
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa
File: a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa (raw, json)
Hash identifier: 1GOLRqL/NdDONPwW8kcd2P4A45G+HDrI951MlElDGDw=
Subject key identifier: 8B:4E:65:8C:BD:BF:D5:D4:E2:D5:B5:4C:0A:BB:01:C5:E3:98:46:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4D23A4B60499A02E54BBD219A7E641321A916CAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa
Signing time: Fri 23 Oct 2026 01:30:16 +0000
ROA not before: Fri 23 Oct 2026 01:30:16 +0000
ROA not after: Thu 21 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1a:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:23:a4:b6:04:99:a0:2e:54:bb:d2:19:a7:e6:41:32:1a:91:6c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 23 01:30:16 2026 GMT
Not After : Jan 21 23:59:59 2027 GMT
Subject: serialNumber=d46f70abecf603cf4f61bb5df56305859945a79bb434acfd70b0413fb65ff5ef, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:d3:34:9a:a0:95:1e:24:f5:38:43:ea:21:
66:af:b7:f5:e1:19:d4:6c:6e:78:d9:c1:ef:41:c2:
1d:de:9d:17:dd:04:5f:8a:d5:9a:ea:9e:b4:53:2c:
23:8b:02:ef:68:b9:dc:f2:18:15:42:1e:9f:15:cd:
5b:d0:6b:2f:66:e0:bd:0e:2a:d1:37:4b:23:3c:aa:
ec:bc:e2:e2:d9:12:ef:ac:fa:2b:50:f8:39:84:19:
40:82:75:ae:24:c2:49:2f:d0:d6:93:3d:d0:5f:32:
a7:de:0e:84:a5:0d:e6:73:11:eb:3c:22:93:81:2a:
26:f2:fc:07:33:ae:9e:49:1d:ea:39:b5:90:96:8c:
10:c7:da:96:f8:f6:5a:07:b4:fd:25:7f:8b:19:37:
e1:a1:0d:a4:fc:71:1a:bf:55:e1:86:27:a6:d4:6b:
4e:f8:6d:dc:8b:76:55:25:95:d6:b2:6b:dd:59:a6:
50:e6:4a:0f:7b:de:c1:19:e9:ff:63:50:4f:6c:b7:
15:b8:5a:c8:ca:e6:cf:76:91:3a:e3:2a:b9:98:2a:
e5:03:ea:2e:68:51:8a:cb:47:93:11:1c:3b:c9:c6:
83:b1:1c:55:d8:25:38:d4:6c:35:d8:85:66:3f:33:
a3:23:32:a8:bf:9d:f2:40:cc:51:b3:5e:b0:4b:95:
d4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4E:65:8C:BD:BF:D5:D4:E2:D5:B5:4C:0A:BB:01:C5:E3:98:46:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3e3e8f5-d3ad-4328-8f52-753d24d5dc89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1a:4000::/36
Signature Algorithm: sha256WithRSAEncryption
56:c9:9a:a1:d5:09:5d:5f:08:e3:78:4b:9e:b9:6a:84:af:86:
9b:3e:15:03:33:30:c9:69:e9:5d:df:4d:86:59:07:3f:17:94:
f2:c1:8d:91:df:4b:fb:f3:4b:58:45:03:5d:d9:09:80:2b:8b:
49:5e:98:c7:83:02:b1:e8:1d:04:04:c3:65:72:3d:c7:43:ee:
3e:91:20:0e:44:df:fa:2a:c5:5d:b2:f4:66:0b:b8:58:b8:39:
cb:cb:60:e9:41:fd:67:0d:27:81:ba:ea:df:32:f5:58:55:1d:
59:af:14:07:61:e6:1f:0b:27:3e:4b:0a:f9:fd:4c:cc:1c:50:
79:99:8d:81:de:8b:5b:ea:b7:94:3f:bf:8c:c3:5e:82:19:b6:
71:fb:01:af:22:1e:6e:1e:50:59:63:dd:4b:f7:bc:95:b3:e6:
87:fc:1a:87:23:79:a2:5d:14:5d:a9:a2:8e:0b:1a:c5:06:f5:
9b:79:fb:45:d1:5f:a3:14:24:92:27:8e:ce:96:b6:24:29:50:
70:7b:35:24:70:b8:cd:69:a8:6e:17:14:af:b3:84:41:a6:8d:
7a:21:3c:7c:1c:23:0b:6d:3c:e8:54:73:17:cd:5f:d8:bc:ab:
7f:77:32:10:73:63:69:4d:24:99:45:41:c3:1f:bb:8c:0d:87:
d9:ce:57:6e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUTSOktgSZoC5Uu9IZp+ZBMhqRbK8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIzMDEzMDE2WhcNMjcwMTIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkNDZmNzBhYmVjZjYwM2NmNGY2MWJiNWRmNTYzMDU4NTk5
NDVhNzliYjQzNGFjZmQ3MGIwNDEzZmI2NWZmNWVmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCg5NM0mqCVHiT1OEPqIWavt/XhGdRsbnjZwe9Bwh3enRfd
BF+K1ZrqnrRTLCOLAu9oudzyGBVCHp8VzVvQay9m4L0OKtE3SyM8quy84uLZEu+s
+itQ+DmEGUCCda4kwkkv0NaTPdBfMqfeDoSlDeZzEes8IpOBKiby/Aczrp5JHeo5
tZCWjBDH2pb49loHtP0lf4sZN+GhDaT8cRq/VeGGJ6bUa074bdyLdlUlldaya91Z
plDmSg973sEZ6f9jUE9stxW4WsjK5s92kTrjKrmYKuUD6i5oUYrLR5MRHDvJxoOx
HFXYJTjUbDXYhWY/M6MjMqi/nfJAzFGzXrBLldTLAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUi05ljL2/1dTi1bVMCrsBxeOYRnUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzZTNlOGY1LWQzYWQtNDMyOC04ZjUyLTc1M2QyNGQ1ZGM4OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8aQDANBgkqhkiG9w0BAQsFAAOCAQEAVsmaodUJXV8I43hLnrlqhK+G
mz4VAzMwyWnpXd9NhlkHPxeU8sGNkd9L+/NLWEUDXdkJgCuLSV6Yx4MCsegdBATD
ZXI9x0PuPpEgDkTf+irFXbL0Zgu4WLg5y8tg6UH9Zw0ngbrq3zL1WFUdWa8UB2Hm
HwsnPksK+f1MzBxQeZmNgd6LW+q3lD+/jMNeghm2cfsBryIebh5QWWPdS/e8lbPm
h/wahyN5ol0UXamijgsaxQb1m3n7RdFfoxQkkieOzpa2JClQcHs1JHC4zWmobhcU
r7OEQaaNeiE8fBwjC2086FRzF81f2Lyrf3cyEHNjaU0kmUVBwx+7jA2H2c5Xbg==
-----END CERTIFICATE-----
Generated at Tue Nov 3 19:21:56 2026 by rpki-client