
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa
File: 1911b766-c65e-4841-b9a2-a47621e5ac42.roa (raw, json)
Hash identifier: 77a5BodTMe457hS7d8JpDjntoOM6JKFatHlevnloBgo=
Subject key identifier: 9B:AA:A0:5B:E3:90:94:F2:31:38:A6:CC:A9:88:42:8E:1B:24:AB:61
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DA989760BA0342FD11FAB5D6CDB789A3B19556D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa
Signing time: Fri 01 May 2026 00:10:06 +0000
ROA not before: Fri 01 May 2026 00:10:06 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ffc:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a9:89:76:0b:a0:34:2f:d1:1f:ab:5d:6c:db:78:9a:3b:19:55:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 1 00:10:06 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=7e1d36ea564ddcd2abb9e8517422b1b9accf74dd136b1d5cf88049f76ac2480f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:79:f1:cd:6a:1f:8b:52:85:3c:d5:3a:d4:8c:
3e:e5:ac:c9:18:50:eb:e3:99:be:ac:f0:21:32:c0:
6f:ea:f9:8a:ea:e7:c4:b7:e7:fe:fd:54:08:c9:0e:
45:60:26:82:72:de:ae:5a:7e:f3:ad:26:50:6c:08:
3c:83:02:f9:d4:fa:da:a2:4b:34:d9:15:f7:03:3e:
95:db:4c:54:b6:ab:29:67:f9:e0:e2:6b:22:69:26:
5e:23:76:e8:0c:d0:53:30:05:4f:c9:5b:7f:1d:ee:
a4:e5:41:c6:60:e4:f8:1f:39:96:73:d8:59:6e:2a:
93:e3:43:33:83:08:7c:b9:f2:71:fc:6a:25:2c:1d:
44:3d:36:04:27:d4:c2:4a:7f:32:33:24:ab:e3:53:
56:2f:a0:3b:5c:b6:9b:2c:6f:45:e7:3a:22:e8:0f:
82:e0:4e:91:8c:70:20:db:a0:93:e9:72:77:0e:d9:
18:9e:7b:b4:a1:36:f2:37:ee:bb:d1:d9:06:7a:b0:
ff:4c:e7:a2:d8:8f:b4:54:7c:bf:91:08:82:34:00:
86:1d:30:1f:a2:80:c6:74:87:f8:7a:4d:dd:e9:63:
fb:75:56:cd:6a:6c:8f:4f:78:14:cb:ee:bd:7f:cb:
8f:ac:4f:96:dc:be:b0:84:94:e1:ac:8b:d4:4d:55:
98:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AA:A0:5B:E3:90:94:F2:31:38:A6:CC:A9:88:42:8E:1B:24:AB:61
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1911b766-c65e-4841-b9a2-a47621e5ac42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffc:2000::/40
Signature Algorithm: sha256WithRSAEncryption
36:e7:39:26:dd:b2:ed:5f:52:22:0e:48:58:2b:e2:95:6e:54:
e8:62:75:dc:8a:65:d5:7c:5f:66:78:d1:e8:40:a9:8e:32:37:
04:b1:c6:4f:8a:af:66:0a:cc:0e:85:28:f4:be:88:16:e5:4c:
34:9e:78:88:e6:41:a1:13:e7:e0:7d:a1:c4:43:8f:63:b0:6c:
a7:2b:b7:bd:78:fc:ca:01:28:53:26:83:1e:b7:9a:36:c5:5f:
9f:96:59:ce:82:c7:b6:8f:e0:e8:3e:fb:2c:2c:a2:25:31:3a:
61:fe:db:62:85:c8:94:31:17:d4:fd:af:9b:f9:56:61:f0:c8:
75:9e:c9:c8:40:2f:89:3e:b8:be:29:64:33:84:13:cd:a6:fd:
b4:97:69:2d:6e:95:80:54:cf:72:c1:7c:cc:38:c6:a7:79:24:
78:c3:60:be:c0:5f:49:6f:32:6d:6e:15:c5:06:86:40:66:37:
79:ef:94:ae:52:91:7f:95:1a:0c:0a:ca:ca:10:7d:64:d0:7c:
d0:92:a1:7b:22:f7:f3:b7:ae:34:50:dd:ae:a2:f4:de:31:fe:
c5:86:19:96:91:4f:c7:95:2f:37:22:0f:57:69:11:1a:28:90:
55:ca:82:ed:00:45:10:f9:1e:ed:2d:90:9f:60:10:06:e4:e0:
38:53:9c:a0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 01:09:18 2026 by rpki-client