
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa
File: b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa (raw, json)
Hash identifier: 2NrsSCrKwV+9FQibNkJwRlsBx/NYOSYWGD3t04bI+v8=
Subject key identifier: E2:FB:9F:8B:D9:1C:AD:4B:0A:EF:B6:22:19:06:26:6B:B8:CA:56:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0848B0C2AFEC39A1D43981A9B1E5E1B37C80178D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa
Signing time: Thu 22 Oct 2026 02:07:15 +0000
ROA not before: Thu 22 Oct 2026 02:07:15 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:c020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:48:b0:c2:af:ec:39:a1:d4:39:81:a9:b1:e5:e1:b3:7c:80:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 02:07:15 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=bea9aa9c11152c847c6d4492dc51aafbe79d938708a22fbfe170128e67c5b9c2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:b3:23:31:8c:3d:e9:43:fa:5d:9b:73:45:
26:c8:5d:1f:13:08:4f:5a:f1:c7:58:86:c5:57:40:
89:41:ce:bf:b7:69:42:c6:55:e8:55:83:9a:45:01:
a5:28:7f:ee:31:8b:5f:c6:36:7e:c2:ff:48:1d:08:
32:5f:0a:61:b4:99:70:f5:00:a3:b0:0e:27:b1:aa:
63:7d:0a:d9:1a:7e:51:74:8f:75:29:1d:1a:83:f1:
4d:3d:f7:da:f9:fe:a7:72:13:be:68:fc:74:88:5c:
53:01:0e:c2:c4:11:2d:a6:ca:2a:db:50:ca:0e:26:
20:80:71:35:0f:84:e3:15:8f:87:61:03:32:e1:a5:
99:a4:7a:a2:e1:ef:74:81:0b:e9:a6:d1:c5:fb:37:
b2:7f:4d:b4:72:24:63:78:1b:c7:6c:c7:77:94:f4:
fe:0c:14:ab:59:00:cf:73:84:fe:fa:e9:67:0f:f8:
09:1e:7c:5c:3c:82:4f:cd:6a:46:54:44:a2:23:72:
8a:a1:4c:88:a1:f6:d5:fb:5d:58:59:07:11:bb:75:
f9:91:b6:8e:2f:e6:11:ae:8f:64:3d:9d:bd:ce:93:
9d:88:60:96:60:dd:d6:ce:d5:f9:31:c4:8a:64:27:
42:bf:5f:8d:e6:bd:c5:1c:01:df:32:10:aa:c2:da:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:9F:8B:D9:1C:AD:4B:0A:EF:B6:22:19:06:26:6B:B8:CA:56:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b0e2f76c-d8dd-4c98-b6ff-c5e918c6e294.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:c020::/48
Signature Algorithm: sha256WithRSAEncryption
5c:ac:9e:5a:82:d9:88:83:37:f7:8a:18:43:23:8f:78:1e:19:
99:b1:3c:4c:47:4a:8d:32:d4:26:34:62:b3:55:3b:46:09:fe:
36:8e:2a:84:b2:52:ca:21:62:ce:ce:7a:eb:45:4b:de:8d:97:
f7:ab:29:d0:82:be:14:52:56:81:14:31:f3:cb:b8:5c:8e:f6:
3e:56:51:b5:23:4e:3c:62:99:93:4b:e8:ab:89:01:6f:bd:aa:
0f:52:b6:3b:38:19:6b:1b:63:6d:da:17:76:39:c7:cc:d6:c5:
74:91:39:fe:28:83:cc:15:0e:c7:93:b4:e5:a0:df:a2:82:b6:
23:53:96:1b:34:a5:44:d8:35:3f:5b:62:99:35:1e:f1:8e:cf:
aa:85:b8:23:81:6c:9b:f9:19:90:e0:1c:db:02:67:ec:12:49:
4b:f5:5b:d7:18:e0:68:62:d2:6c:b9:5f:5e:79:0d:b7:6d:83:
44:55:61:5d:8a:a0:fa:1d:c2:18:c1:e6:c2:e7:ca:99:f3:1c:
5f:d6:6f:95:d1:da:87:d9:af:b4:84:52:0e:fa:a5:5c:ab:0f:
d4:3c:ff:43:8e:6c:5b:77:a0:5f:fc:e1:f2:1a:83:76:4d:f3:
d3:c1:02:87:fd:a1:c2:93:0c:44:7b:f2:f1:fa:c9:05:73:ef:
92:31:8e:3a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUCEiwwq/sOaHUOYGpseXhs3yAF40wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIwNzE1WhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0BiZWE5YWE5YzExMTUyYzg0N2M2ZDQ0OTJkYzUxYWFmYmU3
OWQ5Mzg3MDhhMjJmYmZlMTcwMTI4ZTY3YzViOWMyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnyLMjMYw96UP6XZtzRSbIXR8TCE9a8cdYhsVXQIlBzr+3
aULGVehVg5pFAaUof+4xi1/GNn7C/0gdCDJfCmG0mXD1AKOwDiexqmN9CtkaflF0
j3UpHRqD8U0999r5/qdyE75o/HSIXFMBDsLEES2myirbUMoOJiCAcTUPhOMVj4dh
AzLhpZmkeqLh73SBC+mm0cX7N7J/TbRyJGN4G8dsx3eU9P4MFKtZAM9zhP766WcP
+AkefFw8gk/NakZURKIjcoqhTIih9tX7XVhZBxG7dfmRto4v5hGuj2Q9nb3Ok52I
YJZg3dbO1fkxxIpkJ0K/X43mvcUcAd8yEKrC2t8hAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU4vufi9kcrUsK77YiGQYma7jKVt0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IwZTJmNzZjLWQ4ZGQtNGM5OC1iNmZmLWM1ZTkxOGM2ZTI5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB8AwCAwDQYJKoZIhvcNAQELBQADggEBAFysnlqC2YiDN/eKGEMjj3ge
GZmxPExHSo0y1CY0YrNVO0YJ/jaOKoSyUsohYs7OeutFS96Nl/erKdCCvhRSVoEU
MfPLuFyO9j5WUbUjTjximZNL6KuJAW+9qg9Stjs4GWsbY23aF3Y5x8zWxXSROf4o
g8wVDseTtOWg36KCtiNTlhs0pUTYNT9bYpk1HvGOz6qFuCOBbJv5GZDgHNsCZ+wS
SUv1W9cY4Ghi0my5X155Dbdtg0RVYV2KoPodwhjB5sLnypnzHF/Wb5XR2ofZr7SE
Ug76pVyrD9Q8/0OObFt3oF/84fIag3ZN89PBAof9ocKTDER78vH6yQVz75Ixjjo=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:08:07 2026 by rpki-client