
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
File: 90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa (raw, json)
Hash identifier: Sg2VumMb/SZ9lsdu8xpFt7ituVCdKoU7gdlEHCz6ODU=
Subject key identifier: BB:E7:B9:68:A3:C8:25:0B:AB:AE:D1:83:63:E8:36:FA:A7:54:E0:0A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A4B9A84F4F3B1A221EC7D27FDD7BC21E85D9019
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
Signing time: Sat 18 Jul 2026 00:20:31 +0000
ROA not before: Sat 18 Jul 2026 00:20:31 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff9:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:4b:9a:84:f4:f3:b1:a2:21:ec:7d:27:fd:d7:bc:21:e8:5d:90:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:20:31 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=30f006417d3670dcc23c2c43efc5868451568d8efb73a0295a117ef28217468c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0f:40:d3:16:f6:95:58:4b:b3:77:bc:ef:75:
ce:a1:e0:2d:82:f0:de:c6:41:34:da:39:5a:15:a2:
2b:de:52:84:cd:cb:c9:30:96:07:c4:79:56:58:24:
13:7b:34:cb:e2:e7:26:c4:3c:be:8c:90:d7:c8:fb:
cf:70:c8:e6:64:05:0e:f5:0e:b7:f9:e8:07:f2:58:
55:ff:3d:54:4c:74:40:a7:d8:75:b3:0e:4c:6d:32:
1f:c2:fb:80:de:b6:eb:e0:fe:53:37:b3:71:08:fe:
ea:2e:17:09:5d:10:3a:c6:94:7c:b1:46:42:a1:bc:
74:ff:86:34:be:d5:df:0a:36:14:bf:4c:52:5a:9b:
4e:d3:0a:91:17:11:6f:54:e9:7a:d0:8d:43:10:60:
e7:88:44:86:ce:7a:6c:a3:84:c9:12:75:83:33:60:
85:2b:dc:1f:d9:51:d5:62:4e:83:4e:fb:44:d1:f4:
a5:c0:88:19:88:da:f9:d1:42:63:d3:c3:ee:b3:bf:
49:3e:2a:90:2c:fb:93:fb:d6:11:83:e0:c5:91:6c:
8a:25:57:3f:8f:2d:34:32:4d:f4:b7:bf:c4:bd:25:
6e:0a:0b:76:26:27:77:56:69:20:b8:e0:aa:31:b1:
cd:f4:7d:3d:8a:1c:23:99:69:6e:0c:9b:bd:91:3e:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E7:B9:68:A3:C8:25:0B:AB:AE:D1:83:63:E8:36:FA:A7:54:E0:0A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/90bfc555-8d9a-45c8-8fa6-ac9cb9046bb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff9:5000::/40
Signature Algorithm: sha256WithRSAEncryption
47:a7:a3:ba:3e:7a:56:f8:e2:2b:89:ee:1b:a8:4a:72:4f:e2:
f0:32:3c:f1:13:52:3e:34:83:6f:4b:ce:86:a1:64:b9:08:b7:
73:80:f9:4b:ec:56:35:01:17:e5:2c:d6:3f:78:29:e4:63:10:
90:43:78:c0:d8:ee:34:a9:c6:29:57:9d:f9:60:b7:21:29:d7:
8b:72:af:66:5c:15:de:c9:41:43:20:ed:ce:8b:c5:23:87:64:
d1:d1:c0:4f:24:2b:f0:38:52:27:0b:e8:dc:1e:53:3b:74:87:
67:5f:39:48:29:6b:d4:82:8c:0f:18:6b:9f:00:f8:13:e2:2f:
5d:b6:58:30:df:cc:e4:6d:41:00:b2:66:02:3b:11:cb:61:9b:
98:4b:4b:3f:57:1c:d9:98:c2:7a:fe:1a:a2:80:17:a5:c4:f4:
34:f6:46:b3:94:40:2d:eb:4f:d3:ae:df:a2:9b:14:f8:03:48:
f8:2f:5c:c7:42:1d:d8:3a:50:a9:a0:b2:6b:b0:79:64:4b:cd:
13:fb:68:78:0c:a7:09:19:d9:22:79:9d:23:de:53:f9:b9:e0:
c6:f4:b4:76:d9:cf:c2:e0:ea:82:37:40:b0:67:5a:f3:70:45:
4f:bf:44:1e:d3:4a:97:40:36:25:7f:f0:f9:8d:c7:eb:92:3f:
e9:22:fb:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:25 2026 by rpki-client