:87:1d:01:e8:d8:a1:6c:11:f9:0e:7a:6e:ff:54:
ce:0c:e3:42:6f:19:56:05:63:06:1d:b8:bd:86:e1:03:1c:43:
c0:0c:76:2e:bf:f8:29:ed:ba:86:64:4b:07:f6:88:b2:be:61:
4f:c9:d2:56:c3:cf:52:6c:1d:a5:6c:c9:f2:95:64:4c:2f:bc:
c3:56:c3:fc:27:bc:79:b3:8a:94:47:a4:69:ba:76:1f:4d:86:
96:d4:4e:43:5f:02:cc:a4:94:23:11:82:f9:e7:2e:29:10:ec:
8a:71:2d:3e:72:1d:14:91:b4:02:90:f1:f7:8f:88:7c:b0:e6:
09:b2:3e:5e:a3:6a:00:9d:7b:ae:37:01:9e:6a:c7:90:96:48:
cf:20:9a:80:b6:34:fc:49:0e:e6:1c:13:97:2f:dc:db:d2:9c:
ef:b3:d7:f1:4f:58:68:c2:2f:cd:ba:d0:98:38:ec:91:de:a7:
00:42:32:4f:9a:3f:f6:dc:05:b4:19:d4:3f:87:10:bd:12:d8:
5e:a2:66:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:25:32 2026 by rpki-client