
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc263c4-eedd-4628-860d-5b0a2aeb2d2a.roa
File: efc263c4-eedd-4628-860d-5b0a2aeb2d2a.roa (raw, json)
Hash identifier: 3ww0u7SpucPYSciTFOZdX8xAdiboDZMCphyFYORxBk4=
Subject key identifier: 60:82:F0:AE:96:94:57:A5:3E:E6:78:3E:74:C3:67:D4:1B:41:BC:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07189AFE74EE284350A1823E1D9A5530E2DDCC3B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc263c4-eedd-4628-860d-5b0a2aeb2d2a.roa
Signing time: Tue 04 Aug 2026 01:51:17 +0000
ROA not before: Tue 04 Aug 2026 01:51:17 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f1e:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:18:9a:fe:74:ee:28:43:50:a1:82:3e:1d:9a:55:30:e2:dd:cc:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 01:51:17 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=d95dab0cb96ad659074d818db687e070eac75d08033959f1f9e700257897702a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:14:82:06:70:27:8e:cc:d8:3d:21:6d:e8:9e:
51:85:cd:9a:1e:e3:99:83:8c:a9:fa:73:e6:02:5f:
89:59:5a:74:22:b5:00:13:67:6b:de:bd:68:37:75:
03:8e:4c:bf:11:d5:4a:e6:5c:80:a3:e7:82:fd:fb:
b8:9c:9a:8f:9f:40:e5:34:14:b6:34:44:d8:fa:e2:
22:cb:8f:ec:99:4b:be:2c:03:4b:7c:ef:8c:eb:f5:
af:02:4e:be:71:dc:0b:f1:4b:5c:f4:d9:0f:f8:cb:
26:dd:6b:08:fd:a5:5a:e2:9e:70:b0:fc:a3:d1:94:
0d:54:e0:34:30:17:8b:aa:64:0a:9d:b2:28:bd:7f:
da:8d:92:28:e9:6c:98:24:fe:6a:93:d3:a5:8f:14:
45:f8:1f:5d:b5:e3:9b:07:31:98:f3:5e:ed:0a:2e:
3e:11:89:6a:18:47:8d:64:15:d1:8d:67:10:59:dd:
94:e0:ab:40:41:ab:ee:74:95:77:8c:a0:c6:cb:af:
e1:3e:52:f6:6f:50:fa:5d:ca:4c:8f:f4:a0:b5:d3:
d6:10:39:d9:27:b8:2a:68:0f:ae:88:48:fb:c6:c2:
80:f8:ca:4f:f0:97:3b:93:cf:ed:d6:42:54:f3:d0:
ae:7c:da:c8:cd:98:30:18:6a:e3:89:05:6c:b8:fb:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:82:F0:AE:96:94:57:A5:3E:E6:78:3E:74:C3:67:D4:1B:41:BC:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/efc263c4-eedd-4628-860d-5b0a2aeb2d2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f1e:4000::/36
Signature Algorithm: sha256WithRSAEncryption
4f:62:ad:a4:33:79:f4:b0:a3:2b:b4:42:70:83:cc:33:dc:eb:
4b:fe:5f:b3:cc:e2:97:97:e7:8b:ad:61:9f:86:5d:a7:a7:ae:
71:94:41:54:6c:2e:45:3f:39:45:f7:2a:0a:2e:14:75:88:98:
b0:ef:93:e4:23:73:c8:51:ed:02:8e:fa:57:65:28:d7:5e:0d:
b4:8f:00:c2:70:17:bb:45:f7:3b:bd:fa:c7:98:8e:e4:c8:7c:
22:72:b7:5f:2f:0c:51:06:be:93:cf:dc:69:04:64:54:59:35:
14:2d:62:58:11:82:94:97:f2:09:fe:b4:37:39:89:08:f8:f6:
f7:09:9a:01:e5:d1:86:64:31:af:40:32:de:c7:13:a3:2a:a7:
4a:76:a9:44:17:ca:3f:a2:4f:73:3c:59:07:57:ad:47:ff:77:
95:53:a3:e5:90:a9:54:0f:85:36:8a:ea:04:35:af:cf:de:3e:
8a:1d:93:ed:4c:aa:73:4b:85:2b:45:56:98:20:03:b1:ee:60:
30:3e:9c:e1:06:72:ef:51:82:11:2b:41:de:3b:54:aa:77:73:
98:2b:59:51:38:2a:5b:73:7a:17:05:22:2d:7a:9a:33:09:82:
d8:4f:64:ad:48:f9:8f:f1:b6:f1:52:2f:3d:3b:95:99:51:5b:
3b:d6:89:fe
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUBxia/nTuKENQoYI+HZpVMOLdzDswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDE1MTE3WhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BkOTVkYWIwY2I5NmFkNjU5MDc0ZDgxOGRiNjg3ZTA3MGVh
Yzc1ZDA4MDMzOTU5ZjFmOWU3MDAyNTc4OTc3MDJhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCZFIIGcCeOzNg9IW3onlGFzZoe45mDjKn6c+YCX4lZWnQi
tQATZ2vevWg3dQOOTL8R1UrmXICj54L9+7icmo+fQOU0FLY0RNj64iLLj+yZS74s
A0t874zr9a8CTr5x3AvxS1z02Q/4yybdawj9pVrinnCw/KPRlA1U4DQwF4uqZAqd
sii9f9qNkijpbJgk/mqT06WPFEX4H12145sHMZjzXu0KLj4RiWoYR41kFdGNZxBZ
3ZTgq0BBq+50lXeMoMbLr+E+UvZvUPpdykyP9KC109YQOdknuCpoD66ISPvGwoD4
yk/wlzuTz+3WQlTz0K582sjNmDAYauOJBWy4+wITAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUYILwrpaUV6U+5ng+dMNn1BtBvHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2VmYzI2M2M0LWVlZGQtNDYyOC04NjBkLTViMGEyYWViMmQyYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8eQDANBgkqhkiG9w0BAQsFAAOCAQEAT2KtpDN59LCjK7RCcIPMM9zr
S/5fs8zil5fni61hn4Zdp6eucZRBVGwuRT85RfcqCi4UdYiYsO+T5CNzyFHtAo76
V2Uo114NtI8AwnAXu0X3O736x5iO5Mh8InK3Xy8MUQa+k8/caQRkVFk1FC1iWBGC
lJfyCf60NzmJCPj29wmaAeXRhmQxr0Ay3scToyqnSnapRBfKP6JPczxZB1etR/93
lVOj5ZCpVA+FNorqBDWvz94+ih2T7Uyqc0uFK0VWmCADse5gMD6c4QZy71GCEStB
3jtUqndzmCtZUTgqW3N6FwUiLXqaMwmC2E9krUj5j/G28VIvPTuVmVFbO9aJ/g==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:19:44 2026 by rpki-client