
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3384286b-6a14-4af4-b815-9515353620f5.roa
File: 3384286b-6a14-4af4-b815-9515353620f5.roa (raw, json)
Hash identifier: jBJTEwwa/TXWRYh59CxEZv2kzoal+4B+UbKYgLtqNrA=
Subject key identifier: 11:66:7A:AE:71:70:4E:3D:87:39:E1:05:A8:95:30:E3:CD:F4:E8:83
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4BAAD902B734CABAF6E3FD84D400245E594D6450
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3384286b-6a14-4af4-b815-9515353620f5.roa
Signing time: Wed 19 Aug 2026 00:20:12 +0000
ROA not before: Wed 19 Aug 2026 00:20:12 +0000
ROA not after: Tue 17 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe9:50c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:aa:d9:02:b7:34:ca:ba:f6:e3:fd:84:d4:00:24:5e:59:4d:64:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 19 00:20:12 2026 GMT
Not After : Nov 17 23:59:59 2026 GMT
Subject: serialNumber=52fbbbf4ac80a23679dbf6dfce345a02e2247812d7dd86d7bd72be5334b3474e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dc:d5:7d:77:4c:d1:c2:13:dc:67:c3:58:54:
18:42:08:a1:19:82:68:89:dd:74:10:29:a5:b6:14:
c5:b0:70:09:51:1d:cc:bc:09:7c:dd:74:0e:ec:37:
b7:d3:ae:f9:45:b8:69:51:84:70:0e:68:0e:ea:48:
af:e2:c1:3e:86:fe:62:c6:15:58:f7:4e:d4:1e:7c:
c4:42:88:ba:9c:eb:51:b7:6a:12:94:9b:01:f3:71:
18:56:d0:0e:07:e0:26:ca:db:a9:1d:07:03:62:ab:
5b:6f:ae:c9:f5:9a:7d:37:76:22:ad:2b:37:e9:02:
de:01:b8:55:ce:4c:e7:94:3a:6a:74:b3:bd:b5:18:
f9:f0:d5:1f:ef:6d:c0:79:61:65:5a:b8:91:8e:75:
16:f8:b9:a6:7b:bd:75:44:2f:fe:ae:b8:00:8d:4f:
37:8e:10:64:7f:0d:8e:a9:c6:d2:d8:d0:24:6e:ff:
c3:c9:00:61:0f:be:9b:b5:ee:df:d4:fd:0b:2e:d1:
8e:7e:ff:0d:a9:a6:0d:06:1e:02:3e:7f:47:84:88:
0a:af:58:9d:b0:24:8d:cc:86:c7:1e:0d:71:2f:23:
ae:d6:14:db:e0:a6:aa:cc:31:e0:c2:c5:03:71:22:
ec:fc:15:cb:53:bb:d5:f2:1c:c5:fa:74:cc:20:c5:
ae:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:7A:AE:71:70:4E:3D:87:39:E1:05:A8:95:30:E3:CD:F4:E8:83
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3384286b-6a14-4af4-b815-9515353620f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe9:50c0::/48
Signature Algorithm: sha256WithRSAEncryption
5c:50:a3:b0:74:95:c7:b2:61:9c:81:9b:84:38:a3:91:09:7c:
20:30:a2:2c:08:ee:11:f4:20:4f:64:4d:39:74:fe:de:e0:a5:
09:e4:7e:d8:35:dc:d4:43:6f:d3:a3:83:4f:9c:55:bc:31:b8:
42:33:d6:1a:94:97:e8:fc:ed:17:a6:50:8c:07:86:55:0e:53:
a6:f2:ad:05:aa:7a:d4:61:0c:ca:ab:d3:f8:fc:93:d9:94:35:
cc:af:14:74:6a:41:53:60:61:0f:2b:98:5c:f8:2e:09:b1:38:
f2:cd:a8:f6:4b:0b:f1:28:91:07:1e:66:43:4a:e6:34:8b:3b:
91:5f:ff:c8:56:79:94:f9:60:b0:ff:7f:d7:58:58:e6:e5:0f:
85:11:81:3c:63:7b:84:7d:ce:c4:dd:f3:c1:57:18:ac:de:c0:
3f:ea:ef:71:53:01:e2:0c:49:4a:6c:a7:ab:25:4e:31:2e:35:
57:5e:ab:13:9a:88:95:25:63:3e:e6:5d:c4:8c:56:e0:4b:db:
97:03:02:8e:de:cb:03:8a:f7:f3:c7:bf:f1:30:5e:6a:69:2b:
6f:a6:5d:54:3a:9e:9c:39:42:d6:e4:18:e6:5c:25:5f:c1:c6:
6a:ed:b4:a4:20:15:e2:46:4e:eb:3e:ff:d2:0b:06:16:bc:58:
80:fa:f5:81
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUS6rZArc0yrr24/2E1AAkXllNZFAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODE5MDAyMDEyWhcNMjYxMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MmZiYmJmNGFjODBhMjM2NzlkYmY2ZGZjZTM0NWEwMmUy
MjQ3ODEyZDdkZDg2ZDdiZDcyYmU1MzM0YjM0NzRlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCo3NV9d0zRwhPcZ8NYVBhCCKEZgmiJ3XQQKaW2FMWwcAlR
Hcy8CXzddA7sN7fTrvlFuGlRhHAOaA7qSK/iwT6G/mLGFVj3TtQefMRCiLqc61G3
ahKUmwHzcRhW0A4H4CbK26kdBwNiq1tvrsn1mn03diKtKzfpAt4BuFXOTOeUOmp0
s721GPnw1R/vbcB5YWVauJGOdRb4uaZ7vXVEL/6uuACNTzeOEGR/DY6pxtLY0CRu
/8PJAGEPvpu17t/U/Qsu0Y5+/w2ppg0GHgI+f0eEiAqvWJ2wJI3MhsceDXEvI67W
FNvgpqrMMeDCxQNxIuz8FctTu9XyHMX6dMwgxa6tAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUEWZ6rnFwTj2HOeEFqJUw48306IMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzMzODQyODZiLTZhMTQtNGFmNC1iODE1LTk1MTUzNTM2MjBmNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/pUMAwDQYJKoZIhvcNAQELBQADggEBAFxQo7B0lceyYZyBm4Q4o5EJ
fCAwoiwI7hH0IE9kTTl0/t7gpQnkftg13NRDb9Ojg0+cVbwxuEIz1hqUl+j87Rem
UIwHhlUOU6byrQWqetRhDMqr0/j8k9mUNcyvFHRqQVNgYQ8rmFz4LgmxOPLNqPZL
C/EokQceZkNK5jSLO5Ff/8hWeZT5YLD/f9dYWOblD4URgTxje4R9zsTd88FXGKze
wD/q73FTAeIMSUpsp6slTjEuNVdeqxOaiJUlYz7mXcSMVuBL25cDAo7eywOK9/PH
v/EwXmppK2+mXVQ6npw5QtbkGOZcJV/BxmrttKQgFeJGTus+/9ILBha8WID69YE=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:25:33 2026 by rpki-client