
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef3c49f5-b8ef-4735-8713-b92ec4281592.roa
File: ef3c49f5-b8ef-4735-8713-b92ec4281592.roa (raw, json)
Hash identifier: Vbqd8R2ermkO6EDAUTKzW7ohabwyoK0JhvnTLHHMDlI=
Subject key identifier: 4A:DE:A3:5A:41:CB:DD:D7:22:DD:D8:61:45:20:A8:42:F4:99:D0:0F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53F16BC1A9B0A156873955E7C3D5FCE89D9714E3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef3c49f5-b8ef-4735-8713-b92ec4281592.roa
Signing time: Mon 10 Aug 2026 00:21:20 +0000
ROA not before: Mon 10 Aug 2026 00:21:20 +0000
ROA not after: Sun 08 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe8:2080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:f1:6b:c1:a9:b0:a1:56:87:39:55:e7:c3:d5:fc:e8:9d:97:14:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 10 00:21:20 2026 GMT
Not After : Nov 8 23:59:59 2026 GMT
Subject: serialNumber=67ff7b7194392fd74699733e088f1389156780b7e315ec368329e4574622ca29, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a2:fd:b3:78:f2:00:92:91:77:a7:f5:13:c9:
05:9d:73:9d:94:e0:96:70:23:b5:e3:97:bd:f7:90:
9a:8a:d4:77:8a:38:0d:ae:ee:ba:8c:12:76:ea:9d:
78:bd:c8:f9:c2:0e:7a:c0:42:58:65:c6:13:63:32:
ed:81:49:59:38:eb:6d:f4:d4:01:59:3e:36:62:8c:
8e:21:3f:11:ad:f3:4e:42:47:0b:7e:fc:2f:76:a9:
b6:ba:b0:bb:b3:d4:99:5a:05:32:c2:1a:95:02:37:
5a:af:39:27:3f:a1:c5:c7:7d:13:08:32:e7:bf:c4:
54:72:91:e1:41:dd:0e:dc:95:cb:71:98:8a:98:2e:
c3:a0:4b:0c:7c:f7:47:9c:8c:ed:88:85:03:c1:c2:
2e:02:82:e5:3a:ee:ba:be:63:98:97:6f:54:70:e4:
11:66:2e:d5:af:89:ee:9c:d3:48:62:77:7a:65:6f:
ab:8a:97:56:3f:47:a0:ad:08:1b:34:13:9a:a3:1c:
b1:2e:f4:64:99:b5:0d:40:cf:15:b5:f6:b7:dd:44:
86:00:a8:aa:aa:79:40:7e:92:ab:1a:aa:ee:fe:4d:
5f:66:2f:63:97:d7:37:5f:9d:ac:e8:3e:f4:14:fc:
41:f1:65:26:d2:cf:4f:26:ae:3b:ff:80:d2:28:e4:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:A3:5A:41:CB:DD:D7:22:DD:D8:61:45:20:A8:42:F4:99:D0:0F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ef3c49f5-b8ef-4735-8713-b92ec4281592.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe8:2080::/48
Signature Algorithm: sha256WithRSAEncryption
b3:80:2b:d3:4b:a4:37:15:7c:e9:78:49:0c:6d:dd:5a:1a:94:
94:f3:34:5d:1b:68:56:49:d9:0d:ea:40:cd:d5:ab:7b:e3:d8:
45:58:d0:2a:5c:cf:7e:ee:dc:7f:64:30:33:f4:2a:51:7c:bf:
7c:f7:71:65:ee:57:d4:17:a4:0f:11:2a:aa:7c:47:97:5d:c5:
be:e6:f1:32:39:dd:65:2c:53:02:70:9b:da:f6:5e:d1:df:7e:
86:bc:c3:26:e7:a1:dc:ea:52:db:b9:3a:91:c0:a7:f3:d3:1b:
ab:7e:13:07:22:dc:23:05:68:cf:04:10:ab:aa:18:8f:04:5d:
d4:b2:ab:99:17:83:09:ba:a4:25:d5:ae:89:9d:c5:34:ff:9c:
44:94:11:80:39:a2:4a:55:a4:1f:35:51:7b:d7:c1:24:8d:ea:
94:e1:b9:7f:fb:96:af:58:f4:d9:4a:34:0c:20:8b:30:d9:cd:
3c:26:87:c6:0f:cb:c4:bd:d3:3b:7c:2b:75:f5:a9:05:04:31:
dc:5c:2a:a8:3e:d2:a3:46:3e:37:fa:80:ed:00:db:e1:8a:a6:
9f:2b:bc:ec:6b:12:22:58:9c:de:78:5e:c2:9e:47:78:a4:08:
30:16:10:ac:fe:82:ea:16:3e:e6:13:23:65:54:86:fe:b9:21:
d8:9d:fd:ca
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUU/FrwamwoVaHOVXnw9X86J2XFOMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODEwMDAyMTIwWhcNMjYxMTA4MjM1OTU5
WjB6MUkwRwYDVQQFE0A2N2ZmN2I3MTk0MzkyZmQ3NDY5OTczM2UwODhmMTM4OTE1
Njc4MGI3ZTMxNWVjMzY4MzI5ZTQ1NzQ2MjJjYTI5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCov2zePIAkpF3p/UTyQWdc52U4JZwI7Xjl733kJqK1HeK
OA2u7rqMEnbqnXi9yPnCDnrAQlhlxhNjMu2BSVk462301AFZPjZijI4hPxGt805C
Rwt+/C92qba6sLuz1JlaBTLCGpUCN1qvOSc/ocXHfRMIMue/xFRykeFB3Q7clctx
mIqYLsOgSwx890ecjO2IhQPBwi4CguU67rq+Y5iXb1Rw5BFmLtWvie6c00hid3pl
b6uKl1Y/R6CtCBs0E5qjHLEu9GSZtQ1AzxW19rfdRIYAqKqqeUB+kqsaqu7+TV9m
L2OX1zdfnazoPvQU/EHxZSbSz08mrjv/gNIo5E29AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUSt6jWkHL3dci3dhhRSCoQvSZ0A8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmM2M0OWY1LWI4ZWYtNDczNS04NzEzLWI5MmVjNDI4MTU5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/oIIAwDQYJKoZIhvcNAQELBQADggEBALOAK9NLpDcVfOl4SQxt3Voa
lJTzNF0baFZJ2Q3qQM3Vq3vj2EVY0Cpcz37u3H9kMDP0KlF8v3z3cWXuV9QXpA8R
Kqp8R5ddxb7m8TI53WUsUwJwm9r2XtHffoa8wybnodzqUtu5OpHAp/PTG6t+Ewci
3CMFaM8EEKuqGI8EXdSyq5kXgwm6pCXVromdxTT/nESUEYA5okpVpB81UXvXwSSN
6pThuX/7lq9Y9NlKNAwgizDZzTwmh8YPy8S90zt8K3X1qQUEMdxcKqg+0qNGPjf6
gO0A2+GKpp8rvOxrEiJYnN54XsKeR3ikCDAWEKz+guoWPuYTI2VUhv65Idid/co=
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:10:02 2026 by rpki-client