
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b10fd9a-2796-4477-a76a-de2223e52295.roa
File: 3b10fd9a-2796-4477-a76a-de2223e52295.roa (raw, json)
Hash identifier: V46kY9la9K9B6cnlQyNw1T4EQCgc1u37hT+/BXd6rAg=
Subject key identifier: 84:64:22:5F:5E:35:E0:47:AC:F9:2C:C9:E0:E7:4E:46:4C:CB:CE:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 017DAC332104E3811A2DB6A918883EC69C5CF8E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b10fd9a-2796-4477-a76a-de2223e52295.roa
Signing time: Tue 04 Aug 2026 01:11:06 +0000
ROA not before: Tue 04 Aug 2026 01:11:06 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1f:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:7d:ac:33:21:04:e3:81:1a:2d:b6:a9:18:88:3e:c6:9c:5c:f8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 01:11:06 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=cb9a1428f117c0e0f4806b04695983b6518372acd785685c6035fb4af36e34ca, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:4d:3b:3e:02:15:f8:4b:61:0c:70:a1:7e:
71:3f:14:86:1d:b7:a5:c8:fa:bd:4f:f0:18:d2:7f:
4a:77:91:1f:63:8a:fa:c0:2d:aa:6e:d2:91:2a:09:
7c:d3:c7:31:db:4b:c5:03:b7:62:eb:4a:b8:9a:85:
e8:5b:3a:28:c2:e3:ef:5d:5e:bc:d0:c2:a5:5a:da:
e5:ef:27:c2:40:4c:4e:7e:af:cb:93:6c:28:f6:32:
ab:8e:f5:25:79:f1:e7:2d:2d:78:23:16:12:b8:d0:
bf:d0:c5:ae:7e:53:5c:8f:9c:d0:37:ff:7c:0b:ed:
ef:54:13:5a:31:27:84:d6:e6:54:a8:44:7b:37:d9:
f6:76:2e:10:f8:f8:6d:9d:45:65:34:af:e0:f4:ae:
0e:be:54:05:f9:b2:4c:fc:19:27:3a:06:5e:9d:86:
a4:09:6c:24:35:53:7a:68:33:e6:53:4d:a4:74:28:
e7:96:91:96:ce:81:e6:9d:0e:cd:59:33:28:a2:a9:
2b:82:5b:62:fe:19:2d:db:1e:31:e8:30:fd:46:f1:
87:1b:43:b7:8b:be:45:e3:0b:03:74:de:b1:12:43:
e6:1e:90:f5:f7:4a:f7:e7:b8:e9:53:21:ed:5c:c9:
44:a2:19:db:e3:92:be:bc:81:06:59:cd:1c:8e:7a:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:64:22:5F:5E:35:E0:47:AC:F9:2C:C9:E0:E7:4E:46:4C:CB:CE:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b10fd9a-2796-4477-a76a-de2223e52295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1f:8000::/36
Signature Algorithm: sha256WithRSAEncryption
78:3c:c5:70:2e:f6:fe:20:aa:66:9f:44:0b:24:46:e2:38:b4:
e7:d0:23:d7:1f:13:d4:6b:75:54:fd:f0:6f:c6:0d:52:7b:58:
c5:68:98:4e:64:63:76:b6:a7:72:94:e2:2a:a9:cd:22:48:be:
7c:fe:bf:26:40:5e:d9:93:50:2b:2a:3a:6f:17:e2:71:d8:96:
a8:65:b1:a3:e5:35:44:57:c2:86:93:0f:7c:19:17:7a:df:8f:
6b:70:73:fe:54:27:ca:37:8e:5f:16:70:be:39:00:0d:73:e0:
dd:cb:9a:a1:9d:99:ec:56:8d:fb:32:a7:b2:48:fc:ab:1c:70:
f9:f5:4d:0d:8e:36:ef:77:ce:c3:55:e1:cb:67:15:47:c1:7b:
3b:f5:2f:fc:83:7e:fd:62:3b:bf:f6:3f:ae:5f:06:34:91:92:
67:c6:9a:66:8a:da:ef:6d:8f:1f:80:52:48:f3:44:77:12:98:
a4:8b:26:bf:f6:6c:98:08:80:84:4f:85:b0:75:b0:87:d8:51:
57:31:d6:b2:bc:32:1f:28:9e:bc:7e:23:17:88:42:13:d9:81:
dc:03:04:be:15:bc:03:ee:68:98:f3:f4:54:fe:30:d6:72:2f:
5e:6f:3d:34:ca:13:bb:18:70:49:38:b6:e9:56:5c:fa:a9:7a:
a5:8b:38:86
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:14:07 2026 by rpki-client