
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa
File: 836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa (raw, json)
Hash identifier: 0fVvLHkQmaoEMTSIN+lG9ADHl2TnsTUKflN2UEvZZek=
Subject key identifier: BD:BC:D4:4A:AA:3C:B4:89:4E:0E:72:A0:49:59:A8:C8:43:E4:99:43
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3736CE0C0E5A98D977721D8FC9EA7E03B73293A4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa
Signing time: Wed 05 Aug 2026 00:01:09 +0000
ROA not before: Wed 05 Aug 2026 00:01:09 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 56.246.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:36:ce:0c:0e:5a:98:d9:77:72:1d:8f:c9:ea:7e:03:b7:32:93:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:01:09 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=edb8f06b3b7184e96ff936794bbf277de38e400f6666e0a5b9ebe7f2fec39da6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:07:e5:46:75:ff:e4:65:da:c4:85:db:dd:01:
92:d7:3a:8c:ae:d4:f7:77:0c:d1:09:95:5a:cd:91:
10:00:5d:36:a0:0c:3a:7f:1b:a6:0a:5f:f4:da:2d:
bd:f3:38:01:ba:90:3f:d3:79:2a:d5:d7:a7:37:03:
c5:7f:08:e7:e1:ad:09:65:fc:4b:d3:a7:4b:9b:61:
99:68:f2:c1:98:5f:8f:dd:19:af:7d:94:7e:60:9c:
a5:0f:21:29:e8:65:5e:93:1c:01:00:af:63:79:68:
ce:e6:b8:69:d2:14:81:c1:15:8a:70:33:0a:b5:fb:
61:c6:85:35:ba:dd:0f:a9:8f:63:5a:3b:13:cd:8c:
07:d2:21:65:2e:10:2b:66:8d:bc:80:d6:b1:2f:75:
9d:e0:11:ee:d9:49:c8:0d:17:3c:fd:5d:75:70:a8:
a1:92:86:12:6c:e8:ef:9e:a9:ee:00:b2:c4:40:3d:
c3:87:f2:66:4a:08:d4:01:36:63:08:fd:94:3e:e7:
bd:06:90:a4:d2:6b:7a:de:93:4e:0b:82:38:fb:e3:
03:a5:50:38:0b:04:e1:a1:1e:d6:67:89:dc:f7:da:
f6:de:00:8f:7c:1b:b8:da:50:0f:26:13:e1:33:c2:
86:05:a7:70:14:c4:ae:bb:20:f1:38:92:a2:99:08:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BC:D4:4A:AA:3C:B4:89:4E:0E:72:A0:49:59:A8:C8:43:E4:99:43
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/836eb7c3-aec4-4fe5-a71d-c1f9cb9d9410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.246.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:e1:b0:f3:9b:3b:ee:c5:7c:78:82:5b:46:df:de:b0:61:3f:
d6:66:e3:ec:42:7d:fe:4a:49:a7:8d:5e:81:79:63:93:6b:8f:
ff:23:75:3f:c6:55:c5:b0:e6:20:0a:2b:e5:46:25:32:cc:ca:
26:b6:25:60:71:85:dc:1c:ca:33:7b:bc:98:f4:f4:83:6b:53:
7c:b0:72:ab:65:55:87:f0:d6:0f:11:81:e3:c8:e4:4b:97:e4:
02:00:5b:78:be:12:90:d1:b9:19:61:ea:4b:b5:7b:a4:8d:4f:
ae:bb:8f:6c:ae:45:db:2b:3d:7a:e5:aa:48:07:1b:a0:65:54:
bd:26:88:cf:e6:ca:14:79:33:a8:40:87:04:ff:c6:a2:80:f4:
bc:38:b8:f8:1c:06:3c:34:1b:ca:cc:90:a5:f5:47:07:34:8d:
12:25:80:0e:24:c5:2a:90:2c:82:9c:37:9e:86:53:40:e5:8e:
bc:29:8f:44:75:20:11:ab:60:e7:12:c5:e1:ba:b1:cd:dc:e1:
e1:55:dd:17:3e:d2:ff:55:10:2c:46:9c:9f:7f:c5:25:26:84:
c7:8b:55:39:cd:d7:66:67:bd:c1:90:ea:ad:a3:36:c1:91:00:
43:3b:50:e6:13:20:cf:28:b7:2c:c1:79:fd:8d:87:03:4c:66:
f9:7f:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:34:33 2026 by rpki-client