
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d41dbc0-cc88-4546-ae89-38b8cf314a26.roa
File: 1d41dbc0-cc88-4546-ae89-38b8cf314a26.roa (raw, json)
Hash identifier: j73R+p+69k1hfNs2svfOfoKr5KUgoOLJ1vi4kMmjylw=
Subject key identifier: 6D:04:BD:C8:57:1F:26:A2:32:0C:46:5C:B3:FD:5A:67:4D:73:F3:27
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4A7F374E63C82883BF388ABF0987BFED5A3CED2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d41dbc0-cc88-4546-ae89-38b8cf314a26.roa
Signing time: Mon 10 Aug 2026 00:40:45 +0000
ROA not before: Mon 10 Aug 2026 00:40:45 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:840::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:7f:37:4e:63:c8:28:83:bf:38:8a:bf:09:87:bf:ed:5a:3c:ed:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:40:45 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=b75037175a2170b787eb058d00f984e421f38d29f484280b1185ccab77647d03, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:7c:16:c4:6f:43:5d:27:e5:5f:b3:f7:4a:
f5:db:f7:e8:e4:bd:f8:3a:51:88:7e:28:90:54:1e:
68:7c:2c:d3:6a:8e:ab:68:90:4d:40:22:3c:2b:b3:
39:24:30:df:f3:cb:e6:f9:a0:1d:51:4a:e4:fc:96:
81:27:1e:a1:10:cb:32:64:1c:61:e4:0d:c7:37:81:
b3:0a:22:bb:12:c5:e5:c9:15:d9:c2:01:fb:08:a1:
45:35:54:a0:72:62:19:62:ef:9c:40:cb:f5:d4:59:
6b:a3:cc:f2:4a:5b:9e:98:b6:5e:46:26:f0:b4:13:
5f:09:26:60:05:e2:b1:f2:db:ec:4f:72:25:56:7d:
ca:15:60:c5:24:0a:ff:36:7c:bb:93:f1:de:ac:05:
01:de:6b:b2:dd:07:8b:cf:18:9d:4e:71:69:f2:72:
b1:01:df:38:19:f0:8b:cf:22:96:16:88:1a:b4:ca:
fb:44:46:83:b5:72:e0:e2:de:cf:04:89:b9:3a:07:
8d:c2:eb:81:19:41:1b:43:d7:48:7b:b9:a0:a1:3c:
5f:9b:9e:24:31:b5:60:f6:e6:14:f2:da:90:a6:19:
b7:19:d8:30:42:37:dd:76:72:68:b9:93:51:61:e2:
47:0c:53:8f:7e:07:9b:9c:24:2a:79:b1:67:4c:33:
bb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:04:BD:C8:57:1F:26:A2:32:0C:46:5C:B3:FD:5A:67:4D:73:F3:27
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1d41dbc0-cc88-4546-ae89-38b8cf314a26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:840::/48
Signature Algorithm: sha256WithRSAEncryption
82:56:2d:e6:e7:db:be:35:45:90:9d:44:c3:b7:7d:16:8b:75:
54:b4:62:c7:b8:d1:f7:17:00:28:e4:e8:68:c8:4b:78:c7:17:
a7:83:9b:98:52:8e:9f:ea:32:62:4c:99:cf:8d:d9:6e:57:ef:
de:24:03:a0:11:50:43:52:f6:62:0b:b8:6b:a6:d0:e0:48:dd:
68:0d:6b:3e:5d:60:3a:dd:60:8a:d0:b6:b2:1a:b3:3d:3e:47:
a1:48:d0:85:db:5a:8e:40:b2:6a:2c:d4:8b:be:48:ac:ac:d0:
e6:86:50:f7:5c:19:79:be:1e:07:d6:fa:3e:b3:62:78:06:ea:
21:b0:f8:14:08:78:0a:20:2c:ac:20:53:b3:f5:ab:fa:dd:b6:
21:4e:6a:1a:26:40:3c:7a:b1:de:c7:71:16:60:b4:75:6d:21:
a3:81:22:d8:93:2e:85:b1:e4:92:80:86:5b:29:cd:10:fd:b2:
38:6e:f7:ae:bc:c7:90:ba:5d:db:f5:da:d9:02:7f:75:e6:c4:
4b:8f:74:34:de:f8:44:b4:9e:35:4e:87:f2:19:fb:5c:66:42:
d4:87:07:b3:2f:6b:3d:a4:b5:31:be:97:4d:08:21:ff:86:e1:
d8:ba:34:38:fc:a0:87:7c:9b:b5:2a:9d:65:4b:03:af:40:78:
41:5d:4f:be
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUSn83TmPIKIO/OIq/CYe/7Vo87S4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDA0MDQ1WhcNMjYxMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNzUwMzcxNzVhMjE3MGI3ODdlYjA1OGQwMGY5ODRlNDIx
ZjM4ZDI5ZjQ4NDI4MGIxMTg1Y2NhYjc3NjQ3ZDAzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuiXwWxG9DXSflX7P3SvXb9+jkvfg6UYh+KJBUHmh8LNNq
jqtokE1AIjwrszkkMN/zy+b5oB1RSuT8loEnHqEQyzJkHGHkDcc3gbMKIrsSxeXJ
FdnCAfsIoUU1VKByYhli75xAy/XUWWujzPJKW56Ytl5GJvC0E18JJmAF4rHy2+xP
ciVWfcoVYMUkCv82fLuT8d6sBQHea7LdB4vPGJ1OcWnycrEB3zgZ8IvPIpYWiBq0
yvtERoO1cuDi3s8Eibk6B43C64EZQRtD10h7uaChPF+bniQxtWD25hTy2pCmGbcZ
2DBCN912cmi5k1Fh4kcMU49+B5ucJCp5sWdMM7vtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUbQS9yFcfJqIyDEZcs/1aZ01z8ycwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFkNDFkYmMwLWNjODgtNDU0Ni1hZTg5LTM4YjhjZjMxNGEyNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/yCEAwDQYJKoZIhvcNAQELBQADggEBAIJWLebn2741RZCdRMO3fRaL
dVS0Yse40fcXACjk6GjIS3jHF6eDm5hSjp/qMmJMmc+N2W5X794kA6ARUENS9mIL
uGum0OBI3WgNaz5dYDrdYIrQtrIasz0+R6FI0IXbWo5Asmos1Iu+SKys0OaGUPdc
GXm+HgfW+j6zYngG6iGw+BQIeAogLKwgU7P1q/rdtiFOahomQDx6sd7HcRZgtHVt
IaOBItiTLoWx5JKAhlspzRD9sjhu9668x5C6Xdv12tkCf3XmxEuPdDTe+ES0njVO
h/IZ+1xmQtSHB7Mvaz2ktTG+l00IIf+G4di6NDj8oId8m7UqnWVLA69AeEFdT74=
-----END CERTIFICATE-----
Generated at Thu Sep 17 16:17:34 2026 by rpki-client