
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36a79084-b69c-4ba3-99fa-f8a0efe3e0c8.roa
File: 36a79084-b69c-4ba3-99fa-f8a0efe3e0c8.roa (raw, json)
Hash identifier: Aw1hdKwkSvP/++iONxc1/4H8Oaw1fywgQgMi+Q87hTQ=
Subject key identifier: 03:16:37:0E:74:E4:B9:79:77:8F:28:92:B1:BE:11:46:FC:4F:81:90
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F0593F96CFFB83EEA0EB36F001682BE3C53C694
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36a79084-b69c-4ba3-99fa-f8a0efe3e0c8.roa
Signing time: Thu 22 Oct 2026 00:30:14 +0000
ROA not before: Thu 22 Oct 2026 00:30:14 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:1040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:05:93:f9:6c:ff:b8:3e:ea:0e:b3:6f:00:16:82:be:3c:53:c6:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:30:14 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=ddc6968f3e556f808211876469dbf66079e5917eb6f61253e74fa80a1380b889, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:62:56:b5:54:0b:c0:b8:bb:d4:fd:34:e1:5e:
d6:7b:42:64:fa:e5:cb:af:63:00:6f:2f:be:0c:fe:
ce:ed:1a:20:a1:a8:95:94:03:eb:99:d0:ac:5a:fb:
76:a7:47:2a:90:e1:eb:ec:66:db:a1:e1:b9:0c:d4:
9e:6c:e1:c1:c7:a4:2e:0f:ee:fd:86:9e:be:14:8e:
98:2d:d0:b5:3b:d8:31:74:fa:8e:f6:8e:6a:91:59:
e9:42:b0:f0:49:35:27:02:b3:20:77:68:d1:bb:0d:
6e:0d:1f:fc:d8:08:1c:c8:aa:ca:88:63:ed:69:86:
ec:22:c5:c8:02:47:ff:c6:20:1a:57:de:66:ab:b0:
50:51:c0:54:a4:40:9d:28:d4:e2:51:11:01:7e:58:
4e:a3:01:e7:b3:65:af:29:88:02:0c:b2:af:af:35:
38:2e:13:03:6f:9e:2a:8f:37:84:18:3f:bb:e8:0f:
a9:1d:21:62:fb:22:1a:59:ce:4f:61:82:54:f4:97:
21:14:96:b9:f7:1e:7c:36:0e:d6:c1:e3:5c:c6:65:
71:41:a3:5c:d6:54:1b:74:85:fa:f7:bb:2c:0e:6c:
48:83:b8:19:31:eb:30:c4:14:3b:16:7c:b0:24:8a:
01:e2:f7:86:5d:e0:9e:67:7b:11:45:c5:56:4f:33:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:16:37:0E:74:E4:B9:79:77:8F:28:92:B1:BE:11:46:FC:4F:81:90
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/36a79084-b69c-4ba3-99fa-f8a0efe3e0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:1040::/48
Signature Algorithm: sha256WithRSAEncryption
54:7d:d0:9d:1c:d5:f7:ea:0b:ca:8a:c8:61:3c:42:1c:c5:53:
4f:0d:78:58:0f:57:47:5d:d2:ab:38:2b:87:c0:1c:4c:da:b3:
b7:ae:92:48:8d:c8:59:f5:e4:40:f6:25:b1:f1:1e:ca:16:02:
e9:1d:ee:45:4a:ef:20:37:7c:bd:6f:0c:f0:e8:8a:30:93:3f:
18:69:e5:e0:9b:39:75:08:da:87:52:5c:b7:a7:0d:af:f1:33:
70:01:f7:04:73:0e:15:43:b8:d2:8a:79:df:f8:22:c8:a7:85:
16:64:56:23:bc:43:29:9c:8a:c0:2c:08:e6:a3:b4:53:b5:e3:
46:30:6f:54:b1:28:38:c6:e6:1f:ef:38:31:5b:59:0b:dc:41:
a3:eb:b6:a4:f2:89:58:ab:12:23:5e:15:15:59:c1:e3:ee:ee:
2a:6b:50:90:bc:40:f4:1d:dc:c5:89:73:94:52:10:c3:2c:cb:
59:b6:17:a4:3c:76:ee:64:47:eb:e5:e4:b8:58:27:b0:b3:d1:
ea:f8:6b:0a:dc:df:99:94:14:e1:4a:6b:65:6f:34:fa:08:1c:
66:b0:4c:76:91:5c:36:88:f4:a2:f9:34:e4:45:77:14:70:a6:
4e:8f:78:96:dc:c8:e0:18:cf:15:1d:47:3a:ac:33:0f:cb:ad:
60:f7:d2:2b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUfwWT+Wz/uD7qDrNvABaCvjxTxpQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDAzMDE0WhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BkZGM2OTY4ZjNlNTU2ZjgwODIxMTg3NjQ2OWRiZjY2MDc5
ZTU5MTdlYjZmNjEyNTNlNzRmYTgwYTEzODBiODg5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4Yla1VAvAuLvU/TThXtZ7QmT65cuvYwBvL74M/s7tGiCh
qJWUA+uZ0Kxa+3anRyqQ4evsZtuh4bkM1J5s4cHHpC4P7v2Gnr4Ujpgt0LU72DF0
+o72jmqRWelCsPBJNScCsyB3aNG7DW4NH/zYCBzIqsqIY+1phuwixcgCR//GIBpX
3marsFBRwFSkQJ0o1OJREQF+WE6jAeezZa8piAIMsq+vNTguEwNvniqPN4QYP7vo
D6kdIWL7IhpZzk9hglT0lyEUlrn3Hnw2DtbB41zGZXFBo1zWVBt0hfr3uywObEiD
uBkx6zDEFDsWfLAkigHi94Zd4J5nexFFxVZPM0vjAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUAxY3DnTkuXl3jyiSsb4RRvxPgZAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzM2YTc5MDg0LWI2OWMtNGJhMy05OWZhLWY4YTBlZmUzZTBjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//EEAwDQYJKoZIhvcNAQELBQADggEBAFR90J0c1ffqC8qKyGE8QhzF
U08NeFgPV0dd0qs4K4fAHEzas7eukkiNyFn15ED2JbHxHsoWAukd7kVK7yA3fL1v
DPDoijCTPxhp5eCbOXUI2odSXLenDa/xM3AB9wRzDhVDuNKKed/4IsinhRZkViO8
QymcisAsCOajtFO140Ywb1SxKDjG5h/vODFbWQvcQaPrtqTyiVirEiNeFRVZwePu
7iprUJC8QPQd3MWJc5RSEMMsy1m2F6Q8du5kR+vl5LhYJ7Cz0er4awrc35mUFOFK
a2VvNPoIHGawTHaRXDaI9KL5NORFdxRwpk6PeJbcyOAYzxUdRzqsMw/LrWD30is=
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:29:52 2026 by rpki-client