
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
File: f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa (raw, json)
Hash identifier: EQpGSbKvnsPibUSkAWB1gHQmA/ttSbLalcu4U01+ijI=
Subject key identifier: E4:EB:B3:6B:D7:3B:EC:41:47:05:2B:A2:A1:C5:D7:83:AF:6F:E9:8F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: C3EEEC6F403AC2EFE380B94FBAC03178A1BA73
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
Signing time: Fri 24 Jul 2026 00:40:06 +0000
ROA not before: Fri 24 Jul 2026 00:40:06 +0000
ROA not after: Thu 22 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fff:81b0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c3:ee:ec:6f:40:3a:c2:ef:e3:80:b9:4f:ba:c0:31:78:a1:ba:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 24 00:40:06 2026 GMT
Not After : Oct 22 23:59:59 2026 GMT
Subject: serialNumber=3a7d49f17f8717196fc499777d4c2e18d102e517556e9fcb8759acd0bd80bd72, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0c:55:3b:4f:95:02:81:96:29:3f:df:eb:6e:
37:a6:98:bd:a6:38:cb:36:65:d7:f0:c2:ea:4c:15:
7c:ab:dd:13:19:7a:4a:12:13:cb:3a:ce:5b:d5:2f:
e5:aa:f3:a0:c2:aa:d8:4e:30:d8:95:ba:14:ff:8e:
a5:1b:1e:4e:e6:9f:e2:8d:0c:c1:f8:0d:02:a6:60:
d7:19:fe:68:f8:b3:77:32:f2:77:a5:43:ba:24:72:
e0:00:11:22:38:4b:34:4e:96:9f:12:b6:e8:b3:99:
54:3a:dd:3e:73:c8:3a:f6:4a:d1:67:d1:93:67:83:
19:6f:cf:90:a4:67:fd:be:37:d6:1d:a8:fa:bc:bc:
b8:69:98:1b:be:c9:78:ec:3f:e2:67:68:eb:ad:2b:
5a:87:55:6b:36:cc:2c:fe:d9:b7:0a:e3:8f:a3:8e:
21:f3:82:a3:43:7a:5c:69:b3:2f:00:f9:c9:24:ee:
64:b0:bf:a2:36:e5:c5:09:dc:e1:76:d4:fe:58:df:
21:63:f7:cb:db:68:96:26:1f:3f:7c:ab:5a:54:80:
48:e4:94:68:75:cb:49:0c:f0:99:03:22:22:1e:80:
56:39:a9:bf:3f:da:71:70:2e:05:63:56:6d:b7:ac:
a8:fc:96:5b:65:41:9e:84:2d:57:3a:f9:76:e5:d7:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EB:B3:6B:D7:3B:EC:41:47:05:2B:A2:A1:C5:D7:83:AF:6F:E9:8F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f189e5be-37a6-4672-9a92-e8d2041c8b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:81b0::/48
Signature Algorithm: sha256WithRSAEncryption
5f:aa:5e:74:f8:f9:bd:d6:13:a8:a6:ee:fa:13:7d:41:af:f3:
eb:15:3b:ed:1a:39:20:3c:28:01:4c:34:6a:19:68:31:cd:35:
e7:8f:f0:67:7e:26:65:bb:db:48:fe:f0:cf:c4:e0:79:f2:ef:
12:56:67:09:67:06:45:c0:39:87:42:86:f6:33:b6:a1:92:c9:
93:2d:85:0c:5b:3e:94:e0:7e:4e:c1:79:6b:84:bd:8b:f3:34:
ab:9a:a1:39:8d:38:88:86:f9:5f:c0:28:00:bd:6a:a6:79:8a:
ec:de:1c:b0:00:ed:e4:01:53:a0:27:78:65:1c:82:08:b5:96:
d6:8f:00:73:33:04:11:37:35:f0:de:80:cf:e8:67:16:01:4e:
bd:30:e8:e5:ff:c1:34:ad:6b:09:ba:cb:17:d8:87:33:09:4b:
93:e1:32:df:f2:e9:5c:42:f3:5b:bd:93:0f:63:ef:cc:fb:22:
17:4c:cd:63:3a:a2:7d:87:93:8d:e8:d2:30:65:22:b9:88:67:
97:6f:5c:ef:b1:36:23:3d:1e:47:d7:6a:8c:a0:d4:41:e0:ee:
5b:c3:ab:a1:59:72:29:12:04:18:03:fb:0c:8f:2b:30:a5:a4:
42:04:de:be:7f:29:dc:07:97:25:5b:38:35:d7:1a:c9:d6:32:
01:50:1a:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:13:45 2026 by rpki-client