
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9734515-07af-4c21-9159-2cbaf39113bb.roa
File: e9734515-07af-4c21-9159-2cbaf39113bb.roa (raw, json)
Hash identifier: YoROIr9d4aA7gYUmtm+/99L3IRkBKjUdY7D4tfz3Kek=
Subject key identifier: C2:52:7B:B7:29:F7:2C:FA:AA:A9:17:26:20:BA:CF:49:55:DF:C7:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4BD24659A9E5B3D1CDF7383E98AD1FF660CB5BA1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9734515-07af-4c21-9159-2cbaf39113bb.roa
Signing time: Fri 03 Apr 2026 00:10:11 +0000
ROA not before: Fri 03 Apr 2026 00:10:11 +0000
ROA not after: Thu 02 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb:8000::/39 maxlen: 39
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:d2:46:59:a9:e5:b3:d1:cd:f7:38:3e:98:ad:1f:f6:60:cb:5b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 3 00:10:11 2026 GMT
Not After : Jul 2 23:59:59 2026 GMT
Subject: serialNumber=b1c34ba194c8caa225b26e88087d7848690f90cdc9911d1dbf62e450a28dc123, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:ed:5e:fb:63:af:76:9f:64:c2:af:af:b9:
0a:00:36:ee:76:db:fb:cc:9e:4a:5e:56:41:20:0d:
43:ea:29:50:db:5f:85:a9:f5:cd:af:ab:80:d7:14:
61:ff:da:c1:89:92:8a:55:96:1b:59:e9:7d:ac:1a:
9f:00:04:8b:75:89:5b:b8:b7:95:80:b0:3b:cd:8b:
91:65:85:a9:86:1b:5a:59:b3:b4:d6:da:93:d0:77:
80:c4:83:4a:14:e4:67:73:1b:bb:6d:a3:ae:c5:3b:
5d:44:05:55:07:55:c2:35:09:ab:3f:00:15:85:8b:
97:b4:ec:81:6b:6d:fe:b5:34:b5:62:8c:66:c2:5c:
79:05:c2:6b:a8:4a:50:18:60:d4:ca:5b:5e:f9:80:
a7:93:37:5d:03:49:2c:65:af:f8:8a:7a:9a:95:73:
87:d3:06:da:13:3b:35:79:80:7a:f3:fa:59:15:2e:
61:11:eb:8f:10:db:64:12:68:52:c5:0a:2f:8f:05:
05:42:e0:b0:fc:ba:01:2b:a8:d0:45:90:44:ab:8e:
20:eb:d1:e8:0a:5d:2a:7c:d4:1a:24:02:d3:d7:5f:
4d:f3:cb:a1:e2:69:ef:15:e3:97:8e:dc:7d:2d:3f:
0f:08:a9:c2:40:9f:5b:60:8e:67:55:45:99:31:03:
fa:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:52:7B:B7:29:F7:2C:FA:AA:A9:17:26:20:BA:CF:49:55:DF:C7:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e9734515-07af-4c21-9159-2cbaf39113bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:8000::/39
Signature Algorithm: sha256WithRSAEncryption
03:e5:43:ca:bd:b8:10:f7:46:67:4e:53:ec:b4:2e:6b:ec:3a:
73:e7:7c:33:58:51:c3:ab:1c:a4:66:8b:40:dc:5a:1b:5c:a3:
07:2a:0d:0d:75:4c:ce:b7:f7:a3:b3:0d:4e:c9:07:b3:81:da:
4d:9c:79:9d:4a:87:a4:f1:0a:98:6f:b4:cd:72:5f:11:9d:65:
15:8e:e0:50:a7:69:d2:8f:3f:1f:5a:ab:bc:9d:02:f6:6c:ba:
66:4c:9f:32:38:c3:67:11:d7:1d:20:fe:c5:ba:eb:f9:39:fc:
a5:6b:9b:94:9a:88:48:d8:03:5c:f6:4e:ba:ee:8e:c2:47:a8:
d1:e3:1f:48:4d:20:3c:5d:54:26:e2:8c:d0:a2:32:4b:6c:8b:
b3:d3:af:12:6d:ac:d5:87:9a:2b:8f:6d:eb:a5:af:d3:6f:04:
c0:bb:2b:1f:66:67:d4:bd:cb:f3:d2:69:96:aa:c5:fa:ef:8d:
a8:23:39:9a:38:bf:e6:a6:30:c1:26:ce:85:23:02:9c:32:b5:
c0:3d:ae:a0:01:8b:f6:fa:c0:f5:e8:72:9d:80:c7:a0:ad:ee:
a8:c7:11:07:39:6d:fc:92:aa:71:71:26:6f:af:2d:ba:55:33:
8d:f2:fc:66:4a:26:ee:bb:bf:f0:01:84:cc:b2:d4:6b:7c:93:
b3:15:a3:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:30:22 2026 by rpki-client