
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53c2cd3c-53af-4880-ab72-8d40e7088c6b.roa
File: 53c2cd3c-53af-4880-ab72-8d40e7088c6b.roa (raw, json)
Hash identifier: +2ag+RaC1zuorjgiOghjTAwZU74G2Sp7hB1y96zTnJs=
Subject key identifier: 1F:7C:07:8E:FF:A4:9E:56:77:13:B9:8B:A5:D4:83:EC:E6:64:29:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 59F84AF6A3095C3786CD6EEF275BA1FAD2EAB770
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53c2cd3c-53af-4880-ab72-8d40e7088c6b.roa
Signing time: Tue 04 Aug 2026 01:50:10 +0000
ROA not before: Tue 04 Aug 2026 01:50:10 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff2:2000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f8:4a:f6:a3:09:5c:37:86:cd:6e:ef:27:5b:a1:fa:d2:ea:b7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 01:50:10 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=e3e0f796c67d0637f612aebdaa5c66c72b2c6d569ff27bc95bcaa822353ad5cd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:57:ff:8b:c9:f7:37:26:de:8b:79:99:1b:ca:
cb:0b:75:e4:ac:a4:04:5c:15:1d:b2:f1:49:1b:d9:
83:01:f2:57:df:b8:86:fa:90:58:c4:55:12:dd:50:
34:bb:9e:25:ad:83:8a:ed:cc:ee:16:a6:0e:7f:40:
e0:0a:39:3e:02:2b:96:5d:fa:6e:2f:fb:65:6c:39:
b0:c2:e7:30:e0:d4:b9:5a:0c:77:85:51:e4:33:fc:
5e:e7:c4:12:b7:a4:96:3c:e0:aa:82:e7:49:ae:59:
d8:0b:d8:76:02:09:3f:78:82:8e:30:73:da:62:0b:
ba:ee:de:c5:8a:72:db:dd:a5:8b:26:a0:18:c4:73:
bd:99:ac:6d:6d:97:94:5f:36:8e:82:e8:9f:af:67:
d5:2c:9e:b2:c3:72:fd:9c:aa:d0:f4:89:a3:94:b2:
b4:d3:24:a3:c9:fd:5b:bd:1a:d1:bb:0c:17:50:2a:
e4:d3:78:2d:2c:2d:59:2b:d0:ca:cc:ad:e5:c4:88:
78:d7:5e:ba:31:3b:86:5b:6f:0c:30:b1:aa:8a:61:
d0:33:90:1b:8c:71:5c:24:45:3a:2f:a4:4a:2d:8a:
e3:5e:8c:03:15:8b:b0:be:76:4d:97:c6:a3:d9:f5:
63:b4:f1:0a:3e:03:d5:c8:15:65:14:d1:be:87:d2:
3c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:07:8E:FF:A4:9E:56:77:13:B9:8B:A5:D4:83:EC:E6:64:29:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53c2cd3c-53af-4880-ab72-8d40e7088c6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:2000::/40
Signature Algorithm: sha256WithRSAEncryption
33:93:15:0f:81:42:45:74:ba:bf:82:97:a7:e8:18:e3:27:2d:
42:97:fc:46:f0:b1:86:2e:9d:74:18:1b:34:f0:df:c3:ec:06:
2a:5a:15:24:d7:22:bb:1a:b7:5c:03:47:bc:a4:b8:a0:85:7b:
7a:70:ce:dc:a8:63:49:77:68:ae:00:a5:8f:64:ce:a6:79:1d:
65:ad:61:92:db:07:61:2a:b9:aa:9b:ad:bb:39:87:ce:e2:35:
bc:c6:99:59:65:3f:28:18:46:68:f7:e1:99:aa:5d:41:9f:4d:
72:a6:33:c7:58:29:06:5e:ca:72:71:16:1c:56:48:ad:28:1e:
f6:00:60:43:46:6f:5e:b8:4c:2c:24:da:4d:5c:c7:3b:7b:a1:
95:fa:26:8a:a8:34:cb:a9:f6:be:51:c5:10:c8:1c:e9:cd:74:
0f:ed:d4:32:5b:84:a9:54:6a:ec:25:3f:20:6e:e1:7d:2e:3a:
4f:11:26:85:7b:53:30:f3:56:c4:fa:5a:1f:0e:9f:ad:9b:79:
2d:1b:2b:6b:11:a4:61:26:70:e1:0a:03:ae:42:f4:1e:1a:88:
f2:68:80:7a:38:83:09:be:55:a8:47:c4:54:a7:a1:cd:aa:16:
ba:cf:fd:ea:df:7b:d3:d9:6b:0f:5a:10:4d:a0:87:94:b9:a8:
71:c3:d0:e1
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUWfhK9qMJXDeGzW7vJ1uh+tLqt3AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDE1MDEwWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BlM2UwZjc5NmM2N2QwNjM3ZjYxMmFlYmRhYTVjNjZjNzJi
MmM2ZDU2OWZmMjdiYzk1YmNhYTgyMjM1M2FkNWNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcV/+Lyfc3Jt6LeZkbyssLdeSspARcFR2y8Ukb2YMB8lff
uIb6kFjEVRLdUDS7niWtg4rtzO4Wpg5/QOAKOT4CK5Zd+m4v+2VsObDC5zDg1Lla
DHeFUeQz/F7nxBK3pJY84KqC50muWdgL2HYCCT94go4wc9piC7ru3sWKctvdpYsm
oBjEc72ZrG1tl5RfNo6C6J+vZ9UsnrLDcv2cqtD0iaOUsrTTJKPJ/Vu9GtG7DBdQ
KuTTeC0sLVkr0MrMreXEiHjXXroxO4ZbbwwwsaqKYdAzkBuMcVwkRTovpEotiuNe
jAMVi7C+dk2XxqPZ9WO08Qo+A9XIFWUU0b6H0jyFAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUH3wHjv+knlZ3E7mLpdSD7OZkKWkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUzYzJjZDNjLTUzYWYtNDg4MC1hYjcyLThkNDBlNzA4OGM2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/yIDANBgkqhkiG9w0BAQsFAAOCAQEAM5MVD4FCRXS6v4KXp+gY4yct
Qpf8RvCxhi6ddBgbNPDfw+wGKloVJNciuxq3XANHvKS4oIV7enDO3KhjSXdorgCl
j2TOpnkdZa1hktsHYSq5qputuzmHzuI1vMaZWWU/KBhGaPfhmapdQZ9NcqYzx1gp
Bl7KcnEWHFZIrSge9gBgQ0ZvXrhMLCTaTVzHO3uhlfomiqg0y6n2vlHFEMgc6c10
D+3UMluEqVRq7CU/IG7hfS46TxEmhXtTMPNWxPpaHw6frZt5LRsraxGkYSZw4QoD
rkL0HhqI8miAejiDCb5VqEfEVKehzaoWus/96t9709lrD1oQTaCHlLmoccPQ4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 31 18:55:59 2026 by rpki-client