
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa
File: 06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa (raw, json)
Hash identifier: CjPbeH+yv5bDCL+IAL+k4vHOymANZXakhEutUG0sMaU=
Subject key identifier: E3:8E:4C:3D:7E:78:9F:09:B3:6E:FC:D5:32:DF:C5:66:81:7D:8D:8B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CC34C8B0B4AAD9AC0F31091C1B2F60E0FDCD93C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa
Signing time: Tue 12 May 2026 01:00:36 +0000
ROA not before: Tue 12 May 2026 01:00:36 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:3000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:c3:4c:8b:0b:4a:ad:9a:c0:f3:10:91:c1:b2:f6:0e:0f:dc:d9:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 01:00:36 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=0837a11f431db6265561d7aa1e5dbbfeb3c6c54fb6a80c75ffc37805e657feb6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a3:ee:97:a0:2a:68:ca:1c:28:a7:4e:d0:f4:
e2:e6:52:59:f3:e1:37:55:df:52:78:4e:d6:3f:df:
a3:58:22:61:15:ba:c5:c2:d3:50:06:bc:75:b3:eb:
6b:21:07:f0:90:9e:51:d7:aa:ad:e7:57:72:84:c4:
c6:16:84:bf:8b:33:b0:f2:28:ea:42:46:35:be:07:
75:a6:21:81:ab:05:9c:77:83:ab:dd:cc:37:d9:63:
c2:62:07:59:03:30:07:7e:a2:b2:d6:30:7f:59:5a:
c0:3a:53:7c:d4:29:cb:97:c0:80:57:a0:ec:cc:a7:
a5:81:94:0a:78:e3:a9:42:a5:64:9a:1e:81:69:2c:
4f:40:5f:ae:89:14:b4:43:7c:2f:82:21:57:07:04:
a7:b1:4e:b8:ea:e7:96:a5:b8:36:3a:d3:14:49:e9:
80:23:f6:a9:84:73:ad:ae:11:23:05:67:9c:55:39:
29:6b:28:e3:3f:36:c8:a6:bd:40:57:81:fc:d5:83:
f1:77:80:74:d4:27:a3:85:4e:74:b6:62:32:87:f0:
8f:de:db:58:58:06:ec:25:9a:32:4a:74:eb:e9:3d:
a7:8c:b9:3d:02:ac:e4:05:80:d5:f3:a0:d2:cc:04:
4d:af:64:0d:01:c8:11:85:87:2a:ca:00:2a:23:d3:
0b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:4C:3D:7E:78:9F:09:B3:6E:FC:D5:32:DF:C5:66:81:7D:8D:8B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/06a31a62-cfe6-483a-ba03-cc53daa6cae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:3000::/48
Signature Algorithm: sha256WithRSAEncryption
37:34:44:89:f4:52:f5:04:25:f5:3a:ba:f9:6f:7f:a0:db:41:
25:1e:75:65:7f:e4:61:e9:c6:42:f9:fd:67:80:fd:c0:a0:dc:
73:4b:a1:f9:ec:ad:cd:9c:1c:5b:ed:e8:f7:96:69:92:0d:58:
8a:9b:0c:e4:74:0c:67:9d:94:2d:79:64:92:44:19:c7:fe:43:
e5:19:76:6c:8b:c2:47:5a:dd:47:e5:ea:a6:94:7d:87:be:97:
7c:4a:82:79:07:9b:0f:9a:c3:6c:20:56:79:ad:ca:4a:46:c1:
41:8a:54:7a:90:18:de:7c:32:29:7c:8e:74:9d:4e:6d:39:eb:
b3:80:df:55:5c:e2:e7:60:98:96:a1:49:36:a0:72:6b:7e:bd:
2c:a8:94:f6:6d:80:68:88:73:59:0c:27:ca:3a:24:75:ae:fc:
a9:65:1b:81:40:dd:83:db:f1:f8:e0:e1:32:8c:be:45:b9:af:
cd:46:37:e7:e6:84:8e:85:fb:fa:81:c2:73:69:44:e6:8b:6c:
8f:68:d2:be:67:6f:f5:c1:0c:f9:d6:4a:db:49:a4:df:5f:6f:
44:0b:b9:75:2d:3a:23:ee:f5:49:34:ca:b9:ad:68:06:6e:a0:
88:95:c2:a0:e1:2a:7c:71:3f:bd:19:8e:e6:38:78:88:5d:22:
ad:c8:ba:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:54:20 2026 by rpki-client