
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7547cf-1d8f-409c-90d9-899b542e967e.roa
File: bd7547cf-1d8f-409c-90d9-899b542e967e.roa (raw, json)
Hash identifier: UmIPfFbfsbb9bC04fxlj1Ox3ino143QLmX21+qZ5a2A=
Subject key identifier: 88:80:45:62:EF:66:0D:26:AC:A6:EA:69:72:A2:3E:08:12:AA:D9:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53AFD3E60C2823CD9898E429BCEE28BD8203B312
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7547cf-1d8f-409c-90d9-899b542e967e.roa
Signing time: Fri 24 Jul 2026 00:10:36 +0000
ROA not before: Fri 24 Jul 2026 00:10:36 +0000
ROA not after: Thu 22 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff4:7400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:af:d3:e6:0c:28:23:cd:98:98:e4:29:bc:ee:28:bd:82:03:b3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 24 00:10:36 2026 GMT
Not After : Oct 22 23:59:59 2026 GMT
Subject: serialNumber=33f9929ed3e60c9de61ffeab225e2b8d4ba92369ded678868f329736cc14d731, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:a9:8a:7b:2b:5a:95:ff:d0:e7:de:86:95:
2a:70:4a:10:bd:53:ef:a7:6f:01:95:11:2f:43:ef:
ed:ee:2e:b4:b9:d4:73:96:e8:35:55:c6:43:5f:51:
2d:2d:32:1c:34:1a:6e:91:1f:fa:51:51:8c:55:e5:
ee:20:3d:cd:09:ff:8d:71:37:5f:71:08:1a:f2:20:
32:2e:58:12:bc:fe:90:40:27:44:d8:18:13:a2:aa:
a2:6e:09:9f:c6:3b:e7:72:d9:a0:10:cf:17:f1:9a:
ee:bf:33:6b:29:63:6d:53:79:2b:05:d0:11:0f:1d:
9a:52:cf:af:22:69:c5:a9:bf:52:93:1d:f9:7b:7c:
4a:04:c1:7d:6b:69:2a:3b:8a:e1:04:c6:36:d4:86:
f3:dd:9a:21:2a:72:fe:86:15:be:55:27:b9:87:2b:
a2:f7:88:5f:94:18:ad:14:f0:53:42:a9:5d:49:1f:
98:cf:4e:4e:cc:fb:84:79:4a:08:d1:a7:01:52:39:
e3:3b:86:38:94:51:0a:b5:f5:2c:9a:ee:10:ff:4f:
d1:83:8a:4f:1a:f7:8f:9d:ee:b3:86:a7:87:b7:39:
b8:c0:00:7d:3d:e5:b7:f7:df:28:17:5b:b9:93:c8:
84:51:cf:af:9c:00:da:cb:2f:83:a8:6f:b8:24:20:
08:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:45:62:EF:66:0D:26:AC:A6:EA:69:72:A2:3E:08:12:AA:D9:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bd7547cf-1d8f-409c-90d9-899b542e967e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:7400::/40
Signature Algorithm: sha256WithRSAEncryption
8a:4e:80:e0:de:ea:1f:61:aa:c1:aa:c5:cd:91:b4:c4:bb:45:
3c:68:35:c7:6a:97:dc:02:42:aa:bf:be:e6:95:b3:ec:b2:ae:
df:20:a7:66:65:d0:45:1c:d7:bf:3d:07:cc:11:52:50:af:42:
c7:2a:21:05:6f:f4:91:ec:e1:b6:e7:f6:e2:52:11:98:69:33:
5b:4a:00:42:ed:1d:4d:1b:4f:93:23:58:49:d6:a9:7b:a6:82:
2e:6a:05:86:2d:7e:95:09:52:68:7f:0a:b3:d9:e8:84:c8:e8:
a2:2c:32:69:27:e9:99:3b:c6:b2:00:52:0b:c3:7c:1c:f3:e2:
bd:6b:d0:f5:af:69:a0:3c:90:f7:f2:81:26:7d:2e:43:30:0e:
c1:d5:a7:66:ec:15:40:41:ca:b8:9c:20:e9:1c:b1:55:ca:c1:
c3:27:5e:74:85:b2:7f:bc:0a:3e:af:a2:a0:31:b1:4f:37:50:
54:da:b8:05:b8:e7:56:59:a5:cb:f0:e2:1d:fd:55:ac:54:6a:
b9:bc:dc:57:3f:6f:00:07:11:a3:f2:e1:6a:cf:ad:78:18:28:
c2:1d:42:5f:4d:ed:19:d2:68:e4:12:dc:52:de:75:50:7b:b0:
bd:c9:05:45:eb:79:41:42:54:fb:59:19:46:88:b5:b2:b4:84:
a2:31:62:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:38 2026 by rpki-client