
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511316c5-7f81-42d6-945f-f6431a4a029c.roa
File: 511316c5-7f81-42d6-945f-f6431a4a029c.roa (raw, json)
Hash identifier: atKgseyU7yBE5F6nv/yhUN3t+AEMoRSMTltTBBc9hGM=
Subject key identifier: 11:8A:27:9A:69:B6:44:C1:BD:1E:64:51:1F:85:9F:EC:90:95:7D:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3238AC6E037024329BB7C24ED1DD716C74900C55
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511316c5-7f81-42d6-945f-f6431a4a029c.roa
Signing time: Sat 24 Oct 2026 00:40:50 +0000
ROA not before: Sat 24 Oct 2026 00:40:50 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff3:80a0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:38:ac:6e:03:70:24:32:9b:b7:c2:4e:d1:dd:71:6c:74:90:0c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:40:50 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=3d47a7b43956c73b74fea712f0c1ad7419846cfcf2bf87e910631f231e6d0c00, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a3:ce:a7:b8:e4:b6:3f:e9:72:fe:53:a3:6e:
33:ac:3a:a7:73:5a:be:5a:8b:da:ab:2c:63:b8:ef:
77:5e:2f:87:1f:70:cb:96:25:ab:b8:0e:e4:5d:80:
ce:2f:0d:b7:b7:11:61:b2:47:e2:a3:d0:12:cb:67:
6f:94:3d:31:f3:70:f7:0a:ba:30:2d:c6:3d:df:8f:
f0:2f:aa:b6:60:53:2d:61:ea:90:37:43:8e:28:75:
56:c0:69:d7:81:0e:e0:82:be:38:23:fb:04:56:c7:
b9:fd:8b:ec:35:33:80:16:47:79:ab:e6:e2:86:f4:
f8:22:40:37:dc:fd:c8:de:82:fc:28:b8:25:5d:41:
ba:a1:11:c0:1a:f8:fd:c3:c7:88:ce:d4:e2:b2:b9:
21:69:50:81:1d:7f:ea:cb:fb:e0:61:a8:52:39:b6:
1d:aa:f4:bb:1d:a5:2e:c2:d6:99:75:46:f7:77:d6:
f9:e7:2c:45:c8:68:50:8e:c1:ea:45:05:3d:75:e0:
35:03:ae:ab:74:b0:5a:c6:ff:50:30:6e:de:2f:0a:
04:8e:da:e1:97:3d:bb:27:3c:c4:3b:04:d4:3a:5a:
f3:f4:ee:42:c9:56:2b:8e:36:62:fa:2e:8e:94:3d:
fa:f6:b2:c1:f2:d7:31:50:ad:99:ea:6e:fc:2a:6f:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:8A:27:9A:69:B6:44:C1:BD:1E:64:51:1F:85:9F:EC:90:95:7D:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/511316c5-7f81-42d6-945f-f6431a4a029c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:80a0::/46
Signature Algorithm: sha256WithRSAEncryption
32:e4:f3:56:f9:1e:91:cf:f0:77:a3:03:06:36:3e:8d:fc:67:
dc:f1:b4:23:a7:15:77:df:c9:10:49:c0:0e:07:79:e5:b3:ce:
31:1d:de:8d:eb:59:f8:5d:b1:f7:d8:cc:43:e1:5f:49:3f:0f:
23:e2:d6:28:2e:21:63:10:8f:db:52:67:45:83:9a:5e:0c:2f:
a1:15:7f:8c:66:53:0c:10:75:70:8c:7e:57:bf:75:c0:79:86:
60:9d:1a:21:9c:c4:f8:06:11:6c:df:1e:9d:20:e6:38:ab:05:
3b:64:c4:c5:9f:ee:06:36:fa:7e:fe:be:9f:dd:63:63:98:e5:
b5:28:93:68:1e:f3:64:59:80:2a:d7:ba:41:34:51:08:a7:2c:
e9:58:26:e5:07:fe:81:99:f4:ef:ab:63:fc:bf:4b:13:6c:e3:
cf:4a:29:7d:54:63:01:7a:c8:13:51:e9:34:b2:fb:7c:fd:ca:
e6:94:75:aa:bb:44:d8:02:54:c0:c4:a7:d4:72:a1:e1:fc:46:
42:34:31:23:33:1c:96:02:af:f7:af:8c:0e:09:ee:d8:4a:c1:
7b:63:1f:e8:c3:7f:3a:3f:52:c4:cc:b4:64:5a:c7:e3:cb:b7:
95:83:79:52:ed:e8:57:5e:82:33:5b:e4:b7:c8:c1:09:57:7d:
29:c2:33:8a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMjisbgNwJDKbt8JO0d1xbHSQDFUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDA0MDUwWhcNMjcwMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzZDQ3YTdiNDM5NTZjNzNiNzRmZWE3MTJmMGMxYWQ3NDE5
ODQ2Y2ZjZjJiZjg3ZTkxMDYzMWYyMzFlNmQwYzAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCto86nuOS2P+ly/lOjbjOsOqdzWr5ai9qrLGO473deL4cf
cMuWJau4DuRdgM4vDbe3EWGyR+Kj0BLLZ2+UPTHzcPcKujAtxj3fj/AvqrZgUy1h
6pA3Q44odVbAadeBDuCCvjgj+wRWx7n9i+w1M4AWR3mr5uKG9PgiQDfc/cjegvwo
uCVdQbqhEcAa+P3Dx4jO1OKyuSFpUIEdf+rL++BhqFI5th2q9LsdpS7C1pl1Rvd3
1vnnLEXIaFCOwepFBT114DUDrqt0sFrG/1Awbt4vCgSO2uGXPbsnPMQ7BNQ6WvP0
7kLJViuONmL6Lo6UPfr2ssHy1zFQrZnqbvwqb969AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUEYonmmm2RMG9HmRRH4Wf7JCVfSIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxMTMxNmM1LTdmODEtNDJkNi05NDVmLWY2NDMxYTRhMDI5Yy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zgKAwDQYJKoZIhvcNAQELBQADggEBADLk81b5HpHP8HejAwY2Po38
Z9zxtCOnFXffyRBJwA4HeeWzzjEd3o3rWfhdsffYzEPhX0k/DyPi1iguIWMQj9tS
Z0WDml4ML6EVf4xmUwwQdXCMfle/dcB5hmCdGiGcxPgGEWzfHp0g5jirBTtkxMWf
7gY2+n7+vp/dY2OY5bUok2ge82RZgCrXukE0UQinLOlYJuUH/oGZ9O+rY/y/SxNs
489KKX1UYwF6yBNR6TSy+3z9yuaUdaq7RNgCVMDEp9RyoeH8RkI0MSMzHJYCr/ev
jA4J7thKwXtjH+jDfzo/UsTMtGRax+PLt5WDeVLt6FdegjNb5LfIwQlXfSnCM4o=
-----END CERTIFICATE-----
Generated at Mon Nov 2 18:57:23 2026 by rpki-client