
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa07271c-7ff8-47ba-b203-1c59b3a6411b.roa
File: fa07271c-7ff8-47ba-b203-1c59b3a6411b.roa (raw, json)
Hash identifier: riviwfY7Uqybf1lO8aQYBvMc9qKbdyL+8anTEOe2s/I=
Subject key identifier: 07:37:20:A4:4C:EF:04:D0:D9:C1:04:A7:F0:DA:CB:32:DD:70:8A:C9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5D62FE05AA98B0323E706932227879572A061856
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa07271c-7ff8-47ba-b203-1c59b3a6411b.roa
Signing time: Tue 04 Aug 2026 00:20:12 +0000
ROA not before: Tue 04 Aug 2026 00:20:12 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f28::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:62:fe:05:aa:98:b0:32:3e:70:69:32:22:78:79:57:2a:06:18:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 00:20:12 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=1654237089404cfd0e3cc5e7e9411fed750161ad800ca738e10333219910137e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:36:31:2d:e2:2d:e0:7e:e4:e0:20:38:d2:48:
d1:b7:6f:9f:12:9a:fd:31:e2:dd:87:19:22:82:9d:
36:03:07:a1:9e:ae:e7:1e:e2:31:21:63:dd:e1:92:
6d:46:8b:4f:ef:47:77:8d:12:a4:8e:74:ee:bb:d5:
a1:0e:f2:89:63:9b:77:61:27:86:66:85:3e:68:37:
df:9e:98:1b:51:c9:4c:d2:aa:21:3e:b3:55:10:3f:
b1:46:af:9e:73:fa:be:7e:3f:7f:f4:33:81:3a:dc:
23:6c:d0:48:94:81:86:ee:2e:7d:36:d9:eb:1d:11:
81:43:1c:fb:71:be:27:6e:93:89:45:b3:6c:fa:a7:
cb:e2:07:4e:13:5b:72:f2:19:bd:c7:cc:de:ed:56:
1b:23:48:c9:85:14:4e:67:bc:97:8e:a8:63:6e:75:
54:85:56:73:df:a7:4d:b4:ce:3c:99:e6:92:21:9e:
b7:03:fe:ee:d3:f7:2e:e0:bb:af:ad:58:fc:7a:a0:
6a:de:7e:bd:86:b2:ae:0d:a7:7f:19:b4:3c:b4:86:
33:72:1b:3e:cc:5a:6e:68:09:23:1e:76:05:27:68:
72:39:07:8f:a9:e8:c5:23:45:d8:ab:06:87:a1:e8:
f5:b5:7c:85:7f:b4:21:dc:5c:ee:04:8b:c4:0a:a6:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:37:20:A4:4C:EF:04:D0:D9:C1:04:A7:F0:DA:CB:32:DD:70:8A:C9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fa07271c-7ff8-47ba-b203-1c59b3a6411b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f28::/36
Signature Algorithm: sha256WithRSAEncryption
10:40:f5:58:1b:08:79:07:7f:24:71:a7:bb:14:f5:12:1b:c6:
38:94:6c:96:04:8e:6c:92:bf:99:af:de:a3:16:a2:96:3d:45:
a1:de:39:54:33:bd:d3:ec:35:64:31:7c:1d:83:7d:c2:08:d0:
c6:31:a4:fe:12:66:b6:20:b4:67:82:0e:22:82:9c:2d:fd:d5:
0d:79:b8:3b:ea:de:e1:75:2d:3f:8d:c8:3f:5e:27:5f:b1:6b:
99:a9:73:e2:a7:a9:0a:53:93:8e:c3:3b:c0:05:39:07:4b:cc:
ff:87:3d:fb:a0:05:37:b3:b9:8c:08:1b:d6:96:f9:1d:c3:93:
02:07:3a:0d:d7:8e:e4:73:45:2f:f3:16:ec:68:a9:74:c2:47:
19:62:bc:79:a3:ea:81:e4:c0:e9:38:30:c6:1b:cd:8c:c2:a7:
f1:5b:1d:99:f4:e6:b2:a2:e4:ae:09:f7:80:2a:a2:9f:d0:04:
53:85:e8:ee:0a:ec:b9:d1:ac:e5:56:ed:a9:2b:8b:bc:5e:58:
1a:bb:01:30:dc:a6:58:3e:83:d1:23:21:74:b9:ed:6b:2f:17:
29:2f:c3:f3:b8:02:7e:ac:d9:9e:fc:7c:5c:8d:de:45:f8:4b:
a9:19:b9:cd:f4:b2:9e:c3:2d:91:c4:36:23:a6:78:3a:e5:4d:
59:df:56:be
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUXWL+BaqYsDI+cGkyInh5VyoGGFYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDAyMDEyWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AxNjU0MjM3MDg5NDA0Y2ZkMGUzY2M1ZTdlOTQxMWZlZDc1
MDE2MWFkODAwY2E3MzhlMTAzMzMyMTk5MTAxMzdlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDrNjEt4i3gfuTgIDjSSNG3b58Smv0x4t2HGSKCnTYDB6Ge
ruce4jEhY93hkm1Gi0/vR3eNEqSOdO671aEO8oljm3dhJ4ZmhT5oN9+emBtRyUzS
qiE+s1UQP7FGr55z+r5+P3/0M4E63CNs0EiUgYbuLn022esdEYFDHPtxviduk4lF
s2z6p8viB04TW3LyGb3HzN7tVhsjSMmFFE5nvJeOqGNudVSFVnPfp020zjyZ5pIh
nrcD/u7T9y7gu6+tWPx6oGrefr2Gsq4Np38ZtDy0hjNyGz7MWm5oCSMedgUnaHI5
B4+p6MUjRdirBoeh6PW1fIV/tCHcXO4Ei8QKpoHFAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUBzcgpEzvBNDZwQSn8NrLMt1wiskwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZhMDcyNzFjLTdmZjgtNDdiYS1iMjAzLTFjNTliM2E2NDExYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8oADANBgkqhkiG9w0BAQsFAAOCAQEAEED1WBsIeQd/JHGnuxT1EhvG
OJRslgSObJK/ma/eoxailj1Fod45VDO90+w1ZDF8HYN9wgjQxjGk/hJmtiC0Z4IO
IoKcLf3VDXm4O+re4XUtP43IP14nX7Frmalz4qepClOTjsM7wAU5B0vM/4c9+6AF
N7O5jAgb1pb5HcOTAgc6DdeO5HNFL/MW7GipdMJHGWK8eaPqgeTA6TgwxhvNjMKn
8VsdmfTmsqLkrgn3gCqin9AEU4Xo7grsudGs5VbtqSuLvF5YGrsBMNymWD6D0SMh
dLntay8XKS/D87gCfqzZnvx8XI3eRfhLqRm5zfSynsMtkcQ2I6Z4OuVNWd9Wvg==
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:09 2026 by rpki-client