
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c25f49-463e-4031-8326-5279365c1126.roa
File: b1c25f49-463e-4031-8326-5279365c1126.roa (raw, json)
Hash identifier: Q1oFL1UbzD31HXSF1H7qQZOqN0IZ/2ZWCWZd2Y8n2YU=
Subject key identifier: F5:D6:3B:A6:16:88:FE:0E:90:6F:A7:24:47:8F:76:01:97:B6:52:B6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 47AB0A0B5CC3EEE50CF0E24E48746D05BE7FFDA5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c25f49-463e-4031-8326-5279365c1126.roa
Signing time: Wed 29 Apr 2026 00:00:44 +0000
ROA not before: Wed 29 Apr 2026 00:00:44 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fa0:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ab:0a:0b:5c:c3:ee:e5:0c:f0:e2:4e:48:74:6d:05:be:7f:fd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:00:44 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=9b2706b472c9c577c3184e919a88a725b7a868efb90a9ddc988155f94313f937, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ad:e7:4c:2c:39:19:93:49:b9:ff:fb:6a:c2:
a1:18:ec:f8:f8:cb:8e:85:b8:59:c4:16:9d:fd:85:
fa:36:c3:da:1a:d4:b3:c1:0a:2f:9d:0b:8f:3d:38:
d7:5f:fb:2d:7e:53:98:20:89:43:25:ed:1e:f5:00:
43:6e:b1:41:c6:d4:74:9f:c6:1b:8a:9c:96:bf:7b:
ed:fe:6e:06:9c:84:fa:8a:f6:1f:0c:29:7e:c7:9b:
65:6f:af:f8:3f:58:53:40:32:c6:ba:31:92:52:31:
7c:ea:e8:c5:75:9f:5e:52:b4:37:07:b5:3f:8e:a9:
9e:78:59:46:ac:07:3d:1c:80:d3:c6:71:10:66:43:
d8:1a:ba:a8:0f:c0:32:1f:54:1d:f4:7b:17:8b:4b:
ed:d4:d9:f5:2f:c5:9e:b0:33:40:cc:5b:86:ed:ad:
e1:31:11:77:d3:19:f1:90:15:5f:26:80:e1:07:4e:
4a:a0:3f:9d:38:36:57:16:e4:7c:3a:31:99:c1:cd:
ff:ee:d1:d7:b8:bb:b8:eb:75:99:b9:c4:6a:f1:9e:
48:8d:dc:d4:37:14:f5:5a:b4:8d:c1:27:d4:88:eb:
ba:08:2d:b5:75:86:01:6a:b6:bb:01:f8:7b:07:c1:
df:57:2c:40:76:ef:6d:19:59:b1:84:af:d7:71:99:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D6:3B:A6:16:88:FE:0E:90:6F:A7:24:47:8F:76:01:97:B6:52:B6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b1c25f49-463e-4031-8326-5279365c1126.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fa0:2000::/40
Signature Algorithm: sha256WithRSAEncryption
66:1a:b6:f5:18:a0:08:da:58:08:e6:38:f2:96:27:aa:c8:de:
5d:6c:e6:d4:71:a0:69:78:11:41:f6:1b:7c:69:3f:69:e6:59:
a1:c2:35:af:dd:12:a2:9e:15:8d:90:68:d6:23:9b:48:0a:53:
26:d3:51:a3:2a:a8:6b:64:a6:b8:99:19:12:48:10:8f:2e:8c:
40:d6:ff:b0:91:6d:fd:64:4e:3d:e8:9f:25:20:9b:e2:00:33:
8d:8c:ce:49:7d:51:e5:00:ec:f1:75:0f:14:19:a4:2b:b5:83:
69:55:86:c2:61:0d:6a:3d:bd:48:55:5d:ff:98:a4:dc:db:b1:
42:e7:7f:de:67:29:8e:ca:a5:5b:42:21:fb:ec:2a:b2:b4:a1:
9b:c8:53:76:29:85:49:09:ff:fe:99:21:93:c4:88:59:99:67:
29:be:69:6c:6d:c7:8c:2c:c0:b7:1a:0e:f3:8a:73:1e:aa:94:
e4:55:4e:c1:a3:ea:03:4e:03:da:28:b6:6a:5b:ff:43:5d:5d:
fd:e3:e8:a3:e2:12:1f:a0:a5:2c:d4:fb:e7:3b:72:5e:8d:8a:
a0:26:0a:b2:3d:a3:8b:b9:7d:1c:14:eb:6e:f7:72:ca:85:98:
bd:04:67:e3:13:18:22:24:4c:43:e2:24:b1:c2:bb:20:5c:86:
0c:bb:07:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 04:59:23 2026 by rpki-client