
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ddcf8b9-6441-496e-bac1-3a563b3a8bce.roa
File: 8ddcf8b9-6441-496e-bac1-3a563b3a8bce.roa (raw, json)
Hash identifier: MjkX1H/m/kU0jo3jqwhQOXUR2yWIh/2cFdpSkrr4ldA=
Subject key identifier: B6:ED:48:30:E1:74:3C:3C:66:F0:E3:D7:35:60:52:F4:90:7D:A6:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 305CD54A2CA2ED11A4518241D8BB0A29EE38BEF3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ddcf8b9-6441-496e-bac1-3a563b3a8bce.roa
Signing time: Sat 24 Oct 2026 01:03:32 +0000
ROA not before: Sat 24 Oct 2026 01:03:32 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 56.31.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:5c:d5:4a:2c:a2:ed:11:a4:51:82:41:d8:bb:0a:29:ee:38:be:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 01:03:32 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=d4c6d57bbd7eae9c22088d51ea529bcecd8774d7deb3a2e355f0a0016bbccad5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7d:6f:46:15:60:8c:23:ec:42:e7:64:23:20:
b1:38:e1:c3:e2:9f:b4:7f:79:99:57:87:61:36:17:
d2:ac:01:44:54:b6:35:20:4d:f0:af:c7:5d:1a:d2:
1e:6c:26:b2:cd:ac:51:c8:12:d1:33:f7:e0:6f:57:
c6:fc:2a:7b:2b:43:1c:83:46:da:d8:a7:68:eb:9c:
67:86:09:17:32:4d:06:6f:c8:58:6b:2e:7d:44:59:
13:a0:88:03:e3:d7:66:86:5c:be:41:23:97:64:ce:
bf:0d:06:82:00:58:d3:59:c4:24:31:29:e4:74:f6:
56:5c:d2:5c:0b:41:cf:66:ff:11:9c:5e:06:c6:21:
00:02:ac:ea:6c:27:6a:9a:9c:ce:08:c0:99:8c:4a:
22:9e:b5:4c:8c:b9:01:ae:fd:b7:b5:75:68:83:09:
a8:cb:42:79:df:99:4d:89:72:a0:3c:db:27:84:37:
19:f8:67:fc:4a:d7:ed:a8:e2:b3:62:16:f3:96:42:
8f:e1:aa:da:b7:c7:5f:f2:ae:f9:0c:56:47:ac:bf:
38:fc:55:a9:bf:44:ae:7b:b9:5c:3e:43:d2:26:d6:
72:eb:25:3a:e0:7e:b5:f2:67:71:05:fc:2c:f4:f9:
df:74:97:83:f4:ce:f4:cb:ee:53:ad:93:92:c0:b5:
d8:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:ED:48:30:E1:74:3C:3C:66:F0:E3:D7:35:60:52:F4:90:7D:A6:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8ddcf8b9-6441-496e-bac1-3a563b3a8bce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.31.0.0/16
Signature Algorithm: sha256WithRSAEncryption
cd:51:d9:d7:cb:1e:fd:05:6c:c8:b0:83:cd:b0:08:89:0d:ca:
36:2f:d2:f2:51:1a:33:61:50:2e:d1:16:52:59:e1:01:6d:7c:
a3:d0:b4:cf:f5:fe:ed:a6:a8:b8:6f:fb:99:1d:71:0c:06:cd:
7d:d2:6b:57:67:c2:91:6c:06:6b:fa:25:46:92:30:48:46:71:
95:7e:bc:c0:da:da:a9:75:57:9d:3e:6e:ac:25:47:fb:18:e2:
e2:c4:8d:2a:af:38:12:78:07:7d:73:cc:5e:6d:36:a8:2e:be:
3d:0a:73:3e:64:cf:66:2c:aa:d0:37:46:11:96:98:ff:31:4a:
5a:9e:4d:36:3d:84:2e:45:f4:3f:22:e0:50:f2:95:96:65:11:
20:6c:f7:f7:8f:8f:94:e9:69:21:09:cf:ce:c7:4f:cf:97:35:
8b:ba:91:70:5d:2a:db:b5:95:ce:f1:fc:4f:9a:92:32:31:10:
3d:9d:4d:1b:6d:9e:5f:ba:10:21:a1:ce:1e:d1:ef:8e:3c:da:
28:72:31:43:30:bf:ba:bb:6b:db:0e:d0:65:34:28:ce:ab:4e:
7b:d3:9b:2a:5c:dd:e7:df:dc:7c:85:16:82:10:6b:01:6e:9b:
53:f6:26:2d:4f:43:65:eb:12:ff:1d:db:56:a7:51:02:c4:64:
ff:a1:ef:dd
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUMFzVSiyi7RGkUYJB2LsKKe44vvMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI0MDEwMzMyWhcNMjcwMTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNGM2ZDU3YmJkN2VhZTljMjIwODhkNTFlYTUyOWJjZWNk
ODc3NGQ3ZGViM2EyZTM1NWYwYTAwMTZiYmNjYWQ1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQChfW9GFWCMI+xC52QjILE44cPin7R/eZlXh2E2F9KsAURU
tjUgTfCvx10a0h5sJrLNrFHIEtEz9+BvV8b8KnsrQxyDRtrYp2jrnGeGCRcyTQZv
yFhrLn1EWROgiAPj12aGXL5BI5dkzr8NBoIAWNNZxCQxKeR09lZc0lwLQc9m/xGc
XgbGIQACrOpsJ2qanM4IwJmMSiKetUyMuQGu/be1dWiDCajLQnnfmU2JcqA82yeE
Nxn4Z/xK1+2o4rNiFvOWQo/hqtq3x1/yrvkMVkesvzj8Vam/RK57uVw+Q9Im1nLr
JTrgfrXyZ3EF/Cz0+d90l4P0zvTL7lOtk5LAtdgRAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUtu1IMOF0PDxm8OPXNWBS9JB9ptswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhkZGNmOGI5LTY0NDEtNDk2ZS1iYWMxLTNhNTYzYjNhOGJjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4HzANBgkqhkiG9w0BAQsFAAOCAQEAzVHZ18se/QVsyLCDzbAIiQ3KNi/S
8lEaM2FQLtEWUlnhAW18o9C0z/X+7aaouG/7mR1xDAbNfdJrV2fCkWwGa/olRpIw
SEZxlX68wNraqXVXnT5urCVH+xji4sSNKq84EngHfXPMXm02qC6+PQpzPmTPZiyq
0DdGEZaY/zFKWp5NNj2ELkX0PyLgUPKVlmURIGz394+PlOlpIQnPzsdPz5c1i7qR
cF0q27WVzvH8T5qSMjEQPZ1NG22eX7oQIaHOHtHvjjzaKHIxQzC/urtr2w7QZTQo
zqtOe9ObKlzd59/cfIUWghBrAW6bU/YmLU9DZesS/x3bVqdRAsRk/6Hv3Q==
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:08:39 2026 by rpki-client