
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa
File: 3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa (raw, json)
Hash identifier: K3XI2ON6QoGIisxlrMBaMnnHv/KIoY6Og/LqW+I0iVk=
Subject key identifier: E0:9F:99:E7:EB:E7:F7:C3:F7:88:AC:56:48:A1:93:45:2D:37:8D:99
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 06E41C622BB934FD83605E2AACCEB93288CD7F42
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa
Signing time: Tue 12 May 2026 00:50:12 +0000
ROA not before: Tue 12 May 2026 00:50:12 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fec:2800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e4:1c:62:2b:b9:34:fd:83:60:5e:2a:ac:ce:b9:32:88:cd:7f:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 00:50:12 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=1122a101c6d2e51cc476fce0aa0ce353833bfbb4160b8416fb102640a3131d64, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5f:46:84:05:90:2c:b1:dd:8a:27:7b:c2:f8:
e2:34:03:8a:ba:43:22:45:02:b3:9d:32:3b:1d:8f:
52:5e:fb:aa:34:4c:da:10:8f:1b:48:8e:4e:0b:4a:
49:02:27:9f:be:e7:fa:4b:fc:d9:48:33:8c:ab:80:
07:32:1b:38:e2:9b:e9:62:ae:49:9b:af:23:fb:00:
e2:3f:93:ca:7b:66:33:00:6b:f9:d1:d1:51:df:7f:
72:06:62:11:e5:ab:58:58:82:91:89:5b:32:ed:d3:
c4:9a:1b:81:78:ec:6b:6c:c1:08:7f:d2:41:65:7f:
d1:f5:c5:a3:73:9e:73:56:0b:86:1a:26:3d:36:15:
a9:43:81:db:68:53:9f:5d:ee:78:00:e0:c8:2c:05:
f6:d3:28:82:cd:7d:05:8e:dc:dd:40:a7:dd:e4:40:
e8:f2:26:17:e2:46:65:ad:48:f4:12:0b:c2:8f:78:
0d:b0:94:dd:a2:bb:b8:71:60:c8:20:d4:1d:dd:ff:
9b:06:40:d3:92:f9:3f:80:ae:b7:68:59:5c:25:a4:
fe:23:27:ee:29:64:c9:63:56:0a:bd:69:72:b1:dc:
6a:b9:d0:70:5f:aa:17:a5:54:8a:d9:2b:31:8f:2a:
fc:61:ce:3c:d2:f7:35:7a:0e:40:c0:7d:93:e0:bd:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:99:E7:EB:E7:F7:C3:F7:88:AC:56:48:A1:93:45:2D:37:8D:99
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e2c9df8-ffeb-4b6e-819e-9aeb6cb51bf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fec:2800::/48
Signature Algorithm: sha256WithRSAEncryption
78:e2:e1:a7:01:01:c2:da:f3:e5:a2:f1:65:b0:1e:cc:ba:02:
34:0c:cb:84:77:e1:4a:0e:bf:c6:b8:cc:38:e4:df:9d:0c:e0:
d1:a6:21:b9:85:60:81:d0:0f:35:14:a2:5d:4a:c4:14:04:9d:
51:45:a6:39:94:e5:05:61:ab:ac:7b:ad:6a:67:3b:7a:04:cc:
92:71:b2:31:f7:24:87:f9:84:15:99:4f:8f:74:b1:f5:4e:75:
88:25:cf:f9:8d:eb:f0:31:3d:4a:2c:80:d9:d7:94:9e:da:f7:
37:48:b2:a7:a2:54:d5:25:9d:04:b5:27:d5:02:24:f9:3b:73:
c4:0b:5d:96:b5:a0:55:92:8d:08:6c:64:4d:c6:60:c7:1b:2f:
b5:85:6c:f7:b7:8f:99:88:b2:d7:23:b5:34:36:25:c9:00:b2:
2b:b2:8f:f6:ca:44:91:a3:87:b4:04:d8:8c:b3:ab:95:8a:74:
a1:76:56:8f:fe:17:42:88:74:60:cf:72:f7:6e:80:b8:63:60:
5a:ae:0d:6a:1c:e7:3e:7d:f5:b2:0a:2f:5b:a8:54:96:1e:f8:
33:2e:d0:5e:24:0c:2c:b6:06:74:18:34:2c:d9:c3:33:7c:b1:
76:63:09:ac:73:bb:f7:4f:37:3d:c4:e6:83:80:37:61:dd:4e:
2e:44:3b:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 21:39:55 2026 by rpki-client