
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3709c02-3b03-40ee-a552-a17b19d43a03.roa
File: c3709c02-3b03-40ee-a552-a17b19d43a03.roa (raw, json)
Hash identifier: 9aHGBy/l4zOfWzdeb28P08FuM7roEnWvvDr6hxSh/hI=
Subject key identifier: CA:BA:EF:4B:FD:44:C8:4A:7B:A1:30:E1:13:22:34:A8:63:22:62:EF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1167CE04BC952E74868EC5EA59144CF106515AB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3709c02-3b03-40ee-a552-a17b19d43a03.roa
Signing time: Tue 21 Jul 2026 01:11:51 +0000
ROA not before: Tue 21 Jul 2026 01:11:51 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:a4c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:67:ce:04:bc:95:2e:74:86:8e:c5:ea:59:14:4c:f1:06:51:5a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 21 01:11:51 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=6c4be68296c40ee8e754177277bf68a479c72a369f06a7f33ad2bee868836e69, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8c:d2:bb:ef:f7:52:f1:dc:79:7a:ea:ae:17:
d8:04:f0:38:60:d9:fd:14:b0:13:20:72:d8:89:03:
99:a0:d7:0e:38:17:83:0e:2e:33:9f:b6:3a:6f:33:
9a:4f:14:2b:9c:7e:67:8c:30:8f:fb:be:f9:a6:94:
cf:fc:11:87:f6:75:4b:62:29:78:1e:32:41:5e:da:
59:3d:a0:16:69:2c:31:20:cb:78:1e:90:ae:4e:af:
8a:cf:d7:7f:c9:2d:90:2d:65:ab:21:ba:5c:b4:6c:
46:15:7a:d9:ad:b7:32:50:c0:1c:1b:34:a9:05:4b:
a6:9c:4b:c7:e0:4f:3c:2a:33:72:d6:c0:d5:96:e5:
5b:e6:45:89:10:aa:7e:4c:d7:64:d0:1a:ae:8e:fd:
31:ef:56:ab:d2:fd:5e:1b:05:27:95:84:9a:13:46:
34:11:d4:d5:ac:fa:55:68:9a:e8:81:40:18:e7:a0:
ae:20:51:4d:14:2f:8e:a4:26:d0:c8:78:b9:23:e2:
e2:a7:bd:fb:1d:16:b4:24:e6:26:68:66:1e:27:75:
c2:49:e8:76:85:f7:1b:18:c6:48:bd:e3:2c:c1:35:
2c:4d:44:4a:04:20:cf:fd:0b:a2:f8:f6:43:e9:dd:
d6:a3:75:71:23:8b:16:36:5c:94:44:00:a6:f3:41:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BA:EF:4B:FD:44:C8:4A:7B:A1:30:E1:13:22:34:A8:63:22:62:EF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c3709c02-3b03-40ee-a552-a17b19d43a03.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:a4c0::/46
Signature Algorithm: sha256WithRSAEncryption
26:90:2c:23:a3:af:3b:f3:3e:42:fc:8a:0a:56:ab:28:37:ef:
c0:e8:ff:6a:32:19:a8:2c:2f:d5:b0:58:bf:2d:bf:f3:1a:22:
eb:39:7f:a1:0c:81:c8:8f:c1:61:dd:6a:94:f6:c7:4f:54:eb:
d7:61:e2:ff:77:b1:6d:50:d0:14:41:61:c7:da:22:2e:5a:05:
ab:98:43:9c:b7:cf:d8:dd:56:b8:58:c7:2f:67:53:c3:b4:34:
94:f0:9b:8b:27:14:8f:b1:c7:02:b9:b6:6a:09:dc:17:8c:c6:
54:ca:c8:c5:46:6b:05:f3:6d:b7:ab:35:20:31:77:2d:d1:9f:
59:95:4b:e1:0b:02:49:6c:be:78:3b:c7:86:9f:14:fd:70:9b:
a2:23:73:d3:87:d9:a1:fe:25:2b:76:a3:80:91:55:2f:11:38:
59:11:09:76:dc:2b:bf:3b:b4:f5:07:87:20:ac:60:71:b4:92:
81:f1:1a:30:eb:1d:e2:e6:ad:f6:51:41:d5:76:4f:af:26:e4:
a0:86:f2:99:ea:4f:fc:9c:f5:25:79:3a:11:83:87:66:d8:fd:
82:27:2c:1c:02:e9:a3:3e:c7:5a:01:63:cf:3d:9e:81:d9:33:
0c:8e:a7:96:77:4f:02:53:91:fd:e3:09:9b:00:42:b3:62:4d:
41:9a:31:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:59 2026 by rpki-client