
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa
File: 089a9530-fe26-4bbb-b150-6e821d16225e.roa (raw, json)
Hash identifier: xP3GxYerR3mycsz8EMRFJ+j0Z6bTcnqttixCDh/ZUTk=
Subject key identifier: AC:C5:14:9B:E4:31:B0:0B:91:7C:F5:D7:21:AC:C4:7C:64:A7:FF:E1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1F1B1D872A495CAC3C44168F2FE387FE773B1C77
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa
Signing time: Tue 24 Feb 2026 01:01:29 +0000
ROA not before: Tue 24 Feb 2026 01:01:29 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f38:80c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:1b:1d:87:2a:49:5c:ac:3c:44:16:8f:2f:e3:87:fe:77:3b:1c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 01:01:29 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=18f0a011d21b2bf46b3c9a9715162c857b9591f7c636011af594a80eb4637c3f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:85:5f:b8:4b:a5:b4:76:ab:ed:2e:7f:37:a6:
aa:af:9d:3e:a0:98:0e:52:34:6e:8e:02:8b:c1:1a:
27:c0:9c:f9:ac:03:9f:76:48:ec:60:9e:6f:3e:f2:
83:57:9f:d2:5a:00:49:de:f2:aa:e7:31:e8:6d:a3:
a1:b0:dc:3c:42:10:d7:9c:9b:36:44:42:fd:dd:ad:
f1:c5:7f:86:28:77:11:18:54:36:61:e3:cc:f1:f0:
d5:a4:33:08:af:bf:4c:8c:af:df:ee:2c:14:b1:94:
da:05:b3:00:a5:11:c9:2f:04:9c:32:83:e3:c8:23:
1c:6c:da:6f:03:b1:37:e8:c0:46:f5:8e:2f:98:ef:
03:48:f8:16:3a:46:54:a6:92:22:69:c0:3a:d5:e4:
47:3b:8d:38:32:79:fc:71:f1:54:80:31:f3:eb:5c:
0c:a5:c4:cf:b4:b4:f9:2a:ae:15:44:d8:2c:d7:9d:
23:20:80:48:74:58:bd:7a:04:89:73:67:4e:3b:28:
d4:ac:7a:f1:88:d7:80:1c:f0:ae:db:ab:7e:13:38:
09:0c:64:a9:f6:eb:e5:20:b2:37:71:19:8d:bf:28:
7b:3d:1f:42:db:62:56:34:42:3c:0f:39:33:e2:9d:
c5:e8:6d:89:eb:48:1e:d0:14:3d:cf:83:bf:fd:c6:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:14:9B:E4:31:B0:0B:91:7C:F5:D7:21:AC:C4:7C:64:A7:FF:E1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/089a9530-fe26-4bbb-b150-6e821d16225e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:80c0::/48
Signature Algorithm: sha256WithRSAEncryption
ab:0d:49:2e:bf:0a:23:dd:b4:08:af:33:21:3e:a8:f1:e6:a5:
3f:a4:3f:ce:ea:57:18:4b:54:73:9d:bd:fe:b2:4a:e0:cb:8b:
5e:55:e4:4d:71:d0:3e:68:cd:e2:c3:96:90:75:78:6c:54:99:
41:12:27:12:9b:57:9f:79:9c:22:aa:0b:65:c3:7e:b0:70:9a:
d8:06:57:1d:96:1a:e4:ee:00:33:44:8b:f2:c1:cb:79:90:bd:
7d:31:74:5a:36:ce:0f:7e:6b:2e:b1:4f:4f:ce:62:6d:be:15:
a7:76:15:2e:82:01:36:1b:d9:ad:db:1a:b4:16:ce:21:c2:ea:
e5:db:a2:1a:6a:1b:80:69:92:64:3b:69:7d:8a:b1:9d:66:ac:
a8:d9:61:d1:e4:3a:b6:70:67:a1:db:46:db:fa:09:07:d8:53:
ba:65:6c:26:87:34:2a:c4:01:30:d7:2a:fc:8b:f3:31:1c:5d:
78:58:20:98:00:d3:b1:18:8a:98:c4:b0:a5:32:2c:9a:69:5c:
6b:5a:fb:f2:07:91:69:68:29:5a:d8:e2:f5:44:7e:d0:cd:00:
f7:87:70:f1:0f:e9:54:21:2a:e2:11:22:35:3c:78:5c:00:b8:
c2:38:88:48:98:d1:f3:46:a3:a6:bf:7f:d6:20:f7:23:f3:e7:
50:a5:a6:6a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHxsdhypJXKw8RBaPL+OH/nc7HHcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDEwMTI5WhcNMjYwNTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxOGYwYTAxMWQyMWIyYmY0NmIzYzlhOTcxNTE2MmM4NTdi
OTU5MWY3YzYzNjAxMWFmNTk0YTgwZWI0NjM3YzNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCxhV+4S6W0dqvtLn83pqqvnT6gmA5SNG6OAovBGifAnPms
A592SOxgnm8+8oNXn9JaAEne8qrnMehto6Gw3DxCENecmzZEQv3drfHFf4YodxEY
VDZh48zx8NWkMwivv0yMr9/uLBSxlNoFswClEckvBJwyg+PIIxxs2m8DsTfowEb1
ji+Y7wNI+BY6RlSmkiJpwDrV5Ec7jTgyefxx8VSAMfPrXAylxM+0tPkqrhVE2CzX
nSMggEh0WL16BIlzZ047KNSsevGI14Ac8K7bq34TOAkMZKn26+UgsjdxGY2/KHs9
H0LbYlY0QjwPOTPincXobYnrSB7QFD3Pg7/9xnehAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUrMUUm+QxsAuRfPXXIazEfGSn/+EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4OWE5NTMwLWZlMjYtNGJiYi1iMTUwLTZlODIxZDE2MjI1ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84gMAwDQYJKoZIhvcNAQELBQADggEBAKsNSS6/CiPdtAivMyE+qPHm
pT+kP87qVxhLVHOdvf6ySuDLi15V5E1x0D5ozeLDlpB1eGxUmUESJxKbV595nCKq
C2XDfrBwmtgGVx2WGuTuADNEi/LBy3mQvX0xdFo2zg9+ay6xT0/OYm2+Fad2FS6C
ATYb2a3bGrQWziHC6uXbohpqG4BpkmQ7aX2KsZ1mrKjZYdHkOrZwZ6HbRtv6CQfY
U7plbCaHNCrEATDXKvyL8zEcXXhYIJgA07EYipjEsKUyLJppXGta+/IHkWloKVrY
4vVEftDNAPeHcPEP6VQhKuIRIjU8eFwAuMI4iEiY0fNGo6a/f9Yg9yPz51Clpmo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:44 2026 by rpki-client