
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d41ff51-e213-454b-bf01-4829839d9568.roa
File: 6d41ff51-e213-454b-bf01-4829839d9568.roa (raw, json)
Hash identifier: 8+69pGivyNEtUm0fezfy7xHobCgdm42NBzfhl80d4b4=
Subject key identifier: 4E:B7:76:5B:84:66:AB:AE:51:BF:72:82:43:4D:5B:82:E3:9E:0C:8B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A9171D096ACAA31128AE7533D40A3C5F72FB27F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d41ff51-e213-454b-bf01-4829839d9568.roa
Signing time: Fri 23 Oct 2026 01:10:33 +0000
ROA not before: Fri 23 Oct 2026 01:10:33 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1c:c00::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:91:71:d0:96:ac:aa:31:12:8a:e7:53:3d:40:a3:c5:f7:2f:b2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 01:10:33 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=44f19d3a562d2e071004e5120429d33021db785aa97305ea439739b7a7974112, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c6:6a:9b:c6:86:56:38:21:61:61:b4:14:bc:
d7:cd:71:9e:ad:e0:96:a3:7d:fb:55:83:c6:b4:36:
43:28:48:c1:b4:bf:e2:18:1d:09:7e:67:51:cf:36:
ba:69:59:9e:62:1e:27:07:aa:83:a1:f9:96:f1:93:
c2:48:56:20:a7:e4:40:88:a5:b5:dd:b2:59:87:29:
47:d3:4a:66:db:ab:bd:4e:17:10:5b:3a:02:18:aa:
f2:e5:e8:93:5f:e8:b9:db:4e:9d:e9:6c:ac:8c:4f:
dd:89:93:0b:4d:9d:7c:f2:ed:98:42:a1:58:cb:dc:
1e:e1:70:4c:3d:f4:c5:60:67:d1:00:f7:f3:10:86:
03:22:30:51:50:b4:17:72:bf:e0:04:77:94:26:f1:
91:2f:23:34:ee:e5:cd:b5:32:1a:a2:d8:bc:f5:36:
1c:bd:f5:fc:b3:32:4f:60:3e:79:5a:d2:1f:cc:07:
ec:a7:81:e6:da:dc:c3:14:af:a9:31:c7:61:fb:31:
10:a4:b8:fb:66:f6:9c:85:64:9a:f6:b2:1a:3d:ab:
c2:a8:ac:18:e1:c2:a5:35:1b:c2:b7:ba:8e:1a:ed:
3a:ff:df:6a:6f:61:5a:77:72:5a:a2:df:a0:78:fb:
3a:09:cf:e7:55:2a:1b:2c:f6:2f:95:dc:f1:7f:52:
5c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:76:5B:84:66:AB:AE:51:BF:72:82:43:4D:5B:82:E3:9E:0C:8B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d41ff51-e213-454b-bf01-4829839d9568.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1c:c00::/38
Signature Algorithm: sha256WithRSAEncryption
a0:d3:62:f0:42:5e:e6:b0:25:c4:3a:82:b8:0e:83:b5:52:d3:
3b:5e:cc:89:bd:26:14:f1:45:11:d8:1e:57:6e:0a:1c:eb:d8:
3e:aa:27:36:0f:3e:10:8d:d2:08:89:de:18:70:0d:8c:6c:54:
a2:2e:0f:b5:b4:ef:42:58:4d:0e:87:f6:28:53:12:ef:63:a8:
a0:9c:b5:91:27:9b:3f:3d:a2:59:52:48:77:7e:bc:60:c7:61:
5b:ea:93:7e:11:24:6d:9b:4e:04:dc:bf:c6:89:59:52:65:22:
54:81:7a:c0:44:2e:db:3b:c9:d3:fa:f4:8a:8e:a1:28:b0:dd:
55:ec:ba:9e:fb:c7:01:06:dd:49:22:4d:71:a9:8e:18:61:a9:
92:7c:a1:46:12:70:20:f2:bf:bc:43:c1:e2:75:82:0b:25:aa:
28:8e:07:08:4c:5a:e3:a0:c9:0a:b6:55:53:86:7c:a3:92:13:
d0:8f:a2:bc:f9:bb:14:e7:73:4d:cd:e6:96:12:0b:18:ab:e5:
e0:41:23:1b:0a:89:91:20:79:b5:fa:54:30:88:90:c7:86:a3:
c1:58:75:0e:30:e7:d2:2d:2a:4c:f5:e8:7f:d5:54:24:15:6f:
7b:73:a9:1f:d1:8a:83:f5:fc:52:89:3f:ef:97:31:ae:1c:ec:
d1:10:6e:9a
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUapFx0JasqjESiudTPUCjxfcvsn8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDExMDMzWhcNMjcwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NGYxOWQzYTU2MmQyZTA3MTAwNGU1MTIwNDI5ZDMzMDIx
ZGI3ODVhYTk3MzA1ZWE0Mzk3MzliN2E3OTc0MTEyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCLxmqbxoZWOCFhYbQUvNfNcZ6t4JajfftVg8a0NkMoSMG0
v+IYHQl+Z1HPNrppWZ5iHicHqoOh+Zbxk8JIViCn5ECIpbXdslmHKUfTSmbbq71O
FxBbOgIYqvLl6JNf6LnbTp3pbKyMT92JkwtNnXzy7ZhCoVjL3B7hcEw99MVgZ9EA
9/MQhgMiMFFQtBdyv+AEd5Qm8ZEvIzTu5c21Mhqi2Lz1Nhy99fyzMk9gPnla0h/M
B+yngeba3MMUr6kxx2H7MRCkuPtm9pyFZJr2sho9q8KorBjhwqU1G8K3uo4a7Tr/
32pvYVp3clqi36B4+zoJz+dVKhss9i+V3PF/Ulx3AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUTrd2W4Rmq65Rv3KCQ01bguOeDIswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZkNDFmZjUxLWUyMTMtNDU0Yi1iZjAxLTQ4Mjk4MzlkOTU2OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgImAB8cDDANBgkqhkiG9w0BAQsFAAOCAQEAoNNi8EJe5rAlxDqCuA6DtVLT
O17Mib0mFPFFEdgeV24KHOvYPqonNg8+EI3SCIneGHANjGxUoi4PtbTvQlhNDof2
KFMS72OooJy1kSebPz2iWVJId368YMdhW+qTfhEkbZtOBNy/xolZUmUiVIF6wEQu
2zvJ0/r0io6hKLDdVey6nvvHAQbdSSJNcamOGGGpknyhRhJwIPK/vEPB4nWCCyWq
KI4HCExa46DJCrZVU4Z8o5IT0I+ivPm7FOdzTc3mlhILGKvl4EEjGwqJkSB5tfpU
MIiQx4ajwVh1DjDn0i0qTPXof9VUJBVve3OpH9GKg/X8Uok/75cxrhzs0RBumg==
-----END CERTIFICATE-----
Generated at Wed Nov 4 18:56:10 2026 by rpki-client