
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e02a8835-d035-4e0b-951a-27f71b3a4549.roa
File: e02a8835-d035-4e0b-951a-27f71b3a4549.roa (raw, json)
Hash identifier: vqZ8MO+84Vxsy2p7yZWBSOGflNqGMZkU+rhOv7hkiLc=
Subject key identifier: 75:08:58:4F:6B:05:06:CF:C4:78:85:42:15:8E:67:71:8A:0D:1B:42
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 17349C5B45E5F7D339962CD536D5BB42EC1E52E4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e02a8835-d035-4e0b-951a-27f71b3a4549.roa
Signing time: Thu 23 Jul 2026 00:51:06 +0000
ROA not before: Thu 23 Jul 2026 00:51:06 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f32:ec00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:34:9c:5b:45:e5:f7:d3:39:96:2c:d5:36:d5:bb:42:ec:1e:52:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 23 00:51:06 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=151f23537bdf97660997dbc9d3b50fbecb8d8951b0286bb0a5b1d748d6aeb87b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:89:1f:9b:30:6b:91:55:34:0d:20:f1:19:
48:e1:7c:90:69:ad:57:29:27:b5:11:71:22:d4:71:
f6:0a:3b:5d:fb:b8:ee:0a:12:07:c2:0e:f6:38:61:
bb:98:32:37:46:a7:6f:27:e3:f5:69:07:6d:76:b7:
13:22:24:8e:e9:73:b8:35:35:08:15:1c:9a:2f:63:
92:48:d7:63:11:d2:22:f9:03:66:fc:b9:83:39:0b:
b1:c7:8f:1e:9a:d7:66:77:4b:23:3c:1f:a0:4b:ac:
24:61:d4:bc:40:6f:8c:69:bb:a9:9e:bf:25:64:88:
21:88:1a:b9:32:a9:e5:49:95:ac:52:dc:e5:11:0c:
f5:7b:82:44:bd:71:c4:a1:f0:a3:b9:be:5b:29:2a:
35:64:c8:7f:fa:2a:e5:1e:61:c5:c7:0f:ba:d6:a2:
1d:6c:f0:bb:dc:78:85:58:28:d7:13:ac:68:c9:1e:
c0:70:5b:0a:8f:b2:7b:7e:83:06:3c:fc:05:87:85:
b2:95:37:55:9e:f0:57:59:91:5b:0f:b1:b7:57:f1:
ad:40:14:fa:58:5f:4b:66:b5:fd:3e:75:07:26:45:
7f:af:cc:f0:e2:fb:07:e7:57:2e:c7:e7:5a:51:0f:
8a:08:6d:eb:d1:96:77:92:ec:49:bd:e5:10:b5:ce:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:08:58:4F:6B:05:06:CF:C4:78:85:42:15:8E:67:71:8A:0D:1B:42
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e02a8835-d035-4e0b-951a-27f71b3a4549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f32:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
ac:8b:c2:01:5a:e4:98:d7:81:d4:0f:f7:91:5f:26:9b:f7:f1:
2f:38:8d:3f:cf:f3:52:ae:b2:39:6f:c3:e3:36:64:0e:06:12:
01:55:b8:65:32:6c:03:61:09:1a:48:84:89:e7:cb:73:16:57:
44:c2:b2:24:f9:b5:77:9b:3e:0d:95:14:c5:a9:d6:68:77:ef:
51:ee:20:5b:9b:62:6b:84:80:8c:1d:28:0e:20:5f:d6:a0:f7:
54:42:b0:35:09:ba:a5:b4:3e:f2:bb:4c:eb:2e:ea:7f:f8:32:
0f:52:1f:41:84:b3:dc:44:e9:72:0f:3c:29:81:60:39:00:3a:
4a:e0:ee:8c:35:1a:5f:be:14:04:2c:06:2a:39:9e:7c:e8:c3:
89:f9:4f:15:d1:88:57:64:38:35:a8:ff:96:42:5a:0d:e3:ce:
b2:80:c8:1e:fc:14:9f:7c:46:a0:28:93:b2:09:88:c0:84:dc:
a3:1b:fe:df:58:b2:1c:5f:ed:55:54:f6:1b:d2:36:42:2b:57:
33:07:3d:31:4b:6d:88:e5:c2:f1:99:12:c9:4d:28:2b:56:7b:
ed:c5:b0:35:7f:35:d7:6e:d9:53:df:56:c1:2b:b2:9f:6c:ba:
bf:3d:e5:54:fd:7f:52:f4:f4:85:f2:00:c4:81:fc:1d:95:7b:
40:be:93:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:39 2026 by rpki-client