
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cde777c-02c6-49d9-8be6-cbd4ef976474.roa
File: 8cde777c-02c6-49d9-8be6-cbd4ef976474.roa (raw, json)
Hash identifier: tuamPC/wTdzaclp7ZF5mIBKb4y9KXy2NdffECBX1cek=
Subject key identifier: 81:A6:70:F5:06:D5:51:64:4E:99:FB:08:B8:7C:88:6C:0E:51:64:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15B2CF37BA8B94899ED8A8342A03A2CB52D5CA64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cde777c-02c6-49d9-8be6-cbd4ef976474.roa
Signing time: Thu 29 Oct 2026 00:50:39 +0000
ROA not before: Thu 29 Oct 2026 00:50:39 +0000
ROA not after: Wed 27 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe8:e080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b2:cf:37:ba:8b:94:89:9e:d8:a8:34:2a:03:a2:cb:52:d5:ca:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 29 00:50:39 2026 GMT
Not After : Jan 27 23:59:59 2027 GMT
Subject: serialNumber=30430c599961d5589969e6c96491adc8d98b40f8b328a3fe8ba31a685ca52d5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:42:7d:69:71:9b:a9:89:96:88:77:3a:0b:0d:
b1:1a:22:7f:93:12:31:ce:26:96:1c:de:1d:10:ed:
35:d3:f3:09:a7:7d:67:42:ca:64:50:57:5c:c1:8d:
03:fa:50:b8:1b:f6:77:53:da:e1:bd:5b:5a:71:14:
b9:9b:ec:41:be:21:cb:f8:c8:c7:a7:25:34:28:09:
8c:f4:6d:b7:33:44:17:e1:3e:f7:2c:41:e4:20:5e:
79:f6:f7:7d:a4:11:14:d8:25:df:36:c2:53:6e:ca:
d2:3c:09:e1:7f:86:47:bf:fc:e2:3a:35:b9:c3:66:
fe:53:83:a0:68:6f:ac:f2:18:67:67:f5:3e:9d:39:
ec:dd:9f:ea:2e:cd:d4:bf:af:5d:9e:af:df:5a:81:
8f:f8:df:e3:1b:ee:44:19:bb:f4:99:01:9e:09:80:
a0:2a:0c:e8:37:06:7c:8b:c8:9d:b4:d7:26:30:f1:
94:22:42:af:d7:d7:94:b8:f6:a9:15:fd:ef:c8:36:
71:d6:5b:6d:2d:f4:af:69:47:1b:89:04:e6:58:5c:
ce:2b:70:91:6d:c7:f3:16:31:ca:5c:61:a8:4a:29:
a5:55:55:ee:7b:3d:2a:d9:70:2d:72:99:2f:38:c5:
b5:e8:eb:08:6d:20:9f:18:7c:e5:75:40:a2:47:8c:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A6:70:F5:06:D5:51:64:4E:99:FB:08:B8:7C:88:6C:0E:51:64:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8cde777c-02c6-49d9-8be6-cbd4ef976474.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe8:e080::/48
Signature Algorithm: sha256WithRSAEncryption
9f:fc:ed:c7:b1:94:5b:b8:f9:90:2c:a9:24:13:ce:eb:d1:77:
33:8b:5a:6a:a3:28:02:ee:f5:bb:54:96:f0:80:f2:43:1e:9c:
29:5a:47:6c:c5:46:8a:59:6b:ae:ea:3b:da:fe:d7:52:ed:a9:
ce:fb:7e:fc:aa:6a:60:f5:ac:03:7d:ea:0b:ec:b8:5b:eb:1f:
32:0a:c2:06:d9:04:63:5b:0b:dc:dd:29:59:29:ac:5e:31:a4:
fc:0a:11:4a:94:ef:66:7c:19:d9:d5:9e:71:12:f8:60:dc:e2:
22:db:ef:be:4f:d4:28:bd:3f:1d:30:ed:e5:d4:ab:34:e0:3c:
40:13:54:96:35:cc:77:ec:31:5b:b2:7c:df:4e:21:3b:62:26:
f5:3a:28:1e:c2:cf:4f:a4:4d:50:60:ef:3a:1b:61:2e:95:63:
03:91:40:08:c8:dc:04:1b:35:cc:03:58:4d:c0:ac:2e:de:50:
48:87:4b:b8:b3:2a:d8:08:f4:2b:10:fe:03:42:d0:3b:8e:83:
e1:22:c9:1f:9c:8a:8c:a4:37:e0:a0:61:d8:de:2b:d5:24:5f:
b5:60:68:01:fa:0a:74:33:31:0e:43:bb:df:a1:55:9e:ed:a1:
ec:6e:da:95:eb:bb:99:da:bb:47:7d:58:21:58:38:cc:d7:63:
5f:c2:5f:df
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUFbLPN7qLlIme2Kg0KgOiy1LVymQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI5MDA1MDM5WhcNMjcwMTI3MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMDQzMGM1OTk5NjFkNTU4OTk2OWU2Yzk2NDkxYWRjOGQ5
OGI0MGY4YjMyOGEzZmU4YmEzMWE2ODVjYTUyZDVlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAQn1pcZupiZaIdzoLDbEaIn+TEjHOJpYc3h0Q7TXT8wmn
fWdCymRQV1zBjQP6ULgb9ndT2uG9W1pxFLmb7EG+Icv4yMenJTQoCYz0bbczRBfh
PvcsQeQgXnn2932kERTYJd82wlNuytI8CeF/hke//OI6NbnDZv5Tg6Bob6zyGGdn
9T6dOezdn+ouzdS/r12er99agY/43+Mb7kQZu/SZAZ4JgKAqDOg3BnyLyJ201yYw
8ZQiQq/X15S49qkV/e/INnHWW20t9K9pRxuJBOZYXM4rcJFtx/MWMcpcYahKKaVV
Ve57PSrZcC1ymS84xbXo6whtIJ8YfOV1QKJHjJqrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUgaZw9QbVUWROmfsIuHyIbA5RZMEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhjZGU3NzdjLTAyYzYtNDlkOS04YmU2LWNiZDRlZjk3NjQ3NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/o4IAwDQYJKoZIhvcNAQELBQADggEBAJ/87cexlFu4+ZAsqSQTzuvR
dzOLWmqjKALu9btUlvCA8kMenClaR2zFRopZa67qO9r+11Ltqc77fvyqamD1rAN9
6gvsuFvrHzIKwgbZBGNbC9zdKVkprF4xpPwKEUqU72Z8GdnVnnES+GDc4iLb775P
1Ci9Px0w7eXUqzTgPEATVJY1zHfsMVuyfN9OITtiJvU6KB7Cz0+kTVBg7zobYS6V
YwORQAjI3AQbNcwDWE3ArC7eUEiHS7izKtgI9CsQ/gNC0DuOg+EiyR+cioykN+Cg
YdjeK9UkX7VgaAH6CnQzMQ5Du9+hVZ7toexu2pXru5nau0d9WCFYOMzXY1/CX98=
-----END CERTIFICATE-----
Generated at Wed Nov 4 05:43:13 2026 by rpki-client