
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa
File: a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa (raw, json)
Hash identifier: 2uNPtdTWWoWkYTuFBgbbTo3fBI6KIXx2Kfhd/BL03NA=
Subject key identifier: 5E:C3:DA:F9:FF:F9:1F:DD:CD:1D:2F:9F:3D:88:E9:67:EB:2A:34:4D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A137BB6ACC098488493D3013F409727A85964AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa
Signing time: Sat 02 May 2026 01:20:51 +0000
ROA not before: Sat 02 May 2026 01:20:51 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fea:8050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:13:7b:b6:ac:c0:98:48:84:93:d3:01:3f:40:97:27:a8:59:64:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 2 01:20:51 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=fc716ae327d3c508cd88d9acf219d8f78d51e010ebc79b1123deaf5e950fc646, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:0b:cc:8f:31:e0:23:30:43:b8:86:d1:4c:
2d:dc:e1:87:38:ac:dc:78:47:de:56:31:aa:5f:f9:
5d:6d:fd:b1:49:8c:2c:e3:80:13:4a:35:8e:bb:23:
02:a8:7e:8b:91:4a:10:d1:2a:c6:4e:49:a0:05:96:
b0:9b:7c:27:65:86:38:2c:8f:d6:5c:9e:4d:2a:99:
da:8f:29:4f:16:6c:0d:c4:45:0d:49:45:f0:d8:23:
15:23:ce:bf:61:8a:ae:ab:c6:4f:ae:89:5d:64:32:
81:aa:59:78:78:e5:ac:0f:70:ee:06:9b:63:ae:09:
f5:b3:03:13:2c:3e:bc:be:7a:73:7d:f8:87:24:82:
19:81:c7:21:60:e5:af:0b:5f:ca:95:d4:ec:8d:fe:
53:d4:54:97:9b:b9:2f:bf:19:82:ce:65:26:b8:b0:
87:ea:12:ff:69:45:43:e5:a2:09:90:4d:0b:62:8b:
0d:25:a4:be:93:ad:3f:2f:af:25:02:f9:7a:c8:81:
43:f0:a3:ba:ba:c3:15:7c:1f:2e:8c:ec:35:ba:7d:
4b:21:f1:81:aa:67:e2:4e:df:06:2f:fb:ac:bf:68:
b2:bc:02:a1:27:48:77:98:b1:79:6d:6d:95:28:80:
30:4d:09:dd:6f:92:21:ba:88:ac:12:db:d4:7a:21:
4c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C3:DA:F9:FF:F9:1F:DD:CD:1D:2F:9F:3D:88:E9:67:EB:2A:34:4D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a29322c3-3b0b-4d57-b8e7-b17bddb4b1d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:8050::/48
Signature Algorithm: sha256WithRSAEncryption
4d:3f:ab:b8:aa:ff:8e:9d:1d:7b:6f:07:4d:65:6a:26:9f:35:
29:75:d0:2f:35:f9:af:c1:31:7d:c2:2b:e6:cd:ac:12:81:aa:
76:fd:de:cc:4e:ba:85:3e:98:64:7d:27:3e:0f:dd:28:ca:c1:
f1:f1:d8:2f:ff:f9:23:6a:c4:6e:4e:b5:78:2d:eb:75:6d:35:
42:6b:67:be:91:b2:7a:89:eb:f8:24:5d:8d:7a:c0:c0:ab:be:
c4:51:c1:45:8f:60:66:a8:6d:5d:ae:e9:e5:14:78:c3:d9:e8:
f7:ad:28:ca:76:15:f6:f6:86:f7:a4:e5:f0:34:80:cf:8c:18:
74:b3:ec:16:02:d3:af:2a:a1:57:39:18:cf:4f:41:25:d7:d9:
2c:16:36:75:a9:2e:e2:2d:99:fc:a7:f7:2e:94:51:c7:1d:8d:
d4:6d:2f:c7:9f:23:86:d1:0e:c7:12:01:27:b6:15:a4:a0:1d:
c9:b8:30:51:da:5c:c2:f4:95:fe:7c:11:c8:f5:ad:eb:63:44:
ff:f3:91:f2:d6:5a:58:92:73:07:b4:c1:1b:cf:d4:d0:ff:d0:
bd:c2:8e:9e:8e:f4:5e:4d:df:2d:23:b2:87:34:90:29:9b:8f:
54:a0:de:4c:5e:c3:ae:69:46:65:ec:49:e4:44:4f:05:7b:ee:
2c:ee:1f:32
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUOhN7tqzAmEiEk9MBP0CXJ6hZZK4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAyMDEyMDUxWhcNMjYwNzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BmYzcxNmFlMzI3ZDNjNTA4Y2Q4OGQ5YWNmMjE5ZDhmNzhk
NTFlMDEwZWJjNzliMTEyM2RlYWY1ZTk1MGZjNjQ2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDdwvMjzHgIzBDuIbRTC3c4Yc4rNx4R95WMapf+V1t/bFJ
jCzjgBNKNY67IwKofouRShDRKsZOSaAFlrCbfCdlhjgsj9Zcnk0qmdqPKU8WbA3E
RQ1JRfDYIxUjzr9hiq6rxk+uiV1kMoGqWXh45awPcO4Gm2OuCfWzAxMsPry+enN9
+IckghmBxyFg5a8LX8qV1OyN/lPUVJebuS+/GYLOZSa4sIfqEv9pRUPlogmQTQti
iw0lpL6TrT8vryUC+XrIgUPwo7q6wxV8Hy6M7DW6fUsh8YGqZ+JO3wYv+6y/aLK8
AqEnSHeYsXltbZUogDBNCd1vkiG6iKwS29R6IUyRAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXsPa+f/5H93NHS+fPYjpZ+sqNE0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EyOTMyMmMzLTNiMGItNGQ1Ny1iOGU3LWIxN2JkZGI0YjFkNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/qgFAwDQYJKoZIhvcNAQELBQADggEBAE0/q7iq/46dHXtvB01laiaf
NSl10C81+a/BMX3CK+bNrBKBqnb93sxOuoU+mGR9Jz4P3SjKwfHx2C//+SNqxG5O
tXgt63VtNUJrZ76RsnqJ6/gkXY16wMCrvsRRwUWPYGaobV2u6eUUeMPZ6PetKMp2
Ffb2hvek5fA0gM+MGHSz7BYC068qoVc5GM9PQSXX2SwWNnWpLuItmfyn9y6UUccd
jdRtL8efI4bRDscSASe2FaSgHcm4MFHaXML0lf58Ecj1retjRP/zkfLWWliScwe0
wRvP1ND/0L3Cjp6O9F5N3y0jsoc0kCmbj1Sg3kxew65pRmXsSeRETwV77izuHzI=
-----END CERTIFICATE-----
Generated at Mon May 4 21:38:06 2026 by rpki-client