
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa
File: ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa (raw, json)
Hash identifier: uMdUH+ghZKGcPpRwYDV7HhWcaODMMD25AZ5yxtxkrMY=
Subject key identifier: 38:89:6A:EF:EA:19:63:60:28:47:E5:97:E4:CD:36:1C:AA:C1:61:4C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 039FD53397B31348C8C1EC8C2643C2302F0755AB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa
Signing time: Tue 21 Jul 2026 01:01:56 +0000
ROA not before: Tue 21 Jul 2026 01:01:56 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:4080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:9f:d5:33:97:b3:13:48:c8:c1:ec:8c:26:43:c2:30:2f:07:55:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 21 01:01:56 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=720da9637ed9b134987531e05106a09cb19349107ac551b793479e7daab20b3a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f9:b1:37:cb:da:f1:9a:52:69:bf:81:bf:37:
ea:90:19:87:28:06:72:7d:1d:e2:10:20:97:f0:69:
34:1a:84:91:e1:c7:63:ec:04:42:b3:d5:eb:d4:f5:
47:d3:d9:77:e1:9a:ed:b8:2a:1a:d0:3d:88:a8:54:
9a:84:f4:b9:2e:a4:25:d5:da:77:3b:46:21:ef:3b:
6f:87:3d:4e:25:9e:5a:e9:57:7c:4d:34:39:e8:fd:
a7:40:22:74:5e:4c:88:0c:fd:17:17:63:5a:c8:95:
b0:84:3b:0f:ec:2a:48:b5:a9:04:c2:0a:66:d1:bf:
ed:3b:d7:71:88:a8:5f:58:4d:c3:0a:52:e3:06:99:
66:57:fb:95:c8:d2:b5:b4:34:74:1e:65:87:b3:c5:
9b:f2:6a:cb:9f:5b:de:39:b5:63:04:70:c7:c2:17:
d6:b1:7f:97:36:9b:cd:65:1b:28:0a:b7:5c:b1:11:
e0:23:c9:9b:27:98:5c:2c:10:9a:e1:77:86:75:4e:
4b:8d:f9:fb:6e:52:a9:f8:15:c3:6f:5b:b5:bf:63:
6c:64:3a:0c:85:b2:35:38:2d:88:1d:56:5b:0b:e5:
22:22:35:44:14:54:62:96:fe:3b:5d:9a:14:58:51:
82:14:f3:f2:fc:46:3b:ff:06:f9:65:94:b2:50:6a:
70:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:6A:EF:EA:19:63:60:28:47:E5:97:E4:CD:36:1C:AA:C1:61:4C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ac4e6d04-48cc-46b4-a930-17ab9b41fcf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:4080::/46
Signature Algorithm: sha256WithRSAEncryption
bf:a6:29:d5:7b:2a:71:79:25:4e:16:3e:cc:7b:4c:9f:26:57:
ae:28:c1:f0:43:c1:d1:37:5f:78:1e:e5:1d:c9:e6:69:23:dd:
ea:c1:3c:dd:a1:98:75:16:bb:e5:b2:b3:7e:09:ef:3d:a3:bb:
42:a5:c2:f6:33:01:e0:bf:a2:33:90:17:51:92:48:ed:84:09:
cd:6b:51:ed:33:07:c6:81:12:66:1d:4b:75:7d:21:a1:37:89:
bd:72:60:31:84:ff:e1:96:e3:77:79:93:2e:b4:a6:8c:0e:84:
49:9e:61:80:c0:32:22:1e:36:27:94:da:e7:f6:64:d4:2e:57:
6b:fb:61:79:78:fa:63:63:37:25:74:bc:3a:77:d9:11:1c:24:
e9:d2:1e:15:a2:31:7b:f8:be:af:fe:8c:62:1a:de:b2:a2:ea:
c4:f8:10:13:07:f9:d1:33:f9:22:9b:02:06:9d:1f:c7:79:75:
67:c8:77:f8:29:0d:46:73:93:ac:a6:ed:8c:e6:a3:28:b1:35:
f8:e9:90:33:a5:ea:87:47:d7:8a:b6:d4:69:35:9e:59:4c:43:
b4:aa:35:57:9a:18:4d:c4:de:5c:b1:2e:8f:3b:6b:a4:44:9f:
e3:06:3e:63:b3:1f:f4:c3:d5:d1:32:bf:46:0e:42:3e:43:c4:
fe:fb:23:d5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:29 2026 by rpki-client