
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
File: 3b6f98f3-b828-4069-9b64-8122ea365d59.roa (raw, json)
Hash identifier: tuEVAvPm1FPo2/j6W6TpKkjaR9Nvv61I3iwIANCnOJg=
Subject key identifier: B8:B1:B2:52:3B:26:88:E4:A1:AF:19:BA:95:BA:3E:CD:CE:5A:1C:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1C5F8242784D7E4C63A218264721056A5B554B3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
Signing time: Sat 18 Jul 2026 00:31:19 +0000
ROA not before: Sat 18 Jul 2026 00:31:19 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fa0:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5f:82:42:78:4d:7e:4c:63:a2:18:26:47:21:05:6a:5b:55:4b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:31:19 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=3b4c851489a1b679f6d46389f8ee68e7bad587c5f1872f4b9d319e36fed5e192, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f1:b6:c6:2a:b3:70:b2:e2:40:e8:c3:ef:88:
ab:12:46:75:1b:fa:3a:c6:33:fa:82:10:7e:c8:99:
2b:7b:37:63:97:54:d9:4b:17:48:76:47:fb:d2:0f:
c4:53:af:59:31:25:e3:c5:58:e4:1e:43:40:53:62:
3c:fd:88:db:f1:e4:7a:a9:99:22:13:8a:e3:30:d6:
fb:7b:f3:7c:20:c3:25:8c:90:1b:68:e7:c3:a8:7e:
a6:c5:d7:77:e7:aa:11:68:07:d3:fd:1c:8e:eb:4e:
03:a1:3a:38:01:1d:47:6b:ab:45:e0:06:b2:3a:cc:
20:11:f8:64:32:02:37:ac:59:c6:20:c6:e1:38:0e:
38:26:64:d8:1b:9d:4b:8e:9a:5c:26:17:1c:d2:82:
2c:84:c0:b9:70:44:de:7c:e5:9a:8a:94:d3:5a:c6:
c6:8d:50:51:f1:66:83:d4:e3:f7:66:8d:38:0c:5a:
57:38:f2:fb:e8:6a:86:32:99:39:fe:1b:20:de:8e:
1f:c0:3e:da:ec:9c:f1:88:07:7b:67:8d:07:ee:55:
ac:d1:00:a5:ec:11:b3:94:34:ff:dc:88:6f:64:45:
0a:03:28:05:6a:9e:39:b1:00:bf:59:4f:07:d6:5e:
19:c5:14:c7:80:94:84:9e:3f:d7:a5:be:a1:e4:4a:
cd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B1:B2:52:3B:26:88:E4:A1:AF:19:BA:95:BA:3E:CD:CE:5A:1C:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b6f98f3-b828-4069-9b64-8122ea365d59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fa0:1000::/40
Signature Algorithm: sha256WithRSAEncryption
6d:71:bb:be:41:77:ee:32:4b:2c:d6:ab:19:42:c4:56:67:86:
9c:15:c1:9a:bc:72:e3:2f:63:38:bb:55:80:d5:67:45:2e:e2:
26:20:cf:3a:0b:31:4a:e5:2d:65:07:3e:bb:9c:62:44:53:d2:
ac:2d:10:a7:5a:b2:ed:dd:5a:e7:b1:f8:1c:54:8a:0b:01:55:
04:35:cf:dc:77:2e:8b:dd:4c:10:e2:d6:4a:88:4b:7c:ad:dc:
d7:ea:fd:c9:46:38:f5:bd:9b:6d:04:de:af:d4:ad:9f:7a:fa:
d6:60:44:63:dc:cb:09:f0:99:7a:ca:d5:21:73:3a:4b:de:71:
43:b0:11:7a:59:d5:14:6b:00:5a:a8:c2:c1:ea:a6:88:1c:0e:
1e:16:e8:a2:7f:bf:39:63:9a:96:61:82:fa:d1:8d:4a:91:b4:
10:f3:51:5f:6b:67:57:7a:4e:b9:a7:19:7d:8e:ab:b0:9a:36:
62:35:57:aa:2d:a9:34:7f:20:3e:b2:d8:ee:99:3c:32:a0:d9:
f9:89:f2:f2:2f:05:0e:3d:c1:b2:f9:10:4e:7e:82:1c:eb:75:
49:a8:ff:3d:7a:55:97:c8:24:c0:18:9a:5c:12:65:7b:8e:42:
c0:e7:b5:7a:62:33:c3:5d:14:0a:5f:4b:4f:28:71:69:21:f9:
a8:86:5a:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:36:05 2026 by rpki-client