
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df25945b-883a-414f-8f35-db6c879edde2.roa
File: df25945b-883a-414f-8f35-db6c879edde2.roa (raw, json)
Hash identifier: WT0z7M4BIrd4AUM7Wnwz6SS4gLF3/jxICttgGpk/4pE=
Subject key identifier: C7:12:34:7C:84:51:F0:A3:A6:2E:D0:BB:3B:A0:2F:7B:04:70:52:55
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0A7B45DFF22311BC1C84C148408688830DF103ED
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df25945b-883a-414f-8f35-db6c879edde2.roa
Signing time: Fri 22 May 2026 16:34:14 +0000
ROA not before: Fri 22 May 2026 16:34:14 +0000
ROA not after: Thu 20 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe2:ec00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:7b:45:df:f2:23:11:bc:1c:84:c1:48:40:86:88:83:0d:f1:03:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 22 16:34:14 2026 GMT
Not After : Aug 20 23:59:59 2026 GMT
Subject: serialNumber=d378c645bcbb924521b9aa31bf089be809a0675a5e0a69df88a75c8c1e009f14, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:cc:ba:d0:46:45:c7:2c:68:d9:3a:e5:b9:
26:17:92:7a:b0:1a:e5:5a:1b:16:48:af:60:cc:06:
65:ae:13:8f:cc:f0:5b:35:fd:51:35:49:78:8c:17:
24:85:28:6a:42:56:75:d8:42:fa:5b:15:b3:43:aa:
50:97:1e:99:97:32:c5:c9:07:08:a2:84:f5:12:54:
36:e2:eb:73:8a:d8:12:92:a0:e3:44:18:9a:cf:ae:
9e:9a:4c:6f:3d:69:5c:47:2b:cb:31:42:45:55:3f:
e7:eb:01:bb:a5:fc:f0:d2:64:04:4a:8a:cc:bf:47:
87:99:bd:b0:ee:fe:44:77:55:19:42:7e:60:45:f7:
70:6c:a3:37:76:e6:58:c5:3d:7f:60:f4:19:d3:7d:
ff:95:62:2e:92:cf:ce:00:12:da:f8:93:c6:0b:21:
a0:a4:b7:da:a3:22:3e:fa:7b:8f:06:fa:70:71:2a:
54:9a:0c:31:78:0d:13:52:70:82:1f:f9:b7:43:45:
9f:bf:52:e2:27:cc:9f:90:2a:cb:38:a2:be:ad:6f:
58:78:26:53:1d:75:a1:52:63:4b:c6:e2:b5:f8:60:
59:71:71:1d:6f:f4:db:7f:c4:8b:af:d5:df:c1:09:
bb:83:35:32:3c:e7:26:0a:05:97:57:7b:76:60:2c:
a4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:12:34:7C:84:51:F0:A3:A6:2E:D0:BB:3B:A0:2F:7B:04:70:52:55
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/df25945b-883a-414f-8f35-db6c879edde2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe2:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
2f:ad:ac:9b:66:12:3f:ad:b4:50:9c:fc:3f:8a:b0:e5:d4:d2:
ae:ca:23:74:35:d2:6a:95:70:e9:60:13:bd:49:c2:d9:30:40:
ff:5c:a7:96:a1:9a:5a:9c:bb:d6:be:c1:d6:1b:36:a1:3b:22:
88:5d:f8:08:fe:70:62:28:5d:19:bc:d5:ea:43:5d:dd:03:1a:
5f:31:76:2d:01:ea:65:50:c7:cb:b1:ee:78:e6:eb:bd:6e:6d:
d7:11:e7:05:de:9e:a1:84:54:1e:ef:88:90:84:3b:d1:4e:1d:
b1:4a:32:42:c4:76:c6:2f:c2:52:81:46:3a:5c:73:76:76:98:
95:df:3a:f2:bb:90:e0:9f:02:bc:7a:2f:78:0a:cf:b2:b6:8e:
17:e1:83:31:74:44:01:e4:ec:04:75:25:3e:3b:1a:30:65:5c:
f1:d6:25:72:fa:ec:56:24:aa:6f:75:d3:ed:b9:10:2a:ad:13:
56:7a:6e:39:35:0a:e2:1d:d2:d9:22:cb:c9:b0:ab:a8:cc:e6:
08:65:fa:7e:96:60:81:38:8d:a9:7d:dd:87:75:44:3e:f5:17:
fc:8d:db:8b:73:3c:af:99:79:d1:cc:42:4c:16:2e:fd:f2:98:
34:7d:8a:8c:58:f1:bb:97:86:fa:19:06:ce:4a:f1:29:a4:9d:
a9:65:79:d2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:53 2026 by rpki-client