
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa
File: ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa (raw, json)
Hash identifier: RhqeHigYaeccPZDdQdGp0OI8edi2ubwV7uoH/q7e6f8=
Subject key identifier: C5:D8:C7:EE:37:64:84:40:0B:6E:6B:18:1E:44:C2:F7:D5:BA:94:47
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 065E81F9F1E74F8DAD716C2638F40E2FE58EF781
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa
Signing time: Fri 07 Aug 2026 00:31:16 +0000
ROA not before: Fri 07 Aug 2026 00:31:16 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fef:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:5e:81:f9:f1:e7:4f:8d:ad:71:6c:26:38:f4:0e:2f:e5:8e:f7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:31:16 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=9538aeebc63a35d13d4d83037888a3501b5dda2131d1c6e05b7aa626a7d94427, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f2:8e:28:0e:e9:f6:75:4b:72:d1:6c:36:d0:
fe:15:19:a4:98:74:c3:fa:46:75:16:c7:70:36:18:
20:9a:ef:87:50:61:a3:25:75:c2:a8:72:0c:89:f1:
b5:b4:ea:4b:6a:1b:da:51:ff:46:c6:0f:c1:de:a8:
fb:55:8b:ee:4a:72:65:1c:ab:f3:1e:8d:cd:a0:54:
35:02:6e:2d:ed:54:7d:0e:cf:87:8b:0d:23:a9:da:
9a:e1:0a:33:8d:fb:9c:1d:f1:64:ed:c9:29:d0:89:
19:aa:e8:d8:37:86:f1:57:cf:1f:dd:cc:4d:a0:16:
31:ea:20:1f:89:80:56:cc:18:66:b8:16:cb:a1:bb:
e7:0c:c7:5c:0e:6e:40:92:6e:5e:b2:92:6c:92:6f:
05:53:65:3f:7c:54:c7:10:33:3c:24:e3:76:53:c3:
78:ba:f7:4a:ad:ec:ec:bd:fd:b0:6c:e2:90:52:c3:
9f:71:ae:4f:01:3e:be:c7:44:5c:ce:f6:ca:a9:97:
67:90:aa:ab:60:18:58:75:d8:ed:9b:ea:7e:d0:b2:
b6:e5:0c:af:c3:16:e3:ee:30:8c:6b:bb:e6:4c:bc:
ff:a4:c7:71:42:52:8b:6e:f7:fb:6b:66:7c:54:0e:
73:e7:1d:ac:b7:ee:9f:22:de:7f:40:bd:fa:b9:c4:
c3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D8:C7:EE:37:64:84:40:0B:6E:6B:18:1E:44:C2:F7:D5:BA:94:47
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae0e29cd-5167-4fb3-9444-3bbf67950b96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fef:5000::/40
Signature Algorithm: sha256WithRSAEncryption
98:d4:30:ec:12:ab:a8:70:67:18:c7:60:29:e4:3a:43:56:cc:
4d:61:a0:41:fc:a8:5a:51:80:b6:99:0a:81:5a:98:2f:b0:3b:
7b:64:24:ee:3e:52:5b:c3:8e:cd:cf:fb:72:84:1e:95:f6:11:
be:11:8a:9f:a6:5c:06:fc:92:b0:81:68:50:16:a3:46:e9:da:
71:61:2d:a0:cb:a9:e1:bd:3f:d2:d2:45:c7:3d:5f:b3:db:68:
c8:ac:5c:06:e9:97:a9:d9:d2:a2:e9:13:c9:65:29:ce:86:80:
67:66:25:0b:4d:56:88:56:4c:4e:b8:da:31:c6:98:7e:5a:5f:
af:fd:46:46:bc:a7:d4:9f:cb:49:36:12:6d:fe:19:b5:42:cd:
1a:e3:83:d4:d1:57:a1:f5:ca:f5:ae:87:60:b2:4c:ca:56:f2:
1c:83:28:84:9b:4f:e0:4c:34:c2:a1:19:7e:fe:1d:01:ac:ac:
bd:aa:1e:57:5b:9d:46:71:61:af:82:f5:50:a4:c9:c5:9d:cd:
80:27:86:25:97:8f:5d:bc:54:96:6d:04:7c:a0:d2:0f:b3:45:
2d:a7:bd:53:5a:c2:3f:fc:c6:a9:8e:f3:d0:25:e8:0d:23:bf:
82:92:dd:17:27:29:a9:96:24:2b:60:88:a3:5c:ac:8f:63:08:
f9:09:5a:be
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUBl6B+fHnT42tcWwmOPQOL+WO94EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAzMTE2WhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5NTM4YWVlYmM2M2EzNWQxM2Q0ZDgzMDM3ODg4YTM1MDFi
NWRkYTIxMzFkMWM2ZTA1YjdhYTYyNmE3ZDk0NDI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDX8o4oDun2dUty0Ww20P4VGaSYdMP6RnUWx3A2GCCa74dQ
YaMldcKocgyJ8bW06ktqG9pR/0bGD8HeqPtVi+5KcmUcq/Mejc2gVDUCbi3tVH0O
z4eLDSOp2prhCjON+5wd8WTtySnQiRmq6Ng3hvFXzx/dzE2gFjHqIB+JgFbMGGa4
Fsuhu+cMx1wObkCSbl6ykmySbwVTZT98VMcQMzwk43ZTw3i690qt7Oy9/bBs4pBS
w59xrk8BPr7HRFzO9sqpl2eQqqtgGFh12O2b6n7QsrblDK/DFuPuMIxru+ZMvP+k
x3FCUotu9/trZnxUDnPnHay37p8i3n9Avfq5xMPrAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUxdjH7jdkhEALbmsYHkTC99W6lEcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FlMGUyOWNkLTUxNjctNGZiMy05NDQ0LTNiYmY2Nzk1MGI5Ni5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/vUDANBgkqhkiG9w0BAQsFAAOCAQEAmNQw7BKrqHBnGMdgKeQ6Q1bM
TWGgQfyoWlGAtpkKgVqYL7A7e2Qk7j5SW8OOzc/7coQelfYRvhGKn6ZcBvySsIFo
UBajRunacWEtoMup4b0/0tJFxz1fs9toyKxcBumXqdnSoukTyWUpzoaAZ2YlC01W
iFZMTrjaMcaYflpfr/1GRryn1J/LSTYSbf4ZtULNGuOD1NFXofXK9a6HYLJMylby
HIMohJtP4Ew0wqEZfv4dAaysvaoeV1udRnFhr4L1UKTJxZ3NgCeGJZePXbxUlm0E
fKDSD7NFLae9U1rCP/zGqY7z0CXoDSO/gpLdFycpqZYkK2CIo1ysj2MI+Qlavg==
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:55:29 2026 by rpki-client