
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa
File: b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa (raw, json)
Hash identifier: +KtwigWlMoye74IeVKtsW/upY9zc1fOETcQVG6Xm2qk=
Subject key identifier: 5C:32:86:D5:85:F6:27:AB:82:65:19:C1:DA:C2:CA:7A:0E:BB:2A:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0D402D60F53B12097A7C4892D86C8A75F311266C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa
Signing time: Thu 22 Oct 2026 02:07:34 +0000
ROA not before: Thu 22 Oct 2026 02:07:34 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fff:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:40:2d:60:f5:3b:12:09:7a:7c:48:92:d8:6c:8a:75:f3:11:26:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 02:07:34 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=218c3dc736098b5ca7716ab6edcf96e8bd42fd72e27e8528cb62e6b264276c6d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:a1:5b:c7:7f:32:60:1c:0e:a1:0e:1f:84:
31:af:f3:bb:ef:e7:18:82:41:b7:41:7b:2a:28:29:
b8:95:7c:dd:f0:b1:2c:84:b1:27:26:b5:1d:2e:1a:
cf:cb:28:93:e8:6d:8d:92:53:fb:4d:0f:c8:32:00:
fc:da:2c:b5:5e:67:34:30:52:7e:a0:20:8a:1f:ae:
67:87:fc:68:a8:6f:c6:9d:1c:42:d8:94:b7:8b:18:
40:1c:69:60:e6:ca:ac:19:c2:eb:83:80:50:c8:a8:
1d:44:09:e7:3c:55:72:74:7d:9c:02:bd:15:9d:38:
4e:a6:8a:7d:7c:26:dc:cf:fc:24:15:2f:f5:5a:44:
c0:07:12:c2:13:df:9d:f3:61:7e:c0:ea:bf:ab:ab:
34:61:a2:43:21:e6:ae:fa:09:b2:65:e0:1c:d2:11:
26:f8:70:4e:06:27:3e:19:0a:41:dd:47:eb:6a:63:
22:fa:01:ae:fc:41:1b:74:38:2d:ae:6f:4f:df:3e:
0f:39:0f:4a:a1:95:cc:51:42:82:10:44:cd:2f:df:
64:ff:63:4d:85:0d:1f:9b:5d:a4:77:09:ba:9e:1a:
59:1e:11:68:a6:0f:4f:5f:4c:d5:0c:1a:30:43:51:
58:65:fd:7c:08:25:fc:8c:da:59:25:d1:1d:7e:c4:
97:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:32:86:D5:85:F6:27:AB:82:65:19:C1:DA:C2:CA:7A:0E:BB:2A:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b24a4a34-e3aa-4279-ac4f-5a196bd431bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:35:38:d9:37:9e:62:54:f6:fd:a0:19:8f:58:bd:17:e5:02:
67:46:98:63:9a:cb:91:34:24:58:1a:b2:5b:ad:de:61:9f:ae:
39:ab:2a:09:84:68:57:b1:37:f4:97:21:07:4b:ab:39:6f:bd:
23:92:c6:2e:f7:53:37:69:da:8e:2b:c1:2c:23:48:1c:b6:1d:
52:7f:bc:45:cb:a3:d6:42:78:15:89:32:28:fa:c1:e5:e1:46:
9c:f3:43:3e:7c:a8:8a:35:37:ec:9a:72:55:bb:a5:96:00:d7:
09:4b:65:68:13:a1:11:22:75:9a:e3:ee:4c:23:dd:01:0e:a4:
5b:53:8f:2c:31:60:2d:bd:0e:2d:57:4b:8a:06:fe:35:4f:af:
e5:1d:4a:ed:56:5e:07:27:a2:4d:97:ae:49:77:d7:c4:0a:26:
37:c7:d8:9f:3f:9d:78:90:81:a7:96:30:be:43:8b:e8:8b:37:
b1:c1:a7:8d:1b:df:77:6b:1a:04:50:bc:cf:5e:6a:b6:b5:b0:
08:21:be:0d:16:e0:e6:0a:b5:04:65:51:d9:70:bd:c4:8f:05:
a1:a0:33:93:65:59:a2:9b:67:0d:e8:19:c5:b8:c8:cf:0c:7e:
fc:c3:d3:90:ff:4c:ca:78:b7:e4:fb:3e:9d:d8:cf:27:17:5e:
aa:e9:82:67
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDUAtYPU7Egl6fEiS2GyKdfMRJmwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIwNzM0WhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyMThjM2RjNzM2MDk4YjVjYTc3MTZhYjZlZGNmOTZlOGJk
NDJmZDcyZTI3ZTg1MjhjYjYyZTZiMjY0Mjc2YzZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwIaFbx38yYBwOoQ4fhDGv87vv5xiCQbdBeyooKbiVfN3w
sSyEsScmtR0uGs/LKJPobY2SU/tND8gyAPzaLLVeZzQwUn6gIIofrmeH/Giob8ad
HELYlLeLGEAcaWDmyqwZwuuDgFDIqB1ECec8VXJ0fZwCvRWdOE6min18JtzP/CQV
L/VaRMAHEsIT353zYX7A6r+rqzRhokMh5q76CbJl4BzSESb4cE4GJz4ZCkHdR+tq
YyL6Aa78QRt0OC2ub0/fPg85D0qhlcxRQoIQRM0v32T/Y02FDR+bXaR3CbqeGlke
EWimD09fTNUMGjBDUVhl/XwIJfyM2lkl0R1+xJcLAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXDKG1YX2J6uCZRnB2sLKeg67KtkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IyNGE0YTM0LWUzYWEtNDI3OS1hYzRmLTVhMTk2YmQ0MzFiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//gMAwDQYJKoZIhvcNAQELBQADggEBAFg1ONk3nmJU9v2gGY9YvRfl
AmdGmGOay5E0JFgaslut3mGfrjmrKgmEaFexN/SXIQdLqzlvvSOSxi73Uzdp2o4r
wSwjSBy2HVJ/vEXLo9ZCeBWJMij6weXhRpzzQz58qIo1N+yaclW7pZYA1wlLZWgT
oREidZrj7kwj3QEOpFtTjywxYC29Di1XS4oG/jVPr+UdSu1WXgcnok2Xrkl318QK
JjfH2J8/nXiQgaeWML5Di+iLN7HBp40b33drGgRQvM9eara1sAghvg0W4OYKtQRl
UdlwvcSPBaGgM5NlWaKbZw3oGcW4yM8MfvzD05D/TMp4t+T7Pp3YzycXXqrpgmc=
-----END CERTIFICATE-----
Generated at Wed Nov 4 02:44:46 2026 by rpki-client