
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
File: 5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa (raw, json)
Hash identifier: 8G8Vd6LE9DOgfXgkON4hNcLZaH/Rfh4g/an8SeM/byw=
Subject key identifier: 3F:C3:A4:D8:50:11:B9:C7:E7:A1:0A:40:D9:41:5F:27:FD:68:BF:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4C3EB761972FD6914371C5E1EEF5B8B44B56FDEB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
Signing time: Mon 05 Oct 2026 00:01:19 +0000
ROA not before: Mon 05 Oct 2026 00:01:19 +0000
ROA not after: Sun 03 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 16.206.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:3e:b7:61:97:2f:d6:91:43:71:c5:e1:ee:f5:b8:b4:4b:56:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 5 00:01:19 2026 GMT
Not After : Jan 3 23:59:59 2027 GMT
Subject: serialNumber=bcad3bf621ba787aadee35b8e75c4f595fc2d7e72424f114ca8ad192db4e50f5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:15:2e:07:84:6c:50:3a:5d:b9:e6:70:ae:5f:
17:a2:94:d8:01:3b:a4:84:60:bb:7f:4e:61:c1:78:
83:d4:8c:13:d4:7e:60:7b:02:a8:fe:dd:bb:e5:3b:
98:9a:b8:bc:82:cc:f4:c1:ba:c3:e8:1f:4c:66:01:
a0:97:b8:b6:a0:fc:be:7b:41:2f:5b:00:e2:90:d2:
b7:e6:2f:ff:dc:5f:7b:8f:29:3a:6c:42:67:0b:17:
2f:62:cd:68:4a:f8:0a:34:0d:f9:5d:23:fb:d9:0c:
91:6b:1d:8e:7b:dd:19:30:37:60:5b:b6:18:28:a0:
d5:bd:47:ad:3a:c1:07:a2:41:f7:e9:0c:e6:ac:4e:
9c:cb:3c:1c:5b:c8:05:94:ca:35:9c:27:5f:c4:fe:
ed:9a:a7:8c:b9:b3:ee:35:b6:6c:87:6b:55:26:a1:
15:24:f1:7a:e0:ed:f6:ea:51:15:e3:12:53:8b:e2:
11:f9:e1:86:b5:62:9b:03:da:ab:b5:24:6f:a4:ab:
40:bb:ae:c3:f5:70:b1:f4:38:c6:80:1b:5a:b3:c4:
f2:6a:97:0a:db:83:74:af:c7:cd:41:e1:6d:76:6a:
53:de:44:9f:ad:63:33:3a:1e:e6:8f:c5:f7:f4:a4:
c3:81:85:aa:dd:4e:05:d6:a0:52:7f:6d:52:8f:fc:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C3:A4:D8:50:11:B9:C7:E7:A1:0A:40:D9:41:5F:27:FD:68:BF:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e218b04-dfaf-4fdb-9e82-bad8d7e36def.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.206.0.0/16
Signature Algorithm: sha256WithRSAEncryption
91:50:7f:27:a7:8b:e6:c0:ca:49:92:6b:fa:45:42:40:47:d7:
2e:3e:a5:78:ba:fb:20:e3:6e:07:88:33:da:8a:e1:4f:95:62:
c8:16:f6:3f:a9:59:88:9a:f9:80:27:12:f3:48:65:a6:05:6f:
18:c3:f8:10:93:e9:c4:de:39:80:50:50:37:e3:85:93:cf:43:
97:37:35:82:4a:f1:8b:a2:8f:fd:a3:4b:93:ab:e1:ec:cd:e0:
92:b1:a4:1f:05:31:b1:ea:60:5a:89:08:05:32:5c:4e:96:0d:
0e:2f:4e:fb:e5:28:8d:58:43:71:fb:44:b2:87:da:1f:e5:dd:
e0:4d:af:23:b2:e5:f3:5d:c1:6e:6f:c6:b2:71:e0:ad:c0:72:
8f:53:9b:0c:0d:93:a1:74:78:01:1d:5b:53:44:c2:8a:7f:7f:
26:bf:ac:7a:bd:88:d1:40:f1:44:b5:cf:e1:78:42:41:c8:4e:
4a:b2:78:87:58:34:e9:e3:2d:0c:19:68:a0:85:25:95:28:12:
62:06:41:79:78:1e:f9:a9:97:d6:0e:80:38:1a:7a:da:9e:ca:
aa:4f:05:b7:27:1d:91:9a:ef:41:41:68:b3:3b:39:5e:39:d8:
3d:90:2b:0e:ff:e8:46:28:45:bc:0f:09:e4:3b:e6:7d:8a:cc:
f8:62:51:a5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTD63YZcv1pFDccXh7vW4tEtW/eswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA1MDAwMTE5WhcNMjcwMTAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BiY2FkM2JmNjIxYmE3ODdhYWRlZTM1YjhlNzVjNGY1OTVm
YzJkN2U3MjQyNGYxMTRjYThhZDE5MmRiNGU1MGY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkFS4HhGxQOl255nCuXxeilNgBO6SEYLt/TmHBeIPUjBPU
fmB7Aqj+3bvlO5iauLyCzPTBusPoH0xmAaCXuLag/L57QS9bAOKQ0rfmL//cX3uP
KTpsQmcLFy9izWhK+Ao0DfldI/vZDJFrHY573RkwN2BbthgooNW9R606wQeiQffp
DOasTpzLPBxbyAWUyjWcJ1/E/u2ap4y5s+41tmyHa1UmoRUk8Xrg7fbqURXjElOL
4hH54Ya1YpsD2qu1JG+kq0C7rsP1cLH0OMaAG1qzxPJqlwrbg3Svx81B4W12alPe
RJ+tYzM6HuaPxff0pMOBhardTgXWoFJ/bVKP/MNTAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUP8Ok2FARucfnoQpA2UFfJ/1ov8QwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlMjE4YjA0LWRmYWYtNGZkYi05ZTgyLWJhZDhkN2UzNmRlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQzjANBgkqhkiG9w0BAQsFAAOCAQEAkVB/J6eL5sDKSZJr+kVCQEfXLj6l
eLr7IONuB4gz2orhT5ViyBb2P6lZiJr5gCcS80hlpgVvGMP4EJPpxN45gFBQN+OF
k89Dlzc1gkrxi6KP/aNLk6vh7M3gkrGkHwUxsepgWokIBTJcTpYNDi9O++UojVhD
cftEsofaH+Xd4E2vI7Ll813Bbm/GsnHgrcByj1ObDA2ToXR4AR1bU0TCin9/Jr+s
er2I0UDxRLXP4XhCQchOSrJ4h1g06eMtDBlooIUllSgSYgZBeXge+amX1g6AOBp6
2p7Kqk8FtycdkZrvQUFoszs5XjnYPZArDv/oRihFvA8J5DvmfYrM+GJRpQ==
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:17:11 2026 by rpki-client