
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa
File: fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa (raw, json)
Hash identifier: UR+hUFQUlb4USciTal3oR8YKkNhizCL7//b0o5NrY1g=
Subject key identifier: BF:F2:64:B4:92:30:57:26:00:04:D0:48:CD:5D:5B:B4:7F:37:6D:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 648D854CDE78D836A5D7FA4FFFB012AA700093AA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa
Signing time: Fri 15 May 2026 01:01:58 +0000
ROA not before: Fri 15 May 2026 01:01:58 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:81e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:8d:85:4c:de:78:d8:36:a5:d7:fa:4f:ff:b0:12:aa:70:00:93:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 01:01:58 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=1e316a6a2d06a3ca41b2f8147821a2568ee51fc3c3bb297f0902f29bc907196b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:55:eb:7e:e4:72:f0:c2:44:ba:80:3e:8b:
da:fd:9f:32:8d:05:1f:b2:7e:e5:b8:a7:5f:79:d3:
aa:d9:14:ef:b1:2b:fb:71:35:49:cd:2d:81:9c:58:
7e:a6:5d:7c:7c:58:5b:f3:bb:1d:34:10:40:84:38:
45:0d:61:9f:e8:c5:26:43:ff:3b:19:a7:a6:fd:ab:
61:73:87:8d:5e:b6:e1:0a:e8:13:fc:dd:8e:e8:8c:
a9:75:37:3f:e0:f2:41:81:a9:2d:1f:f3:d6:91:92:
95:ef:d9:be:00:a6:b8:be:40:7c:96:1d:f5:a7:de:
57:7e:f1:e4:1e:a4:57:51:3c:23:0f:ff:b2:f3:69:
9e:d0:d1:ba:42:00:c4:66:2d:12:cd:39:2a:29:f7:
50:6c:b3:fc:dc:b5:be:20:cd:8f:3d:d5:80:da:2f:
db:98:38:64:b1:1e:55:de:fd:bc:de:27:23:10:98:
3c:92:c3:7d:ff:0e:df:22:61:c5:b2:fd:f4:43:9c:
3c:9a:88:70:98:bd:b1:3a:63:32:07:40:87:25:e3:
54:54:1a:90:1f:95:ee:39:89:a8:20:54:53:12:ce:
91:e0:8c:7e:63:fd:a5:83:c3:5c:67:f5:b6:d8:c3:
1b:49:c8:f7:bd:05:ae:db:d9:23:2f:47:18:b1:7d:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F2:64:B4:92:30:57:26:00:04:D0:48:CD:5D:5B:B4:7F:37:6D:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fc8097da-cca7-48f7-b057-46ee2d28e9a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:81e0::/48
Signature Algorithm: sha256WithRSAEncryption
cd:84:f2:3f:02:4a:48:db:d9:80:c4:50:3a:5e:a8:f4:cd:59:
b3:e3:72:d4:cb:b6:5b:3f:e7:7a:18:b3:1a:44:31:70:4e:eb:
9c:24:59:4b:d8:2d:7f:13:73:dc:1a:c9:e6:ab:1b:5a:cd:1a:
c3:84:0f:5e:7f:55:90:66:76:4d:0b:b7:f0:30:42:1f:ee:59:
ed:d4:28:2b:09:51:f6:f5:8b:56:f7:e7:83:28:ce:99:1b:18:
48:e0:08:c1:7c:f4:ce:76:b7:b4:ab:99:aa:9f:50:ce:4a:8f:
e7:e3:64:41:17:ac:64:fa:f1:56:c1:37:4a:40:80:37:f1:5a:
16:64:36:e4:b8:31:eb:32:4d:46:70:53:34:88:22:4d:d3:e2:
0c:45:8b:07:21:b7:00:6f:3d:e1:17:55:ad:b2:e6:5c:60:04:
dc:76:3b:32:74:91:54:7f:30:0c:7f:41:99:7c:91:da:f1:10:
2c:f3:2c:e0:95:98:68:08:7c:51:64:18:14:54:95:f7:cc:6a:
2f:69:1d:49:3a:89:55:aa:3b:bc:45:96:3b:d1:1d:49:c5:5c:
64:c9:41:f5:5f:78:25:d9:9c:af:06:91:ec:01:b8:06:ff:10:
ea:f8:6b:ab:81:b4:e8:0d:1a:77:e9:3e:47:63:9a:42:28:21:
c0:8c:95:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:26 2026 by rpki-client