
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4170297-da65-4f69-9c04-1eb7da862258.roa
File: b4170297-da65-4f69-9c04-1eb7da862258.roa (raw, json)
Hash identifier: Z53WPsGIEBlNAnc3YURukbA540ne6Jc7quuI9N/Z1KM=
Subject key identifier: 60:92:D3:4D:3C:72:BB:A4:83:9C:16:E3:0B:43:87:E0:E6:0E:4B:7A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 64CA1A96C361F3BBE08B3BFDA81D6C4ED941F860
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4170297-da65-4f69-9c04-1eb7da862258.roa
Signing time: Fri 09 Oct 2026 00:51:19 +0000
ROA not before: Fri 09 Oct 2026 00:51:19 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f38:8050::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ca:1a:96:c3:61:f3:bb:e0:8b:3b:fd:a8:1d:6c:4e:d9:41:f8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 9 00:51:19 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=f52ad6bc00698e1b2d5e9d37e88774d9168df5423b2065d1cb5111c435130147, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:06:24:4e:2b:a6:6c:cb:72:b5:61:1a:9d:
db:a5:83:30:68:da:8a:de:f8:82:8f:4a:ec:d2:e5:
86:cb:66:4f:9a:04:a8:5f:7b:e0:2e:5f:77:e8:28:
7d:6d:4c:f0:66:19:c9:76:d5:1b:e1:d8:35:72:ba:
18:bb:f6:0e:6d:85:e1:f9:03:49:9a:2e:a9:dd:d4:
fb:52:47:1c:38:8a:be:c8:df:8f:77:3b:55:94:32:
cf:f2:64:92:3d:67:21:7c:a1:58:f8:1b:1d:85:19:
d9:09:ce:a1:d7:a7:fc:47:2e:11:43:f2:be:22:38:
b6:25:e3:26:2d:89:f5:fa:79:dc:20:c3:ad:e3:90:
73:b2:d0:a8:74:58:f9:84:8f:ef:4c:2f:a0:56:5a:
d7:c8:8b:0a:f9:38:4d:b1:c5:8b:6a:0f:65:62:ec:
30:97:00:52:42:93:01:cd:c6:f6:bd:47:48:42:e4:
34:84:de:3a:44:33:95:67:0c:ee:33:b3:6d:65:db:
1a:b1:c7:25:37:42:7b:9e:20:2a:83:24:73:e0:25:
d3:73:61:38:5f:25:53:1b:a2:b2:d1:3e:dd:c2:5a:
f3:7b:91:1d:6b:81:9d:08:e5:f4:11:e7:7f:48:ac:
06:07:6a:2d:bc:eb:89:7a:cd:15:b8:75:01:9d:5d:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:92:D3:4D:3C:72:BB:A4:83:9C:16:E3:0B:43:87:E0:E6:0E:4B:7A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4170297-da65-4f69-9c04-1eb7da862258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:8050::/48
Signature Algorithm: sha256WithRSAEncryption
25:c3:c7:cb:56:94:86:d1:87:a2:28:f8:a4:27:47:0e:2b:20:
74:fd:09:45:3f:4c:a5:88:9a:dd:eb:9a:0d:96:5f:d7:7a:51:
56:66:86:25:f0:be:a0:ea:42:77:b1:9e:b5:14:6c:7a:54:8f:
b4:08:81:20:af:0e:5c:42:d5:fd:c0:95:3c:d3:62:b4:f1:cd:
21:d7:52:d7:b8:ab:07:67:1c:98:f5:02:ab:eb:99:2d:5b:a6:
9e:4d:6d:49:91:2f:9c:e3:30:a0:c7:9c:46:8e:69:25:75:f8:
b3:6e:eb:0e:a4:e9:4d:c0:3d:ad:03:cb:24:9b:53:3b:db:6e:
0b:85:82:02:4e:d2:3d:4e:10:98:fd:61:71:7c:fe:ae:c4:64:
cc:45:ca:12:fc:3b:f6:87:0b:7c:b5:b7:fc:cf:bc:ea:40:ac:
77:05:f7:5d:36:43:d4:9d:5c:f2:12:ab:48:c5:d0:30:49:d5:
56:6a:1c:01:f2:8a:80:2e:91:d8:43:26:b3:ad:85:3a:ec:ee:
2f:cf:0f:56:f6:35:d8:be:9e:b5:9f:89:2e:a1:17:2d:72:f3:
45:35:6c:73:83:d5:d0:b8:9b:bd:48:d6:34:04:df:dd:33:0e:
68:8b:5d:0e:64:fd:46:4e:8f:04:25:45:8e:52:ca:88:99:b2:
a4:25:85:cc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZMoalsNh87vgizv9qB1sTtlB+GAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA5MDA1MTE5WhcNMjcwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BmNTJhZDZiYzAwNjk4ZTFiMmQ1ZTlkMzdlODg3NzRkOTE2
OGRmNTQyM2IyMDY1ZDFjYjUxMTFjNDM1MTMwMTQ3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC0bAYkTiumbMtytWEandulgzBo2ore+IKPSuzS5YbLZk+a
BKhfe+AuX3foKH1tTPBmGcl21Rvh2DVyuhi79g5theH5A0maLqnd1PtSRxw4ir7I
3493O1WUMs/yZJI9ZyF8oVj4Gx2FGdkJzqHXp/xHLhFD8r4iOLYl4yYtifX6edwg
w63jkHOy0Kh0WPmEj+9ML6BWWtfIiwr5OE2xxYtqD2Vi7DCXAFJCkwHNxva9R0hC
5DSE3jpEM5VnDO4zs21l2xqxxyU3QnueICqDJHPgJdNzYThfJVMborLRPt3CWvN7
kR1rgZ0I5fQR539IrAYHai2864l6zRW4dQGdXX/7AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUYJLTTTxyu6SDnBbjC0OH4OYOS3owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I0MTcwMjk3LWRhNjUtNGY2OS05YzA0LTFlYjdkYTg2MjI1OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84gFAwDQYJKoZIhvcNAQELBQADggEBACXDx8tWlIbRh6Io+KQnRw4r
IHT9CUU/TKWImt3rmg2WX9d6UVZmhiXwvqDqQnexnrUUbHpUj7QIgSCvDlxC1f3A
lTzTYrTxzSHXUte4qwdnHJj1AqvrmS1bpp5NbUmRL5zjMKDHnEaOaSV1+LNu6w6k
6U3APa0DyySbUzvbbguFggJO0j1OEJj9YXF8/q7EZMxFyhL8O/aHC3y1t/zPvOpA
rHcF9102Q9SdXPISq0jF0DBJ1VZqHAHyioAukdhDJrOthTrs7i/PD1b2Ndi+nrWf
iS6hFy1y80U1bHOD1dC4m71I1jQE390zDmiLXQ5k/UZOjwQlRY5SyoiZsqQlhcw=
-----END CERTIFICATE-----
Generated at Sat Oct 31 12:09:57 2026 by rpki-client