
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
File: d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa (raw, json)
Hash identifier: 7GyfOOjPMZhupCfkSqcAJX6G+BFlkDz7OXYzZ+2LzY8=
Subject key identifier: 19:B5:07:51:4F:1D:D8:4A:80:17:74:6E:60:CC:F9:76:8E:AB:72:56
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F3B7137F0A7D72554F6BED8CFB1D0CBF421D942
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
Signing time: Fri 23 Oct 2026 00:40:36 +0000
ROA not before: Fri 23 Oct 2026 00:40:36 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f1c:c800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:3b:71:37:f0:a7:d7:25:54:f6:be:d8:cf:b1:d0:cb:f4:21:d9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 00:40:36 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=3621bc903a4b814490a0fa779c643b3aa3ca3481f572427ea4e026e5a639a9cb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:99:47:3e:2c:f4:a6:64:95:cc:5b:5e:ad:
bb:2e:91:c6:f3:10:38:09:b0:01:5d:82:c4:09:fa:
b2:83:eb:67:62:bd:06:e6:04:fa:eb:93:25:0c:10:
4f:e3:78:df:70:d0:85:15:ce:2d:78:5a:63:88:e7:
9e:0e:7d:bf:ce:42:13:09:69:ed:6c:2d:1b:99:8f:
97:cf:0f:80:33:30:01:81:a7:ca:b6:0e:b0:a4:f2:
89:a7:a4:db:44:99:90:c7:5e:fb:91:18:fe:d7:e3:
26:84:09:24:0f:d9:a9:5f:d4:1f:e0:6b:b2:1d:42:
1d:22:c5:82:4a:ca:fa:c0:b2:d8:50:76:0b:17:bd:
c7:e9:3f:15:4c:6e:3e:78:3b:aa:21:cc:15:09:88:
8f:ff:d2:9b:de:6b:b3:bd:31:3b:ca:3f:f0:23:eb:
7f:f2:7e:04:8c:66:d1:89:7f:83:aa:93:fc:b3:0a:
4b:c7:94:27:b6:1a:5a:9f:00:96:90:d0:ac:e9:af:
d9:c9:7c:4c:6d:57:45:77:5d:f1:05:ec:c1:6d:eb:
05:f7:f0:09:04:1a:e9:49:c0:90:65:90:9a:fb:1a:
d5:ce:41:56:23:c0:e5:69:56:eb:d1:6c:68:b0:4e:
3c:9a:ef:7a:d0:0e:1d:ab:b3:f2:d0:84:e5:df:6b:
6d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B5:07:51:4F:1D:D8:4A:80:17:74:6E:60:CC:F9:76:8E:AB:72:56
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d36c105f-a6e4-4f3a-abcb-daaff54b5e73.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1c:c800::/37
Signature Algorithm: sha256WithRSAEncryption
d2:13:a3:aa:c1:f6:b2:64:f8:9b:2e:d5:c6:44:b5:e4:a8:08:
a2:ce:80:3f:7c:ff:12:11:a7:90:cd:a5:dd:df:36:f7:f8:aa:
15:99:6b:ff:b9:71:de:b5:c4:60:f4:7e:b3:5e:29:ab:cd:e2:
43:10:20:7e:4c:9b:7b:72:30:8c:ea:db:e0:71:1a:11:ec:74:
81:39:5b:c6:f8:63:e4:95:a4:a1:1d:00:b9:c2:41:14:8f:d9:
4a:b1:58:73:e1:90:55:3d:0d:5a:a3:2f:cf:0f:88:1b:18:6c:
ba:2c:c2:71:e2:ca:4e:c7:1c:69:7c:5b:ef:0f:c2:90:7c:db:
94:c1:7b:de:6e:2b:d1:0c:37:d8:55:3c:50:fc:07:22:6c:07:
3e:52:99:85:8c:06:6a:1d:93:3b:2e:39:2e:74:e0:14:82:0d:
aa:82:a1:2f:a5:2f:7b:b0:55:dc:2d:c6:a0:66:40:be:86:94:
f6:fb:a4:3b:ba:3d:ee:4b:b7:32:28:15:32:f9:c4:57:71:08:
3b:73:9d:72:9c:8a:4b:f3:00:f7:2f:22:7e:5d:8b:90:20:cb:
fe:4d:01:4a:06:d8:1f:84:3c:b4:9f:be:d0:cc:ca:ef:59:a8:
2b:df:bb:64:7f:98:6b:43:be:06:d8:f1:0c:7c:0d:f1:94:c7:
97:f0:f3:02
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 18:04:03 2026 by rpki-client