
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30d49095-6aef-41ff-ba67-8550b5183e13.roa
File: 30d49095-6aef-41ff-ba67-8550b5183e13.roa (raw, json)
Hash identifier: H2SPOwD36khjwWjc//7oldszKyYf4HSOGivgqozVJsQ=
Subject key identifier: 07:D0:1B:14:F6:2E:6F:B4:C2:DF:79:3E:3A:C4:C3:8B:B6:8C:B0:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1FBFA575D8C1464A573A4148A5695A9E67192049
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30d49095-6aef-41ff-ba67-8550b5183e13.roa
Signing time: Thu 29 Oct 2026 00:31:00 +0000
ROA not before: Thu 29 Oct 2026 00:31:00 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe8:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:bf:a5:75:d8:c1:46:4a:57:3a:41:48:a5:69:5a:9e:67:19:20:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 00:31:00 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=17dff83298f321ad325df2a270b1ea251b3a212219bce371227752a3f467cf13, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:24:c8:63:51:fb:0f:7b:9b:ca:7c:d1:33:
b2:bd:e9:d7:33:7c:27:18:4f:95:9e:e1:f6:0b:c3:
9e:2b:eb:91:20:78:57:0c:17:1b:e5:e5:ca:ad:15:
fd:fa:74:c7:e6:9a:8c:d4:93:3f:68:48:95:00:d3:
6d:6a:ab:c5:6c:bf:e4:8f:44:52:a6:af:7a:a7:03:
22:f3:ec:27:87:26:c9:30:70:80:7d:ec:65:87:84:
da:99:0d:8b:56:72:4b:cd:bd:7d:26:36:7a:3f:3a:
a7:22:ca:4c:07:a1:a9:65:8a:9e:ef:e0:01:7c:9a:
67:1e:12:5a:73:6f:7e:64:9d:c9:bf:69:ff:48:de:
a3:b6:bc:06:0d:d6:a3:36:3f:cb:e7:90:6d:cf:4f:
c5:71:74:ee:47:6b:f2:08:f2:7c:f5:cb:d0:89:75:
cb:e0:04:6c:34:59:44:44:0e:da:50:45:89:f5:84:
c5:82:19:1b:f7:7b:77:78:f2:47:6a:e9:d0:25:0e:
d7:9d:50:6d:93:7c:df:82:53:3b:62:d9:41:53:9b:
24:94:4f:0f:06:62:08:e3:79:15:b0:83:c2:51:88:
c3:b9:9b:c6:2e:20:55:f7:e5:f3:c0:16:41:21:7b:
02:d6:d2:d8:48:69:57:07:08:5f:9a:23:1c:47:34:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D0:1B:14:F6:2E:6F:B4:C2:DF:79:3E:3A:C4:C3:8B:B6:8C:B0:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/30d49095-6aef-41ff-ba67-8550b5183e13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe8:800::/40
Signature Algorithm: sha256WithRSAEncryption
86:33:9b:6c:42:1e:be:4f:70:77:6b:fc:91:f0:6d:92:38:41:
9b:36:e0:ec:67:f7:31:6d:c8:09:a7:35:bf:a2:9b:f4:b6:58:
03:f9:5a:34:d3:2e:68:ab:f0:ed:77:f3:de:5e:77:12:49:a6:
03:97:e9:b6:c7:a6:cf:eb:da:ef:08:18:46:51:fb:ed:1c:36:
01:6a:cb:e9:f2:f8:9e:c8:6a:5b:2b:65:95:12:1b:8a:83:45:
ed:9d:e6:3d:3f:76:da:7f:d4:3e:c6:37:42:75:29:a8:67:2c:
28:a9:89:42:9c:cc:bb:5c:f4:ba:ae:db:f2:9c:6f:01:1d:9d:
e2:07:4d:2a:bd:96:fd:d7:99:4e:12:29:76:1f:30:c2:87:13:
41:10:de:b8:a3:d7:06:5c:e7:47:91:18:37:c1:ec:d8:28:31:
b2:91:42:fa:b1:ab:c9:14:42:66:84:e7:26:9c:76:ad:77:f9:
46:6a:c6:75:81:c0:2b:b6:60:0b:1f:94:b8:8e:ef:d1:be:90:
18:51:51:88:25:79:d7:c2:ea:02:bf:9c:54:cf:17:b3:96:12:
dc:40:f4:07:5d:f4:e6:be:37:2c:cf:4d:f1:b7:be:ae:1c:84:
dc:29:96:76:bb:37:b3:0d:3e:76:ff:df:25:9f:b2:df:11:48:
57:ff:13:a5
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUH7+lddjBRkpXOkFIpWlanmcZIEkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDAzMTAwWhcNMjcwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AxN2RmZjgzMjk4ZjMyMWFkMzI1ZGYyYTI3MGIxZWEyNTFi
M2EyMTIyMTliY2UzNzEyMjc3NTJhM2Y0NjdjZjEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHkSTIY1H7D3ubynzRM7K96dczfCcYT5We4fYLw54r65Eg
eFcMFxvl5cqtFf36dMfmmozUkz9oSJUA021qq8Vsv+SPRFKmr3qnAyLz7CeHJskw
cIB97GWHhNqZDYtWckvNvX0mNno/OqciykwHoallip7v4AF8mmceElpzb35kncm/
af9I3qO2vAYN1qM2P8vnkG3PT8VxdO5Ha/II8nz1y9CJdcvgBGw0WUREDtpQRYn1
hMWCGRv3e3d48kdq6dAlDtedUG2TfN+CUzti2UFTmySUTw8GYgjjeRWwg8JRiMO5
m8YuIFX35fPAFkEhewLW0thIaVcHCF+aIxxHNEQJAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUB9AbFPYub7TC33k+OsTDi7aMsK4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMwZDQ5MDk1LTZhZWYtNDFmZi1iYTY3LTg1NTBiNTE4M2UxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/oCDANBgkqhkiG9w0BAQsFAAOCAQEAhjObbEIevk9wd2v8kfBtkjhB
mzbg7Gf3MW3ICac1v6Kb9LZYA/laNNMuaKvw7Xfz3l53EkmmA5fptsemz+va7wgY
RlH77Rw2AWrL6fL4nshqWytllRIbioNF7Z3mPT922n/UPsY3QnUpqGcsKKmJQpzM
u1z0uq7b8pxvAR2d4gdNKr2W/deZThIpdh8wwocTQRDeuKPXBlznR5EYN8Hs2Cgx
spFC+rGryRRCZoTnJpx2rXf5RmrGdYHAK7ZgCx+UuI7v0b6QGFFRiCV518LqAr+c
VM8Xs5YS3ED0B1305r43LM9N8be+rhyE3CmWdrs3sw0+dv/fJZ+y3xFIV/8TpQ==
-----END CERTIFICATE-----
Generated at Wed Nov 4 11:48:49 2026 by rpki-client