
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0cc8f69-fc38-460e-b937-2eeeb86d8448.roa
File: e0cc8f69-fc38-460e-b937-2eeeb86d8448.roa (raw, json)
Hash identifier: GsH095Cu1OCk/IUHpmx1bu3P6hZgYRElg65XncACzf4=
Subject key identifier: A8:E6:5C:84:11:C1:05:29:F6:91:EA:31:9E:37:18:C5:60:64:1B:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7B8F7A96E0044F1DFC033B7CED9FB23543EDC13F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0cc8f69-fc38-460e-b937-2eeeb86d8448.roa
Signing time: Thu 10 Sep 2026 00:10:44 +0000
ROA not before: Thu 10 Sep 2026 00:10:44 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1feb:8040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8f:7a:96:e0:04:4f:1d:fc:03:3b:7c:ed:9f:b2:35:43:ed:c1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 10 00:10:44 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=d0211bf19cd13bdd02e3be430f4b99b1d98d713adf30d3a9892f74824ef4ad9f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9e:48:0a:f9:e9:cc:03:70:7d:68:22:d9:d7:
57:7b:62:39:73:a1:0b:57:1b:cc:36:03:98:3c:e7:
e0:6a:8d:a8:b5:f0:e3:6a:31:70:e8:b4:ad:73:59:
99:34:a7:5a:6e:13:d0:86:b7:45:c0:a0:25:9b:04:
d3:70:c6:19:8d:82:05:07:b8:e8:7a:63:8e:fc:1e:
5b:fc:a1:9d:72:45:a2:67:69:ba:8e:23:c6:43:18:
57:76:5f:2f:34:51:51:f9:b6:65:1b:ed:ab:8d:b7:
33:7a:5a:c3:b5:02:95:24:3a:f3:df:d6:c5:90:4a:
d8:de:10:83:6c:0c:25:27:33:e4:f3:cb:c1:58:49:
d3:d1:41:72:ad:4c:db:3c:33:ed:1d:a1:25:1e:5b:
c2:03:55:3f:ab:24:34:d8:72:f0:f8:28:05:a2:af:
e4:32:c6:c0:59:a8:e0:09:d2:43:fc:30:d3:f7:53:
c4:ad:a2:ae:72:50:15:85:5b:e0:5b:54:cd:50:6b:
da:eb:e3:fa:a6:c0:73:f9:8b:3f:18:87:87:79:51:
a3:3d:e9:bb:9b:4f:ab:f2:8c:46:54:26:72:5b:17:
36:76:53:98:bd:77:a3:8d:8c:0c:1c:19:18:81:1b:
38:b1:8b:0c:f4:72:cb:55:c2:2b:9e:b0:40:d5:9f:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E6:5C:84:11:C1:05:29:F6:91:EA:31:9E:37:18:C5:60:64:1B:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e0cc8f69-fc38-460e-b937-2eeeb86d8448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb:8040::/48
Signature Algorithm: sha256WithRSAEncryption
90:35:d3:0b:61:f7:d1:1d:27:31:a4:56:da:49:ae:16:6c:47:
38:96:7e:06:c5:d3:89:fa:08:e5:fd:9c:42:76:5e:d4:32:13:
72:16:9c:68:22:85:d6:68:e9:50:2a:d2:33:db:1e:67:24:18:
5d:6f:0f:e9:78:c0:6c:d1:25:07:a9:d9:be:c0:20:c7:8c:e7:
64:a6:a2:0d:0c:66:75:cc:74:9e:2f:fe:15:50:c6:63:8d:07:
6f:4c:a5:f1:d1:b3:a7:d5:87:c3:5c:8e:ae:b9:a7:a4:a7:23:
f1:cf:ed:b9:5e:f6:02:c7:f9:b5:e7:03:9e:c3:91:57:2b:2b:
7b:4e:01:b6:df:f1:85:4a:b9:8a:d5:d0:eb:8b:87:20:87:c8:
b3:80:57:1f:15:eb:bd:b9:65:a4:17:8b:de:43:17:de:12:4d:
47:7d:a4:d5:87:f1:c8:32:6d:16:6a:49:20:21:14:56:9d:ba:
0f:cc:44:61:6d:aa:fd:f7:a1:56:ce:89:8e:8b:8b:04:b1:12:
66:a6:cf:c2:63:e6:bc:fd:f6:2c:76:10:6b:f9:1d:08:4e:1f:
3e:ac:73:78:29:b8:df:e6:70:a6:5d:0e:da:e2:74:bc:69:56:
16:a6:76:5b:0f:8e:b5:e1:3e:aa:1b:a1:d1:fc:3b:21:b0:47:
91:5d:f5:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:15:21 2026 by rpki-client