
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cde777c-02c6-49d9-8be6-cbd4ef976474.roa
File: 8cde777c-02c6-49d9-8be6-cbd4ef976474.roa (raw, json)
Hash identifier: yxZKWImg96lTZdZi3sBS6FJMb3elwkFl8Op7hjTzUUs=
Subject key identifier: 28:62:55:E0:73:E1:1B:22:EE:81:4F:A9:F2:08:F0:B5:F0:40:23:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 655C613DC118A837DB12F9FBE41BEC3F2DB0090D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cde777c-02c6-49d9-8be6-cbd4ef976474.roa
Signing time: Mon 10 Aug 2026 00:50:38 +0000
ROA not before: Mon 10 Aug 2026 00:50:38 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe8:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5c:61:3d:c1:18:a8:37:db:12:f9:fb:e4:1b:ec:3f:2d:b0:09:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:50:38 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=2e2c2ff0054df20fb1a6ffe812d2bbff588d2d47f0680dade2b693c472f0c97f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b4:0b:04:82:6e:aa:e8:d2:9d:2e:7e:98:3f:
9d:32:f7:e1:c5:2b:fb:e0:5a:6b:94:e2:fb:64:c9:
71:30:0e:69:98:7e:f4:72:29:c3:8e:b6:30:86:0e:
7b:82:cf:c3:4f:78:1a:6a:57:fa:da:88:95:9e:16:
03:cf:23:17:7a:25:47:71:60:a3:98:4e:66:41:51:
a9:e5:b5:9e:75:68:28:f1:1f:8f:3e:e4:9c:d2:e0:
b2:dd:b5:48:4d:a2:05:06:0c:e0:fd:98:33:a9:c6:
e5:2b:da:db:bc:bc:66:83:8e:ef:02:52:34:86:0a:
f2:99:43:3f:74:8f:7f:65:00:58:ab:ce:59:7d:2f:
7b:36:8c:b8:a2:99:f1:5d:31:5e:97:24:20:9a:24:
94:93:41:0c:2b:df:92:66:b0:ab:3a:c1:f2:39:b3:
f8:a8:e6:79:59:d5:7a:d0:e8:cb:af:85:ee:fc:1b:
aa:6a:bc:3d:0b:be:7f:1f:7c:c2:c1:1d:2f:15:84:
55:59:1e:91:bb:7e:40:01:64:be:91:18:e9:d8:03:
83:0a:a1:a7:a9:8f:66:b3:94:6e:1f:30:3d:b5:42:
c7:59:af:28:e5:b9:6a:fc:6a:a6:fe:f2:ab:ed:7c:
86:ff:00:c4:36:a2:82:42:cf:a7:03:2f:3a:b9:dc:
ad:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:62:55:E0:73:E1:1B:22:EE:81:4F:A9:F2:08:F0:B5:F0:40:23:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cde777c-02c6-49d9-8be6-cbd4ef976474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe8:e080::/48
Signature Algorithm: sha256WithRSAEncryption
1d:1f:b8:a6:b2:b2:0e:fa:ab:cf:e8:cb:9c:bb:42:d1:af:ab:
ae:8e:82:ce:8a:93:dd:d3:c9:21:08:35:71:90:0b:4d:1c:1a:
d1:e6:c9:e0:87:59:2e:85:9e:22:bc:e1:ab:f5:48:65:8d:84:
1a:93:a4:9b:fc:f3:7c:52:a5:53:af:1e:0b:4b:52:c0:0f:ec:
1f:40:df:e6:b1:b8:b4:4f:ae:17:1c:d8:d5:60:7c:35:dc:1f:
cc:34:18:89:8c:1e:ab:87:cc:28:2b:0d:05:2c:d2:8f:6c:61:
0d:18:a0:a7:74:e5:45:2a:57:e0:a4:9c:d6:46:1e:44:bf:e8:
ee:d4:d4:44:7b:f3:85:97:b0:0a:a0:7d:67:b6:71:b9:d9:9b:
a9:54:01:9b:d5:1d:5d:3b:47:84:a8:32:c9:6e:71:d4:1e:87:
eb:e6:ac:92:08:3f:35:b5:65:ff:19:aa:db:1a:dc:88:f3:f7:
5d:c0:7f:fe:08:b2:78:fd:a8:48:0e:35:35:2d:c0:f0:dd:6b:
d2:07:5d:a5:61:a4:d8:bc:47:ed:b0:c2:b8:ad:0d:07:fd:17:
af:e4:7c:2c:2f:42:d3:3c:ba:2c:7d:62:8a:9e:0d:40:00:71:
4c:b5:a2:b5:77:60:e0:fc:fc:e1:b9:40:a9:b4:e4:44:17:0f:
4b:95:d1:1f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZVxhPcEYqDfbEvn75BvsPy2wCQ0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDA1MDM4WhcNMjYxMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0AyZTJjMmZmMDA1NGRmMjBmYjFhNmZmZTgxMmQyYmJmZjU4
OGQyZDQ3ZjA2ODBkYWRlMmI2OTNjNDcyZjBjOTdmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC9tAsEgm6q6NKdLn6YP50y9+HFK/vgWmuU4vtkyXEwDmmY
fvRyKcOOtjCGDnuCz8NPeBpqV/raiJWeFgPPIxd6JUdxYKOYTmZBUanltZ51aCjx
H48+5JzS4LLdtUhNogUGDOD9mDOpxuUr2tu8vGaDju8CUjSGCvKZQz90j39lAFir
zll9L3s2jLiimfFdMV6XJCCaJJSTQQwr35JmsKs6wfI5s/io5nlZ1XrQ6Muvhe78
G6pqvD0Lvn8ffMLBHS8VhFVZHpG7fkABZL6RGOnYA4MKoaepj2azlG4fMD21QsdZ
ryjluWr8aqb+8qvtfIb/AMQ2ooJCz6cDLzq53K2DAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUKGJV4HPhGyLugU+p8gjwtfBAI/MwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhjZGU3NzdjLTAyYzYtNDlkOS04YmU2LWNiZDRlZjk3NjQ3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/o4IAwDQYJKoZIhvcNAQELBQADggEBAB0fuKaysg76q8/oy5y7QtGv
q66Ogs6Kk93TySEINXGQC00cGtHmyeCHWS6FniK84av1SGWNhBqTpJv883xSpVOv
HgtLUsAP7B9A3+axuLRPrhcc2NVgfDXcH8w0GImMHquHzCgrDQUs0o9sYQ0YoKd0
5UUqV+CknNZGHkS/6O7U1ER784WXsAqgfWe2cbnZm6lUAZvVHV07R4SoMslucdQe
h+vmrJIIPzW1Zf8Zqtsa3Ijz913Af/4Isnj9qEgONTUtwPDda9IHXaVhpNi8R+2w
writDQf9F6/kfCwvQtM8uix9YoqeDUAAcUy1orV3YOD8/OG5QKm05EQXD0uV0R8=
-----END CERTIFICATE-----
Generated at Thu Sep 17 20:43:39 2026 by rpki-client