
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01611701-3805-4975-a14c-375cd36a101b.roa
File: 01611701-3805-4975-a14c-375cd36a101b.roa (raw, json)
Hash identifier: rgik/dLZHXKSxPA4fCz3P67+SRR4+nwCfQk9K8Fm6JQ=
Subject key identifier: CE:3E:F1:57:AB:80:02:D0:2A:35:68:08:00:78:CF:C4:01:01:01:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 132980A2E5129D325187A279E375F9D970FB3E96
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01611701-3805-4975-a14c-375cd36a101b.roa
Signing time: Thu 10 Sep 2026 08:22:53 +0000
ROA not before: Thu 10 Sep 2026 08:22:53 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 63.249.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:29:80:a2:e5:12:9d:32:51:87:a2:79:e3:75:f9:d9:70:fb:3e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 10 08:22:53 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=662269b31749a5a9018eb4d106dd6752c3a7ed4632fdfcd61fe4006efc7b8f2e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a5:c5:85:cb:e4:57:aa:ea:84:86:f2:2e:39:
76:15:ad:79:61:19:4e:e2:f7:c1:bc:f0:60:33:bc:
e2:5c:93:62:c5:ac:d5:e6:1c:72:ce:3a:e4:f4:b8:
e2:80:e3:a9:e5:ea:dc:b4:a7:1b:f4:5d:ce:b2:13:
43:0b:99:c7:59:e4:6b:4f:f3:c7:8d:ed:1d:d2:b3:
3a:35:13:48:47:a4:f7:41:9b:15:2c:20:62:80:b1:
e0:d2:e2:af:4d:f2:aa:8c:af:30:d3:d9:fa:38:d7:
b3:92:8d:02:01:1d:55:b6:eb:00:3b:95:fa:2a:9d:
e1:57:48:21:00:17:b4:44:8a:2c:d2:5c:11:41:9c:
e2:e9:98:a4:30:7a:5d:62:2f:4d:80:41:39:26:b5:
43:86:78:0c:2a:6a:03:90:d9:59:26:b9:24:1d:0c:
a7:85:ab:d9:7f:8c:f5:6b:a0:fe:e8:4c:da:4e:d3:
51:fc:cf:35:a1:48:5e:f7:de:81:ad:53:82:15:18:
9d:35:01:fa:61:12:01:9a:c9:b4:f3:e8:95:d7:70:
48:81:29:04:d0:c7:93:e9:b8:ad:17:a0:50:38:63:
3e:14:d6:5b:64:c8:bc:96:3e:20:de:30:db:9e:65:
01:2a:61:10:e2:d2:57:e5:33:37:07:67:cf:56:50:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:3E:F1:57:AB:80:02:D0:2A:35:68:08:00:78:CF:C4:01:01:01:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/01611701-3805-4975-a14c-375cd36a101b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
63.249.221.0/24
Signature Algorithm: sha256WithRSAEncryption
04:97:49:59:87:1d:80:f2:ef:7f:39:67:41:e7:27:de:e8:99:
c1:03:ee:13:3d:a5:9d:f6:7b:dd:cd:87:36:2a:4d:be:df:7e:
31:63:b9:5f:40:2b:79:e5:d6:8e:8a:2e:65:2b:f0:37:7c:09:
c6:90:2c:0e:54:88:0f:ec:7f:ec:bd:9f:f9:f0:fe:e2:18:14:
55:5e:f4:97:d5:1b:13:cf:f1:e0:6b:12:f1:a2:91:84:d0:03:
2a:5d:e0:3c:b3:f1:c8:3e:18:70:7b:78:77:27:7b:b8:01:78:
08:61:51:73:0e:cb:55:bc:80:ba:de:30:5b:3d:67:68:8c:b7:
e4:f1:51:59:12:8e:01:7d:7b:59:66:00:30:60:76:57:9d:2d:
f9:2d:ee:5c:53:ae:c1:51:3e:bf:1c:d6:93:d5:3e:94:0a:74:
6d:99:9e:7d:ef:2d:3f:13:69:56:4f:ac:7d:22:0f:10:30:d9:
31:80:f5:b4:21:35:db:6a:4b:a6:42:44:42:2b:c8:e2:b7:0f:
60:77:9d:7b:cc:1c:9f:e5:98:a9:07:f9:76:f9:26:a6:1f:0a:
0f:3e:92:fa:0d:bf:88:db:4f:cc:76:ac:b0:fd:c3:29:ff:6d:
51:e7:10:7b:84:49:b3:72:c5:24:0f:32:32:09:cc:47:57:02:
9c:03:01:15
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEymAouUSnTJRh6J543X52XD7PpYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTEwMDgyMjUzWhcNMjYxMjA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2NjIyNjliMzE3NDlhNWE5MDE4ZWI0ZDEwNmRkNjc1MmMz
YTdlZDQ2MzJmZGZjZDYxZmU0MDA2ZWZjN2I4ZjJlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqpcWFy+RXquqEhvIuOXYVrXlhGU7i98G88GAzvOJck2LF
rNXmHHLOOuT0uOKA46nl6ty0pxv0Xc6yE0MLmcdZ5GtP88eN7R3Sszo1E0hHpPdB
mxUsIGKAseDS4q9N8qqMrzDT2fo417OSjQIBHVW26wA7lfoqneFXSCEAF7REiizS
XBFBnOLpmKQwel1iL02AQTkmtUOGeAwqagOQ2VkmuSQdDKeFq9l/jPVroP7oTNpO
01H8zzWhSF733oGtU4IVGJ01AfphEgGaybTz6JXXcEiBKQTQx5PpuK0XoFA4Yz4U
1ltkyLyWPiDeMNueZQEqYRDi0lflMzcHZ89WUNFnAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzj7xV6uAAtAqNWgIAHjPxAEBAVcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAxNjExNzAxLTM4MDUtNDk3NS1hMTRjLTM3NWNkMzZhMTAxYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAA/+d0wDQYJKoZIhvcNAQELBQADggEBAASXSVmHHYDy7385Z0HnJ97omcED
7hM9pZ32e93NhzYqTb7ffjFjuV9AK3nl1o6KLmUr8Dd8CcaQLA5UiA/sf+y9n/nw
/uIYFFVe9JfVGxPP8eBrEvGikYTQAypd4Dyz8cg+GHB7eHcne7gBeAhhUXMOy1W8
gLreMFs9Z2iMt+TxUVkSjgF9e1lmADBgdledLfkt7lxTrsFRPr8c1pPVPpQKdG2Z
nn3vLT8TaVZPrH0iDxAw2TGA9bQhNdtqS6ZCREIryOK3D2B3nXvMHJ/lmKkH+Xb5
JqYfCg8+kvoNv4jbT8x2rLD9wyn/bVHnEHuESbNyxSQPMjIJzEdXApwDARU=
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:09:50 2026 by rpki-client