
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe110a8-96c2-44a4-ac79-c41ae0552193.roa
File: 0fe110a8-96c2-44a4-ac79-c41ae0552193.roa (raw, json)
Hash identifier: SrV5xMxMaUqunJJILLYW6SNBFTylQpCzNTycNWyDlgk=
Subject key identifier: 44:58:66:76:42:14:AD:FD:85:DD:39:44:EC:2E:6B:87:7F:7D:68:E7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6FDD4DD027515444C7833CD81EFC8B2F7401468F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe110a8-96c2-44a4-ac79-c41ae0552193.roa
Signing time: Tue 04 Aug 2026 02:00:07 +0000
ROA not before: Tue 04 Aug 2026 02:00:07 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f28:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:dd:4d:d0:27:51:54:44:c7:83:3c:d8:1e:fc:8b:2f:74:01:46:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 02:00:07 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=55ef675636ad15da48581d011b9bc20475ad038dee8e78f7acab2e8658a9711d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:46:65:e7:41:6c:26:02:7c:f1:7c:3e:ec:
b8:02:f9:7a:d6:f9:c6:a9:ea:5a:c4:fa:5e:a4:ee:
8e:09:d9:e7:89:f1:7c:50:64:59:e6:48:b0:9c:8c:
8b:c9:a2:56:6f:c4:0f:5e:40:b5:c7:45:6a:67:f8:
ea:04:ab:7d:af:ea:c1:4a:05:60:0e:9e:a6:23:c4:
6e:ab:bc:1a:f7:66:ff:73:da:25:e5:a9:e7:eb:89:
5a:be:53:3a:ea:cc:4d:da:aa:a4:18:f4:e3:31:b2:
b9:39:b0:54:12:8c:7b:c9:07:d4:4f:06:92:d3:ce:
0b:e8:71:e7:a6:38:7d:fd:d1:83:8b:b5:ce:82:88:
85:d7:e7:4a:eb:00:43:2a:7b:10:30:54:b2:96:70:
43:16:4d:2b:cf:ae:a2:48:d9:7b:49:91:38:bd:65:
6a:19:f6:25:f4:dd:a0:cb:86:5b:f4:06:4d:92:d6:
70:23:e0:81:97:31:9b:c2:e8:c4:9b:07:1d:12:75:
96:ab:3e:1d:14:52:5d:0f:a5:eb:2e:9a:7b:09:84:
73:0b:f9:81:4a:9a:79:17:c5:af:5b:bb:3b:e9:53:
30:d1:c8:59:61:3c:1f:40:ac:e1:d8:46:66:14:09:
4f:2e:b2:8c:4f:a6:1d:ef:1e:b5:6b:39:0b:dc:12:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:58:66:76:42:14:AD:FD:85:DD:39:44:EC:2E:6B:87:7F:7D:68:E7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0fe110a8-96c2-44a4-ac79-c41ae0552193.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f28:c000::/36
Signature Algorithm: sha256WithRSAEncryption
26:f1:8a:8a:50:94:75:2a:d5:33:0b:eb:4c:d6:22:81:0b:9c:
0f:b9:90:3b:45:6f:48:41:53:db:c3:72:a2:5d:f2:df:ab:83:
e5:40:63:5c:d9:a7:6b:af:7e:3a:6d:e6:50:7b:ac:09:f2:ca:
12:fa:4e:d0:16:05:ae:2a:85:53:ad:1e:cd:86:fa:7e:f2:8b:
ce:d2:45:d5:79:d7:3e:20:af:67:51:d4:79:4a:19:e3:07:62:
50:43:c3:f3:ab:e9:fa:9b:8c:03:dd:48:65:61:d6:3d:1d:85:
ef:a0:f1:37:52:4a:e7:53:d0:4f:57:34:7a:34:07:2b:01:fa:
c2:99:75:fd:86:5a:cf:00:52:50:4d:6c:f4:90:30:f5:c1:fd:
20:31:a0:9e:7d:eb:26:2d:e3:35:a5:c4:df:d9:f7:6a:ab:a5:
5f:95:e5:23:91:b5:f3:eb:00:81:51:df:41:37:8f:e3:98:04:
17:f8:db:11:b0:89:5c:22:23:b6:40:41:4c:57:d9:65:e3:ae:
e1:2d:13:11:c6:47:cd:bc:aa:f1:ac:08:2a:3e:04:42:79:bf:
3d:5b:a0:06:e7:6a:a2:f6:ad:9a:d6:30:8a:c2:12:67:9f:99:
1b:5d:5d:84:88:2c:1f:0f:42:ab:6c:80:fe:d3:3c:e8:01:3b:
72:31:cc:e2
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUb91N0CdRVETHgzzYHvyLL3QBRo8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIwMDA3WhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NWVmNjc1NjM2YWQxNWRhNDg1ODFkMDExYjliYzIwNDc1
YWQwMzhkZWU4ZTc4ZjdhY2FiMmU4NjU4YTk3MTFkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC2hUZl50FsJgJ88Xw+7LgC+XrW+cap6lrE+l6k7o4J2eeJ
8XxQZFnmSLCcjIvJolZvxA9eQLXHRWpn+OoEq32v6sFKBWAOnqYjxG6rvBr3Zv9z
2iXlqefriVq+UzrqzE3aqqQY9OMxsrk5sFQSjHvJB9RPBpLTzgvoceemOH390YOL
tc6CiIXX50rrAEMqexAwVLKWcEMWTSvPrqJI2XtJkTi9ZWoZ9iX03aDLhlv0Bk2S
1nAj4IGXMZvC6MSbBx0SdZarPh0UUl0PpesumnsJhHML+YFKmnkXxa9buzvpUzDR
yFlhPB9ArOHYRmYUCU8usoxPph3vHrVrOQvcEjx7AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQURFhmdkIUrf2F3TlE7C5rh399aOcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBmZTExMGE4LTk2YzItNDRhNC1hYzc5LWM0MWFlMDU1MjE5My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8owDANBgkqhkiG9w0BAQsFAAOCAQEAJvGKilCUdSrVMwvrTNYigQuc
D7mQO0VvSEFT28Nyol3y36uD5UBjXNmna69+Om3mUHusCfLKEvpO0BYFriqFU60e
zYb6fvKLztJF1XnXPiCvZ1HUeUoZ4wdiUEPD86vp+puMA91IZWHWPR2F76DxN1JK
51PQT1c0ejQHKwH6wpl1/YZazwBSUE1s9JAw9cH9IDGgnn3rJi3jNaXE39n3aqul
X5XlI5G18+sAgVHfQTeP45gEF/jbEbCJXCIjtkBBTFfZZeOu4S0TEcZHzbyq8awI
Kj4EQnm/PVugBudqovatmtYwisISZ5+ZG11dhIgsHw9Cq2yA/tM86AE7cjHM4g==
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:59:31 2026 by rpki-client