
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa
File: f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa (raw, json)
Hash identifier: UIqjky9QkdhXvDmRmvUfqs1oXRxrRpFacntoIJdZX78=
Subject key identifier: 81:E3:9C:BB:95:A8:9B:4A:F9:E2:67:06:1F:4F:54:8F:65:4D:6E:BC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6AD9E06EAEA30EA9A3630BA0E5C88F4D36F93B61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa
Signing time: Wed 25 Feb 2026 00:21:23 +0000
ROA not before: Wed 25 Feb 2026 00:21:23 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb8:7400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:d9:e0:6e:ae:a3:0e:a9:a3:63:0b:a0:e5:c8:8f:4d:36:f9:3b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 00:21:23 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=b511ea258dcec59516f8aab5bc260a11bbebd4f008f7d085766c0d601e3cfa4e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:f3:7b:43:fe:2b:7d:06:af:25:56:43:ee:
1f:9e:45:f2:98:fc:e2:cd:87:35:b5:44:12:bd:f7:
cd:53:1d:db:bc:3a:4f:50:91:96:a1:63:95:09:2d:
57:1b:47:fe:cc:c9:99:5c:3f:b9:ce:14:90:83:df:
f5:d3:0e:61:36:de:4e:70:80:ec:e3:63:d4:62:97:
d8:b7:ec:6b:05:4a:48:17:75:07:09:b4:c7:a1:da:
ea:46:5f:b5:b4:ea:5b:ed:3e:71:38:0f:97:bc:42:
00:ee:c6:27:d4:04:f9:9f:36:be:be:49:ef:d4:d4:
2c:7e:2a:fe:1f:57:42:09:df:f6:2a:d2:b9:2d:bd:
00:a6:22:e2:78:58:92:41:ef:74:a1:72:15:66:6d:
2d:a0:44:55:35:d2:9b:8a:ff:b9:95:78:63:14:42:
f7:e2:5b:16:ef:57:eb:0d:77:80:41:74:ff:c2:84:
3b:56:af:7d:f6:87:fe:f4:28:ff:a3:dd:1b:1c:da:
bb:53:f7:fa:fe:25:5c:16:40:f2:74:a1:9f:63:f8:
b8:4e:dd:f0:fa:03:9e:9d:2b:8c:db:df:f8:35:2d:
9e:84:c6:fa:77:0d:8d:54:12:09:e2:1d:54:0f:83:
99:d6:ff:e4:4d:9c:bd:50:07:1e:84:06:96:3f:1d:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E3:9C:BB:95:A8:9B:4A:F9:E2:67:06:1F:4F:54:8F:65:4D:6E:BC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f0d2ebcd-72cf-4cc4-9d4f-c70b70da6d70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb8:7400::/40
Signature Algorithm: sha256WithRSAEncryption
7b:a9:6d:e6:a3:3f:43:7d:f7:aa:53:89:52:ae:59:05:66:fd:
ec:46:40:6a:31:f9:b5:d1:7f:d4:00:75:cb:c4:f2:fa:fc:92:
63:50:e8:a6:3b:bc:ef:1c:8d:28:c2:e9:b4:c9:14:1a:93:db:
a8:5c:7f:ab:a6:75:78:07:91:d8:86:d2:a0:15:e9:50:e8:75:
a0:2e:ed:dc:65:18:7b:0b:9d:7b:27:c2:90:51:bb:9c:04:d1:
e5:ee:35:7a:f4:98:7b:b1:bb:fc:d2:87:47:12:f8:ef:76:54:
e4:2f:e9:0b:a7:cd:62:dc:41:9e:50:4b:71:9b:62:39:fa:84:
5f:df:4d:fa:5f:a2:38:51:1c:d1:a5:3f:6d:fa:e0:a8:a9:48:
7d:c1:68:aa:1e:22:7a:67:97:cb:86:28:b5:43:2c:0d:f3:2d:
cf:e2:58:c7:b4:f9:29:b0:73:d8:54:2b:f9:ef:34:2e:9b:86:
5f:47:b8:14:33:c8:d4:22:fd:fd:de:cd:52:c7:db:42:0a:31:
15:d5:e1:fb:a2:74:d5:f2:83:2c:56:1e:b9:d8:15:f1:c2:86:
ed:a3:8c:bf:c8:3f:f5:5c:13:f3:06:57:f0:b2:9a:a9:13:c4:
98:2e:13:c5:95:46:8f:43:06:7e:85:00:58:ba:d0:8c:cd:52:
ea:ff:95:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:08:12 2026 by rpki-client