
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa
File: 94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa (raw, json)
Hash identifier: ezMikKGao7U/fACEcS/HTTGPpqjLZOYWk8pY9zfmb8E=
Subject key identifier: 3F:C9:D3:DB:B0:D9:C4:F1:F0:2C:6E:7F:86:1C:4B:B3:20:10:F6:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2E6AE22710E5540BBBEE0550D27810DE7D373575
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa
Signing time: Tue 21 Jul 2026 01:10:58 +0000
ROA not before: Tue 21 Jul 2026 01:10:58 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff3:5000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:6a:e2:27:10:e5:54:0b:bb:ee:05:50:d2:78:10:de:7d:37:35:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 21 01:10:58 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=cd76710f97846984c0aadda4c0e64371875e1c11159d9163f15f039d012d076d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:19:9e:43:6f:ec:57:a9:2c:c5:7d:7f:86:
74:6f:ec:ca:7d:f0:de:62:f6:f5:2c:72:f6:1b:a1:
03:6c:0b:d7:35:b7:9b:39:f2:bb:ba:3d:1b:a8:45:
56:d9:73:60:a7:47:a4:5c:3a:3c:2d:e0:2a:69:0d:
d3:0e:fa:99:40:fe:c9:ef:34:55:ba:0d:06:23:53:
e7:07:f5:04:71:84:9f:0f:3e:4f:18:44:69:80:7c:
d9:18:a0:91:ae:db:c7:e3:37:2c:ce:56:37:13:fe:
9e:c3:dd:d7:00:04:08:27:1a:5e:cc:d4:72:bc:0d:
c4:6a:5c:28:ea:ac:50:28:ca:7f:db:9a:f8:cb:fa:
18:c9:06:a2:3b:20:0f:b9:26:ae:06:ea:75:0c:e6:
1e:70:a3:3d:e7:f0:34:d4:0b:ba:59:0f:9e:9f:9f:
64:b0:9f:8a:a4:de:70:84:6f:7e:61:3b:16:52:21:
2b:38:45:de:88:f9:4c:dc:c8:ff:02:8c:d1:eb:1f:
29:f9:6f:9d:a0:41:07:e6:e4:de:23:30:ab:e3:99:
ef:83:8f:3b:d0:15:8d:6b:b8:72:13:a9:78:de:07:
06:f3:a4:8a:1d:4e:4b:d5:d8:76:83:b5:fd:6a:5d:
39:27:6e:a7:69:fa:55:86:54:4a:73:d9:15:b1:6f:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C9:D3:DB:B0:D9:C4:F1:F0:2C:6E:7F:86:1C:4B:B3:20:10:F6:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/94ea3336-2ba3-4ecb-94e5-756a8bbbcaec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:5000::/40
Signature Algorithm: sha256WithRSAEncryption
05:9a:c1:62:cd:52:0b:fc:82:88:e9:e6:3f:4e:e7:aa:f5:d7:
81:67:30:80:68:6a:6a:0b:88:09:4d:01:e1:fa:bd:e1:81:ca:
4e:94:68:d2:a4:64:92:73:7a:77:54:f7:cc:cd:19:07:0f:74:
28:ee:e0:c2:a2:2a:63:f1:84:b2:0b:0f:13:96:64:e4:10:1a:
a8:85:25:37:a3:c5:9f:2d:41:8d:3a:7c:50:b4:cb:d6:e3:37:
2e:b6:3c:1b:4f:9f:99:a9:68:71:d6:e5:b6:94:9d:a8:64:64:
f5:c4:d0:96:ac:46:31:76:2c:a4:ac:14:0e:17:e4:00:91:b2:
c3:e7:12:1f:c7:11:ae:ee:53:f0:3a:bf:98:94:e4:36:c0:7f:
ef:76:80:0a:69:5b:9f:38:53:81:cc:40:18:4b:09:95:d5:22:
f3:b3:58:43:83:46:2c:1a:fc:d5:66:db:4e:72:2e:bb:6e:fc:
5a:f9:68:ac:40:91:f8:f4:9c:c2:8a:26:a4:e5:6c:17:5c:e7:
7c:98:de:bd:67:62:c0:91:fd:6a:86:40:3c:26:78:68:97:bb:
fc:31:19:63:9b:ad:37:95:00:da:0e:d5:d2:96:a2:0c:a1:fa:
32:5e:17:c6:f3:01:ae:09:46:c1:b7:83:3d:ca:35:29:4a:cd:
35:c3:11:22
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:25:39 2026 by rpki-client