
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa
File: 074a6652-0769-407c-8a7b-8b362f4c155f.roa (raw, json)
Hash identifier: oZK37XqHnvRVDoK9H9UadjoD/AAl6iAzidJ4zGjwUec=
Subject key identifier: D6:18:DA:EC:F6:55:41:0A:E4:BA:F8:47:C3:C6:51:4F:A0:E7:63:31
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C4563525889856107A9042EB548860FF450926F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa
Signing time: Tue 10 Feb 2026 00:10:11 +0000
ROA not before: Tue 10 Feb 2026 00:10:11 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 174.141.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:45:63:52:58:89:85:61:07:a9:04:2e:b5:48:86:0f:f4:50:92:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:10:11 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=b9c7db213429e185a3425bdcd35c11647ae28967ff369526fcb5309488460be4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ce:23:32:ea:16:a2:97:e8:fe:d3:90:4a:b1:
c7:55:96:56:71:c6:9f:e4:05:4f:36:43:f9:15:3e:
51:9e:f0:dc:a3:da:5d:ab:5c:a2:76:a9:18:ef:3f:
c2:e5:6c:84:03:a1:eb:65:40:36:57:cc:16:64:24:
22:e4:bf:4c:96:3d:0a:cf:8d:b4:32:b5:9a:15:c8:
31:b4:dc:84:39:a4:10:30:f7:40:e9:73:d4:b6:23:
cb:be:a7:67:9f:a1:9f:ed:14:44:85:fb:7c:3d:72:
32:a6:5f:7c:39:f2:66:22:4f:e1:42:8b:41:f0:5b:
ec:99:0e:3a:5e:cd:d5:94:47:55:51:53:18:03:e0:
ae:09:ab:27:d1:c1:b0:01:94:7e:16:7b:af:58:e2:
ce:df:01:82:85:90:bd:7d:4c:2c:2d:fe:a9:95:b8:
0f:a5:2b:13:d3:e8:3f:66:7b:cd:d3:f8:02:b1:29:
ee:c3:f1:94:88:e9:d5:f7:bc:3b:a2:db:bb:7d:ec:
fd:72:7a:6e:e7:5d:53:4f:3c:4b:0d:91:9f:7c:3a:
d2:80:03:32:40:b0:40:5d:a8:3a:43:f3:1d:17:0d:
dc:32:e6:24:c1:b1:f6:b7:66:ee:cc:6b:ad:3f:5a:
11:d7:ba:d3:0d:8a:7a:d5:bc:6c:90:f5:d5:ef:c5:
d9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:18:DA:EC:F6:55:41:0A:E4:BA:F8:47:C3:C6:51:4F:A0:E7:63:31
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/074a6652-0769-407c-8a7b-8b362f4c155f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
174.141.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3c:c3:0b:b8:63:01:3a:43:fc:b0:66:90:c9:af:2c:50:09:cc:
7c:18:41:e8:54:78:d9:68:b4:53:7a:23:13:a4:5c:72:a0:26:
66:ae:c5:b8:09:a0:e1:0f:c6:2d:76:1b:d6:b1:ca:ec:0c:1f:
16:1d:90:cd:79:ef:b9:73:07:bd:e8:be:27:2d:5a:75:f9:e5:
cb:27:30:07:b4:2a:d8:5b:b0:c4:ad:b3:74:be:09:de:01:12:
99:17:1a:c0:b6:c3:58:1c:e7:68:ad:5e:66:71:0c:91:a6:6b:
2a:7e:18:47:02:a1:6f:fb:c9:47:39:b9:0a:d3:b6:21:c6:3b:
92:80:35:14:af:7d:5d:a5:14:ec:58:75:8b:e8:8b:d7:20:7a:
98:68:c5:01:f2:02:1e:3c:a6:2a:9b:47:6e:f2:b7:38:c7:1b:
1c:58:86:7b:43:41:3c:73:11:87:b0:d7:26:f5:5d:2b:fa:67:
e5:8d:1e:ae:7b:9a:21:34:84:36:8e:61:3c:a7:c4:f7:31:09:
d6:cf:35:78:a7:82:7e:d0:8e:77:5f:7f:9a:39:25:79:51:ff:
ee:38:e3:4c:5d:f9:84:d8:ab:0d:5b:70:3a:89:b2:4a:82:3e:
83:f0:4c:aa:5c:bd:d8:6c:9f:58:bc:be:53:81:f0:42:bd:bb:
87:51:ac:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULEVjUliJhWEHqQQutUiGD/RQkm8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEwMDAxMDExWhcNMjYwNTExMjM1OTU5
WjB6MUkwRwYDVQQFE0BiOWM3ZGIyMTM0MjllMTg1YTM0MjViZGNkMzVjMTE2NDdh
ZTI4OTY3ZmYzNjk1MjZmY2I1MzA5NDg4NDYwYmU0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCbziMy6hail+j+05BKscdVllZxxp/kBU82Q/kVPlGe8Nyj
2l2rXKJ2qRjvP8LlbIQDoetlQDZXzBZkJCLkv0yWPQrPjbQytZoVyDG03IQ5pBAw
90Dpc9S2I8u+p2efoZ/tFESF+3w9cjKmX3w58mYiT+FCi0HwW+yZDjpezdWUR1VR
UxgD4K4JqyfRwbABlH4We69Y4s7fAYKFkL19TCwt/qmVuA+lKxPT6D9me83T+AKx
Ke7D8ZSI6dX3vDui27t97P1yem7nXVNPPEsNkZ98OtKAAzJAsEBdqDpD8x0XDdwy
5iTBsfa3Zu7Ma60/WhHXutMNinrVvGyQ9dXvxdmDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1hja7PZVQQrkuvhHw8ZRT6DnYzEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA3NGE2NjUyLTA3NjktNDA3Yy04YTdiLThiMzYyZjRjMTU1Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAeujQAwDQYJKoZIhvcNAQELBQADggEBADzDC7hjATpD/LBmkMmvLFAJzHwY
QehUeNlotFN6IxOkXHKgJmauxbgJoOEPxi12G9axyuwMHxYdkM1577lzB73ovict
WnX55csnMAe0KthbsMSts3S+Cd4BEpkXGsC2w1gc52itXmZxDJGmayp+GEcCoW/7
yUc5uQrTtiHGO5KANRSvfV2lFOxYdYvoi9cgephoxQHyAh48piqbR27ytzjHGxxY
hntDQTxzEYew1yb1XSv6Z+WNHq57miE0hDaOYTynxPcxCdbPNXingn7Qjndff5o5
JXlR/+4440xd+YTYqw1bcDqJskqCPoPwTKpcvdhsn1i8vlOB8EK9u4dRrJQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:23:46 2026 by rpki-client