
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6d20c73-e796-4efb-9469-1066893d0818.roa
File: c6d20c73-e796-4efb-9469-1066893d0818.roa (raw, json)
Hash identifier: i9Wl52ncuGelnB54utF4UOKCp5wiGldZn6IWtxjTJss=
Subject key identifier: BA:3B:3A:43:68:B7:32:3C:66:11:55:71:10:32:3F:C9:2D:2A:D1:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 633E5C5C97C4330046A6D048455241D3407574E1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6d20c73-e796-4efb-9469-1066893d0818.roa
Signing time: Tue 10 Feb 2026 01:01:51 +0000
ROA not before: Tue 10 Feb 2026 01:01:51 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f24::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:3e:5c:5c:97:c4:33:00:46:a6:d0:48:45:52:41:d3:40:75:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 01:01:51 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=9a7b204f5276969bda644ff0747312df3da7cc3c35b366af0952e077779568ac, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5b:a1:ea:05:3e:8d:1e:74:f5:85:64:7a:2c:
03:42:81:e6:bb:42:ac:01:0b:dd:36:84:20:ca:10:
fd:c9:8e:e9:3f:fe:9e:6d:cc:42:3f:6b:51:32:98:
d3:52:2e:12:4d:5e:e4:8e:0c:68:66:84:3f:2e:89:
b5:0e:54:55:53:e5:2f:7f:9d:d0:f6:61:99:b8:53:
3f:a5:9f:a3:b1:c8:5d:56:f4:b6:e4:99:9e:23:7c:
41:30:15:ad:14:a6:a6:23:41:35:69:34:eb:9f:82:
6f:a2:03:29:e4:de:73:3f:94:86:f8:99:35:a3:bf:
3c:2f:e8:d5:8c:81:14:8c:dc:1b:af:2e:b9:6e:de:
72:2b:7a:33:a8:65:ff:b2:ce:c0:13:18:a5:33:83:
98:7d:55:9e:db:51:22:73:db:28:77:50:b0:96:47:
53:cd:f7:f3:d4:f5:dc:e0:00:99:65:f5:e7:8c:4e:
24:46:b9:71:7e:f5:92:d9:2e:de:02:66:b0:80:ff:
9b:e2:0f:a3:a1:a7:85:02:39:e5:2b:ff:97:bf:83:
fc:92:d9:84:7f:31:6c:ea:c4:b0:c7:cf:31:1c:1e:
b9:b6:63:c5:c6:21:9d:b7:82:7f:e5:d8:20:03:c6:
5d:8b:4a:57:d1:b4:2e:2a:2b:4f:fd:ec:02:e8:d2:
a5:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:3A:43:68:B7:32:3C:66:11:55:71:10:32:3F:C9:2D:2A:D1:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c6d20c73-e796-4efb-9469-1066893d0818.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f24::/36
Signature Algorithm: sha256WithRSAEncryption
2e:15:2c:95:a7:fd:3f:5a:7f:3e:b6:e2:62:b7:3c:ed:86:04:
ee:ad:b4:a6:d8:87:be:a6:d5:11:d9:67:fe:95:86:91:4b:ab:
70:de:e6:b7:e7:77:ef:ea:ed:a7:bd:13:17:ed:68:c9:b2:d6:
ac:ed:c1:ac:ce:e2:85:02:e9:30:68:47:97:e3:94:cd:91:33:
1d:93:ad:3a:5b:13:a8:8f:c2:c8:cf:b7:13:66:55:77:24:4f:
7a:d6:d3:e7:0d:98:c0:e7:39:8d:63:5a:3e:d4:da:75:78:d2:
7a:46:c3:6e:d1:46:33:70:e5:47:2b:80:64:a7:cd:d5:c4:02:
6e:2d:04:4e:4f:06:3a:05:0f:57:c5:d5:9c:f1:59:4e:42:56:
44:f8:6d:ff:58:21:e8:f9:8f:74:79:1b:aa:a2:46:fe:ad:4b:
79:14:a2:cb:ad:8e:26:56:db:cc:19:5c:47:00:6a:3c:35:3e:
08:8c:a8:53:c5:1c:96:af:9f:2f:6f:87:81:71:75:f9:4d:53:
ac:67:a8:4f:6a:c5:09:e2:36:93:a9:13:ee:ef:2e:23:af:9c:
b0:92:44:bd:eb:1e:ce:96:34:77:d0:a0:95:ff:c1:b4:12:e6:
bc:8f:dc:fd:d1:cb:04:1f:94:15:1b:ab:14:e2:e1:21:f7:9d:
89:f8:11:be
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:50 2026 by rpki-client