
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
File: 3b6f98f3-b828-4069-9b64-8122ea365d59.roa (raw, json)
Hash identifier: 069zlqkzcZLefU2zxLZRGMxMIAHi7rEETFrtmZxJQ40=
Subject key identifier: 91:86:15:84:B9:04:9C:48:9F:F1:29:72:36:BC:B8:0D:43:7E:0C:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5DF479A9A94E63AEBFB1CB39E144C3CBFD6C45D5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
Signing time: Wed 29 Apr 2026 00:30:12 +0000
ROA not before: Wed 29 Apr 2026 00:30:12 +0000
ROA not after: Tue 28 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fa0:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:f4:79:a9:a9:4e:63:ae:bf:b1:cb:39:e1:44:c3:cb:fd:6c:45:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 29 00:30:12 2026 GMT
Not After : Jul 28 23:59:59 2026 GMT
Subject: serialNumber=ceb05353cbc4a38dbab9b10b2b743e4d01b3f38c3f845a169853295a0c81e354, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:17:cd:d4:0a:ab:97:0b:db:8b:e2:ca:70:
fa:a9:87:6b:dc:24:01:c9:e1:d1:36:f8:97:ab:c5:
b8:f3:7b:da:ce:2f:c7:bc:80:9b:fd:45:cd:bb:4a:
a6:45:b1:2e:07:6a:ee:73:43:dd:04:1f:ad:93:42:
ee:eb:d4:e8:98:61:2f:bf:cc:be:49:8f:47:40:e8:
63:26:08:a3:71:bf:71:5b:51:5d:0c:ba:c1:2d:05:
ac:d8:95:0a:af:40:35:44:f9:5b:b0:9f:16:57:f2:
2d:bb:91:e7:81:9c:7f:1b:1e:cb:ff:6d:db:d7:ce:
66:65:3c:97:b1:04:cd:bf:ce:5f:45:41:2a:4b:41:
bc:52:f1:9e:8d:8a:0b:77:11:18:15:7a:29:cf:7e:
a8:5e:82:9c:1d:3f:d3:f5:7f:a1:99:51:af:99:f8:
fa:9e:7d:a8:02:8c:07:a1:79:77:48:57:2d:a2:cf:
b0:21:ad:2f:60:14:05:68:4e:cd:08:4f:8b:39:a2:
8e:2c:cc:73:ea:c0:07:5c:b0:80:35:27:28:d2:a9:
c5:0e:75:d6:f6:e2:30:47:c9:1a:43:d2:33:80:1d:
e7:1a:09:56:63:ec:76:fb:47:f9:a9:33:bb:3b:38:
a6:23:68:33:a1:05:d0:d8:04:dd:5b:7f:d7:d7:63:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:86:15:84:B9:04:9C:48:9F:F1:29:72:36:BC:B8:0D:43:7E:0C:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fa0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
52:e6:ab:0a:b4:89:dc:d8:b7:01:a3:05:c5:b8:94:d5:29:f2:
ad:eb:bf:db:dd:10:38:cd:fe:b4:cc:de:de:85:89:94:0e:8d:
4a:f5:65:20:1e:0a:95:3e:3a:4e:c4:0e:77:56:e7:45:56:51:
38:a7:7b:2c:7c:13:91:8f:42:5e:30:02:85:e4:4b:7b:74:1f:
0c:0e:18:bc:b2:c5:a0:b1:02:74:d0:ff:e9:17:5e:cb:8a:09:
af:23:d5:25:89:4d:da:fb:c9:c9:1e:ed:91:df:d7:01:8a:86:
55:44:dc:8c:1d:62:48:b4:0c:48:82:43:2e:04:94:b1:cb:ba:
b3:84:5e:84:43:69:0f:fa:86:ae:6d:61:10:50:12:29:fb:f3:
95:66:9a:8b:3a:6c:37:b2:5f:1a:ea:b7:85:45:53:71:c6:73:
f5:00:87:fa:b7:31:7a:65:50:f2:ee:50:4a:5e:9f:e9:69:3f:
2d:10:14:b3:1d:8b:83:5e:2c:67:24:43:35:4b:1c:d9:7f:b3:
18:61:3d:6c:83:9a:96:51:d4:6b:cd:99:50:1b:ee:11:27:f9:
92:50:52:18:80:58:4d:26:5c:68:29:7f:d9:cf:3a:f8:96:6c:
b5:e5:5a:ca:8c:ae:f6:d5:d6:f5:7c:ec:07:8a:a7:04:0c:4b:
c1:21:6f:27
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUXfR5qalOY66/scs54UTDy/1sRdUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDI5MDAzMDEyWhcNMjYwNzI4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjZWIwNTM1M2NiYzRhMzhkYmFiOWIxMGIyYjc0M2U0ZDAx
YjNmMzhjM2Y4NDVhMTY5ODUzMjk1YTBjODFlMzU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9KBfN1Aqrlwvbi+LKcPqph2vcJAHJ4dE2+Jerxbjze9rO
L8e8gJv9Rc27SqZFsS4Hau5zQ90EH62TQu7r1OiYYS+/zL5Jj0dA6GMmCKNxv3Fb
UV0MusEtBazYlQqvQDVE+VuwnxZX8i27keeBnH8bHsv/bdvXzmZlPJexBM2/zl9F
QSpLQbxS8Z6Nigt3ERgVeinPfqhegpwdP9P1f6GZUa+Z+PqefagCjAeheXdIVy2i
z7AhrS9gFAVoTs0IT4s5oo4szHPqwAdcsIA1JyjSqcUOddb24jBHyRpD0jOAHeca
CVZj7Hb7R/mpM7s7OKYjaDOhBdDYBN1bf9fXYyIvAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUkYYVhLkEnEif8SlyNry4DUN+DKAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNiNmY5OGYzLWI4MjgtNDA2OS05YjY0LTgxMjJlYTM2NWQ1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+gEDANBgkqhkiG9w0BAQsFAAOCAQEAUuarCrSJ3Ni3AaMFxbiU1Sny
reu/290QOM3+tMze3oWJlA6NSvVlIB4KlT46TsQOd1bnRVZROKd7LHwTkY9CXjAC
heRLe3QfDA4YvLLFoLECdND/6Rdey4oJryPVJYlN2vvJyR7tkd/XAYqGVUTcjB1i
SLQMSIJDLgSUscu6s4RehENpD/qGrm1hEFASKfvzlWaaizpsN7JfGuq3hUVTccZz
9QCH+rcxemVQ8u5QSl6f6Wk/LRAUsx2Lg14sZyRDNUsc2X+zGGE9bIOallHUa82Z
UBvuESf5klBSGIBYTSZcaCl/2c86+JZsteVayoyu9tXW9XzsB4qnBAxLwSFvJw==
-----END CERTIFICATE-----
Generated at Sun May 3 14:47:16 2026 by rpki-client