
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa
File: 6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa (raw, json)
Hash identifier: dL1KOdoTVbnug+D+Pg85dJBvpjncinq6zCFqTzCBSec=
Subject key identifier: 84:39:49:BE:08:DF:6F:90:82:E3:0D:F1:8C:BD:E5:84:B9:8D:65:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 445F37D8420774E9BEF716B14FFAC716ABC7C1D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa
Signing time: Mon 03 Aug 2026 01:20:44 +0000
ROA not before: Mon 03 Aug 2026 01:20:44 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.51.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5f:37:d8:42:07:74:e9:be:f7:16:b1:4f:fa:c7:16:ab:c7:c1:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 01:20:44 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=e04dc4ba962e2d8f9fdbd4fb883cb2d6fe66155d8f332c82d4cc22ab97f9b462, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:81:cc:79:f7:94:63:f9:e6:5c:da:cd:ff:
d4:2e:a3:f7:cb:e3:47:23:0d:43:81:d6:eb:17:75:
b5:01:ff:ae:be:54:b3:c4:f7:ee:6b:af:5b:d4:ef:
70:52:13:e3:77:0d:8a:30:0b:d9:54:df:64:82:ce:
a7:b9:f5:99:0b:ef:5f:a3:b0:3d:f5:c8:3d:18:bc:
d9:55:7b:b9:b3:94:45:61:00:5d:15:8b:b2:51:ab:
c9:20:1f:38:ee:1c:6a:dc:3e:c0:eb:40:cd:b7:ae:
ea:13:82:d4:64:3b:cf:0c:6d:cf:79:74:58:d2:b2:
37:68:f1:6a:ae:8c:1a:63:ab:6a:ee:91:5d:34:8a:
e9:eb:25:d7:69:07:cd:c8:b2:b8:40:04:ea:66:0d:
44:c7:7b:d1:1a:dd:f7:15:38:3b:4e:4e:a7:65:14:
b6:c3:f5:6a:df:ac:13:1b:09:10:72:f0:10:ea:4e:
c8:c3:c9:fa:81:13:c7:56:40:56:04:57:48:ee:af:
05:2a:2b:0c:bd:e9:c6:c3:94:67:cb:e7:c1:44:1c:
af:5f:cd:8e:05:f9:a3:a5:16:3a:a2:80:df:6b:db:
ab:c3:26:84:8b:7a:90:24:df:37:8b:3d:0c:77:34:
de:f6:d1:4d:0a:65:89:1c:0d:c0:da:2a:79:84:00:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:39:49:BE:08:DF:6F:90:82:E3:0D:F1:8C:BD:E5:84:B9:8D:65:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6c2fd1a2-78af-4a87-9802-0bdcee2d953b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.51.32.0/22
Signature Algorithm: sha256WithRSAEncryption
28:3c:b3:f8:db:e2:5d:fc:86:e3:8e:e0:02:56:1a:ae:7e:d9:
c6:49:7f:29:da:38:1a:e1:72:a7:45:17:3d:f6:1c:7f:ef:62:
9e:69:8b:a6:42:98:d9:7a:0b:1e:d9:c5:be:cb:22:fd:69:09:
a4:fb:a4:8f:3f:24:36:eb:83:2a:76:64:30:29:b0:94:d4:3e:
a5:6b:1e:7b:f1:df:3a:e5:a1:9c:05:b3:2c:b9:10:aa:06:a7:
e7:0b:0d:9a:3a:46:a4:0d:71:70:52:04:4c:5a:b5:36:d0:0e:
b6:c5:ec:6b:58:6d:d3:9f:a6:a8:45:64:79:e8:25:50:dc:2d:
99:97:81:ad:88:d9:62:f5:7c:7b:6e:98:64:0b:95:75:ee:1d:
6a:de:e2:47:d5:73:8e:68:a9:55:11:07:25:19:44:6c:21:3e:
5b:45:49:7d:27:ca:a6:ea:d5:0c:c0:95:19:a9:9a:c1:a2:63:
1a:66:05:7e:31:b6:b2:c8:a4:4c:9a:e7:85:d6:99:21:29:ca:
b9:e9:0f:91:62:bf:ba:a5:c5:b2:1f:a8:c5:16:83:f1:bb:c1:
6c:7e:c2:d6:f5:18:d5:57:9d:43:4e:f9:08:9b:06:f0:34:7a:
5e:40:d7:fb:f6:d7:e9:0f:d9:f2:69:eb:a0:24:de:b3:13:64:
85:57:67:c7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURF832EIHdOm+9xaxT/rHFqvHwdkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEyMDQ0WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMDRkYzRiYTk2MmUyZDhmOWZkYmQ0ZmI4ODNjYjJkNmZl
NjYxNTVkOGYzMzJjODJkNGNjMjJhYjk3ZjliNDYyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxZIHMefeUY/nmXNrN/9Quo/fL40cjDUOB1usXdbUB/66+
VLPE9+5rr1vU73BSE+N3DYowC9lU32SCzqe59ZkL71+jsD31yD0YvNlVe7mzlEVh
AF0Vi7JRq8kgHzjuHGrcPsDrQM23ruoTgtRkO88Mbc95dFjSsjdo8WqujBpjq2ru
kV00iunrJddpB83IsrhABOpmDUTHe9Ea3fcVODtOTqdlFLbD9WrfrBMbCRBy8BDq
TsjDyfqBE8dWQFYEV0jurwUqKwy96cbDlGfL58FEHK9fzY4F+aOlFjqigN9r26vD
JoSLepAk3zeLPQx3NN720U0KZYkcDcDaKnmEAHd9AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUhDlJvgjfb5CC4w3xjL3lhLmNZWswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZjMmZkMWEyLTc4YWYtNGE4Ny05ODAyLTBiZGNlZTJkOTUzYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAIQMyAwDQYJKoZIhvcNAQELBQADggEBACg8s/jb4l38huOO4AJWGq5+2cZJ
fynaOBrhcqdFFz32HH/vYp5pi6ZCmNl6Cx7Zxb7LIv1pCaT7pI8/JDbrgyp2ZDAp
sJTUPqVrHnvx3zrloZwFsyy5EKoGp+cLDZo6RqQNcXBSBExatTbQDrbF7GtYbdOf
pqhFZHnoJVDcLZmXga2I2WL1fHtumGQLlXXuHWre4kfVc45oqVURByUZRGwhPltF
SX0nyqbq1QzAlRmpmsGiYxpmBX4xtrLIpEya54XWmSEpyrnpD5Fiv7qlxbIfqMUW
g/G7wWx+wtb1GNVXnUNO+QibBvA0el5A1/v21+kP2fJp66Ak3rMTZIVXZ8c=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:37:40 2026 by rpki-client