
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/407d78d4-6a27-4bcd-836a-c2e47ed66ec7.roa
File: 407d78d4-6a27-4bcd-836a-c2e47ed66ec7.roa (raw, json)
Hash identifier: YPSoi+tXVQ1heBTiDuO7uZMVouVMGW8LxZMIFuL/09A=
Subject key identifier: 77:14:C9:E6:FD:AC:70:A1:1F:B6:CC:26:84:70:B7:01:34:0C:7A:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1B5B91D35F5A469891B80C6F2CF0DC7BAFA5319C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/407d78d4-6a27-4bcd-836a-c2e47ed66ec7.roa
Signing time: Thu 12 Mar 2026 16:08:35 +0000
ROA not before: Thu 12 Mar 2026 16:08:35 +0000
ROA not after: Wed 10 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe9:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:5b:91:d3:5f:5a:46:98:91:b8:0c:6f:2c:f0:dc:7b:af:a5:31:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 12 16:08:35 2026 GMT
Not After : Jun 10 23:59:59 2026 GMT
Subject: serialNumber=b340b429465d2cff4bbfb95ea4dc349df3c9c74d653fd39b0436d9d357813353, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a2:10:0c:3b:9d:59:ad:03:c0:b1:37:7c:f8:
b0:c3:7c:fa:cf:57:35:30:d9:84:08:dc:08:e3:10:
da:50:b3:35:b9:03:79:99:3f:17:d3:b0:52:5c:59:
77:59:0f:04:85:3f:4d:15:91:7d:06:ff:6f:24:cb:
ec:c9:c8:7b:7d:71:34:c9:a0:05:e0:a7:c7:9d:c3:
39:d3:6d:26:fc:c7:d4:bf:45:75:05:d7:cc:ac:26:
6c:4e:2b:76:73:4d:55:66:0c:a4:b0:83:7a:bc:0f:
b3:bb:9a:f7:5c:5c:69:12:40:4d:d0:50:b7:7c:0c:
84:a6:7c:de:7b:e3:10:be:15:39:50:72:96:18:2b:
f0:d0:2f:75:ef:63:d9:c5:c6:e6:cc:31:a2:b3:b0:
f2:b9:0e:82:5b:5d:08:53:40:54:ef:3c:1e:1b:0f:
77:5f:27:05:e3:f2:f4:28:50:3a:3b:0e:c8:5e:22:
3c:82:cf:f5:f2:6a:6c:03:70:c3:49:3f:94:71:88:
52:97:ce:d7:fa:5d:7a:4f:0b:9a:52:7d:c8:5b:14:
74:4b:a7:25:a8:c2:b8:3c:b9:be:b5:ec:fb:bd:03:
ac:d7:ae:32:ee:cb:d0:d2:36:1b:68:31:11:ba:24:
b5:2d:2f:25:72:09:e1:dd:7a:70:44:a7:a0:f2:ad:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:14:C9:E6:FD:AC:70:A1:1F:B6:CC:26:84:70:B7:01:34:0C:7A:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/407d78d4-6a27-4bcd-836a-c2e47ed66ec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe9:34c0::/48
Signature Algorithm: sha256WithRSAEncryption
79:30:50:38:2b:e9:3f:e6:2a:45:48:47:4f:2f:ec:83:a1:5c:
32:23:aa:75:07:bd:ea:b5:65:0c:c9:b2:82:c7:a7:91:5e:3d:
66:c4:56:8a:e1:ba:50:eb:c9:09:26:55:2b:45:f7:ae:25:f0:
08:5c:d5:28:00:ee:5b:63:15:8a:4b:e1:aa:ab:de:9f:85:46:
55:2e:74:b1:90:13:5e:d3:b5:fc:4d:0a:62:cf:d1:18:52:f1:
df:4f:4a:ea:ab:2c:c5:c0:ff:8d:1c:72:55:85:61:2f:6c:0e:
2d:f1:5d:8d:53:84:b5:35:33:b4:25:b0:40:c5:c4:b6:c0:15:
8a:be:ee:8b:92:9c:33:7d:b8:ab:88:f8:f7:5d:13:0b:76:02:
0c:77:8e:79:1a:fd:63:06:9f:f2:79:4e:b7:e4:54:c8:34:34:
45:3d:23:b5:ae:f8:93:47:2c:28:89:63:f9:a4:4b:20:f9:d0:
cd:ae:0c:93:30:eb:68:e0:c7:55:48:0a:6a:b6:e1:e2:b7:4a:
c1:21:61:62:70:b1:10:52:d4:1a:35:9c:71:3b:eb:71:13:47:
4b:e1:fb:64:b2:29:b8:9d:3c:d7:c5:f2:7b:3e:92:44:e2:0d:
24:9a:f0:d5:9f:b3:77:be:58:26:8d:39:95:fe:86:10:78:5d:
3c:13:be:b3
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUG1uR019aRpiRuAxvLPDce6+lMZwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMzEyMTYwODM1WhcNMjYwNjEwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMzQwYjQyOTQ2NWQyY2ZmNGJiZmI5NWVhNGRjMzQ5ZGYz
YzljNzRkNjUzZmQzOWIwNDM2ZDlkMzU3ODEzMzUzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcohAMO51ZrQPAsTd8+LDDfPrPVzUw2YQI3AjjENpQszW5
A3mZPxfTsFJcWXdZDwSFP00VkX0G/28ky+zJyHt9cTTJoAXgp8edwznTbSb8x9S/
RXUF18ysJmxOK3ZzTVVmDKSwg3q8D7O7mvdcXGkSQE3QULd8DISmfN574xC+FTlQ
cpYYK/DQL3XvY9nFxubMMaKzsPK5DoJbXQhTQFTvPB4bD3dfJwXj8vQoUDo7Dshe
IjyCz/XyamwDcMNJP5RxiFKXztf6XXpPC5pSfchbFHRLpyWowrg8ub617Pu9A6zX
rjLuy9DSNhtoMRG6JLUtLyVyCeHdenBEp6DyrcQvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUdxTJ5v2scKEftswmhHC3ATQMeiQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQwN2Q3OGQ0LTZhMjctNGJjZC04MzZhLWMyZTQ3ZWQ2NmVjNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/pNMAwDQYJKoZIhvcNAQELBQADggEBAHkwUDgr6T/mKkVIR08v7IOh
XDIjqnUHveq1ZQzJsoLHp5FePWbEVorhulDryQkmVStF964l8Ahc1SgA7ltjFYpL
4aqr3p+FRlUudLGQE17TtfxNCmLP0RhS8d9PSuqrLMXA/40cclWFYS9sDi3xXY1T
hLU1M7QlsEDFxLbAFYq+7ouSnDN9uKuI+PddEwt2Agx3jnka/WMGn/J5TrfkVMg0
NEU9I7Wu+JNHLCiJY/mkSyD50M2uDJMw62jgx1VICmq24eK3SsEhYWJwsRBS1Bo1
nHE763ETR0vh+2SyKbidPNfF8ns+kkTiDSSa8NWfs3e+WCaNOZX+hhB4XTwTvrM=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:24:19 2026 by rpki-client