
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa
File: 7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa (raw, json)
Hash identifier: 7e7+ciByxilblc9tHw2Kxi/tDEpc3kqkuSIKJd/AtUE=
Subject key identifier: DA:64:4B:90:A0:A6:FC:E6:F6:68:CE:09:A0:BC:64:43:44:25:15:B0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5638CD2A1BC0688A21E7858C55E38D5AC7AE3592
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa
Signing time: Fri 31 Jul 2026 00:20:07 +0000
ROA not before: Fri 31 Jul 2026 00:20:07 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f69:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:38:cd:2a:1b:c0:68:8a:21:e7:85:8c:55:e3:8d:5a:c7:ae:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 00:20:07 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=3c060764b5655437c67d60f29a75454d2d8186856ad34cbad56ed43de77a29e6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:7d:62:0c:f5:9a:24:06:81:1f:7b:a7:e6:
ac:6f:28:d0:db:23:5b:52:51:81:2e:fc:9b:d4:13:
ab:db:1e:50:aa:7c:ea:cf:21:19:07:db:5b:de:a6:
f9:20:fd:5d:fc:64:03:96:aa:be:39:eb:9c:03:c7:
a9:2e:ee:28:d1:24:83:e3:44:42:a8:d5:09:79:40:
de:af:11:af:4f:39:00:96:a6:a9:c0:90:32:01:cf:
8a:0c:87:34:c5:fd:ed:5c:d9:60:78:fe:d5:c2:b4:
1a:16:4b:f1:e7:bd:b9:e1:d8:6e:07:51:7e:df:bf:
b8:d9:99:31:7f:e5:0b:62:75:36:39:62:97:af:6f:
03:7b:5a:0a:4f:fa:c7:64:83:e4:f9:87:bd:64:40:
82:19:cc:b9:d4:50:ac:0f:f1:c7:15:95:14:71:26:
43:04:f7:40:e5:ef:30:9e:7b:05:f3:58:00:3b:66:
e9:e5:f9:a5:86:8a:35:39:67:78:09:fd:21:05:a6:
09:bc:cf:e4:bb:95:c9:b4:be:29:65:88:fa:87:89:
8d:eb:6c:91:35:1b:b7:9c:f2:7a:74:01:cc:78:79:
a8:c0:c7:c1:a2:11:f6:91:d0:58:19:9e:fb:c3:e1:
3e:79:9e:ae:1b:3b:4d:4c:2d:da:7a:63:85:2a:5f:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:64:4B:90:A0:A6:FC:E6:F6:68:CE:09:A0:BC:64:43:44:25:15:B0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f3b623f-c681-4e6d-9e60-f511e1eb20c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:5000::/40
Signature Algorithm: sha256WithRSAEncryption
41:f5:e7:dd:be:c1:66:78:7c:93:f7:3d:c3:2b:50:32:cc:34:
60:7e:33:b2:e9:52:b6:56:d3:73:9f:fb:a3:9b:c6:ca:a3:2a:
b9:2f:92:dc:32:3f:d4:2a:73:0a:19:f0:5c:a6:b1:eb:b3:77:
54:c1:19:83:8f:97:86:cf:5e:be:60:d5:19:2d:12:5f:02:a4:
72:fa:36:38:4c:d0:a4:30:f6:cd:6f:42:22:09:d2:8d:bd:b0:
67:5f:75:08:c4:09:53:c6:76:30:45:20:cb:a5:da:16:7f:c1:
67:ee:20:a2:01:32:11:91:88:05:eb:83:49:67:fc:33:b9:24:
7e:2b:51:9e:1b:f4:6e:16:bf:8f:00:d1:e7:b1:ab:90:90:b7:
05:51:99:dc:f0:82:21:59:16:26:b9:28:b3:e0:85:00:61:ba:
e8:a0:c7:04:c2:6a:d4:94:10:da:6b:1e:63:b6:a6:5e:df:d0:
c1:81:76:9a:9b:d4:09:23:7d:0f:28:d7:39:09:71:61:a0:fd:
26:a7:e0:72:07:c0:f2:fd:14:7f:9a:5e:99:cf:17:13:53:86:
ee:e8:e4:94:51:35:3f:d6:23:05:2c:2c:e2:39:f4:df:f1:f2:
5c:03:f0:47:83:6c:18:a5:f0:2f:f8:4c:fb:0f:a3:5f:4c:66:
f4:c7:41:c8
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUVjjNKhvAaIoh54WMVeONWseuNZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDAyMDA3WhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzA2MDc2NGI1NjU1NDM3YzY3ZDYwZjI5YTc1NDU0ZDJk
ODE4Njg1NmFkMzRjYmFkNTZlZDQzZGU3N2EyOWU2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCu0n1iDPWaJAaBH3un5qxvKNDbI1tSUYEu/JvUE6vbHlCq
fOrPIRkH21vepvkg/V38ZAOWqr4565wDx6ku7ijRJIPjREKo1Ql5QN6vEa9POQCW
pqnAkDIBz4oMhzTF/e1c2WB4/tXCtBoWS/Hnvbnh2G4HUX7fv7jZmTF/5QtidTY5
YpevbwN7WgpP+sdkg+T5h71kQIIZzLnUUKwP8ccVlRRxJkME90Dl7zCeewXzWAA7
Zunl+aWGijU5Z3gJ/SEFpgm8z+S7lcm0villiPqHiY3rbJE1G7ec8np0Acx4eajA
x8GiEfaR0FgZnvvD4T55nq4bO01MLdp6Y4UqXw69AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU2mRLkKCm/Ob2aM4JoLxkQ0QlFbAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmM2I2MjNmLWM2ODEtNGU2ZC05ZTYwLWY1MTFlMWViMjBjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9pUDANBgkqhkiG9w0BAQsFAAOCAQEAQfXn3b7BZnh8k/c9wytQMsw0
YH4zsulStlbTc5/7o5vGyqMquS+S3DI/1CpzChnwXKax67N3VMEZg4+Xhs9evmDV
GS0SXwKkcvo2OEzQpDD2zW9CIgnSjb2wZ191CMQJU8Z2MEUgy6XaFn/BZ+4gogEy
EZGIBeuDSWf8M7kkfitRnhv0bha/jwDR57GrkJC3BVGZ3PCCIVkWJrkos+CFAGG6
6KDHBMJq1JQQ2mseY7amXt/QwYF2mpvUCSN9DyjXOQlxYaD9JqfgcgfA8v0Uf5pe
mc8XE1OG7ujklFE1P9YjBSws4jn03/HyXAPwR4NsGKXwL/hM+w+jX0xm9MdByA==
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:38:14 2026 by rpki-client