
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f34b9bf-5f74-4ed7-8405-02becc59f229.roa
File: 0f34b9bf-5f74-4ed7-8405-02becc59f229.roa (raw, json)
Hash identifier: 8nz39nyijvYeRC3AujB2LPVDpjn9mKjwrtAmJ81aLUM=
Subject key identifier: AF:FA:76:B8:DE:8C:B3:B5:60:F8:38:43:88:B4:B3:77:29:A2:AB:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1E01780D184E839C9A221DC7A8434E558570F1E2
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f34b9bf-5f74-4ed7-8405-02becc59f229.roa
Signing time: Sat 16 May 2026 01:10:52 +0000
ROA not before: Sat 16 May 2026 01:10:52 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f70:a400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:01:78:0d:18:4e:83:9c:9a:22:1d:c7:a8:43:4e:55:85:70:f1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:10:52 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=5a6abc08c21c4d3b41ddc14d03fe593f3d9b13ad85a036ab30f0315affdbe735, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:34:36:8c:6f:6c:e1:31:ab:4a:20:58:af:
7c:b5:87:9d:de:d8:f4:40:02:6c:d2:27:19:73:b1:
34:99:40:d4:6b:0f:47:d7:7f:da:c5:0d:cc:38:4d:
b2:45:6f:15:34:78:fa:09:58:1a:c4:45:17:cd:4a:
9a:c2:ac:86:09:b1:72:40:ff:b2:b8:6e:40:e4:13:
5b:68:96:7f:77:fa:f9:f2:48:9d:f5:dd:fd:d4:f5:
4a:1d:c8:6f:51:29:61:d4:bc:1e:c9:ff:ec:3b:2e:
ca:15:a7:af:ff:fd:3b:08:21:20:3a:00:c1:05:b3:
bd:95:fe:ea:49:50:75:61:18:86:9b:4c:9e:da:9f:
50:95:fe:d9:d8:a3:ac:a5:43:cd:fe:ef:6a:a3:23:
9a:2a:11:b0:e5:12:58:7e:10:4a:a3:7b:0b:a5:bf:
93:52:33:bc:46:a2:47:cd:51:df:1d:ed:75:1c:67:
0a:a7:43:d5:81:64:48:7f:2b:ec:83:bc:7b:1c:ba:
d3:a8:62:db:b5:1c:99:f4:67:d5:a5:ac:18:ad:4e:
b3:cc:15:8b:9d:60:88:00:88:57:79:d1:d5:88:9f:
c2:25:14:2b:65:88:b6:49:69:0c:d8:6a:a3:df:9e:
39:5e:81:8d:08:bb:0d:c0:6a:02:ae:63:4c:48:36:
17:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FA:76:B8:DE:8C:B3:B5:60:F8:38:43:88:B4:B3:77:29:A2:AB:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f34b9bf-5f74-4ed7-8405-02becc59f229.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f70:a400::/40
Signature Algorithm: sha256WithRSAEncryption
7a:be:2b:ca:0c:8c:0e:92:fa:2a:e7:2f:9d:79:6f:53:56:62:
15:c7:67:c9:21:8e:7c:2c:d4:f9:7c:95:e3:a0:cd:59:0a:ab:
69:53:1f:fd:a6:5f:f7:74:2a:2b:7e:78:dc:8f:49:d0:8f:69:
fa:dd:21:2d:00:04:77:93:e2:5b:22:ee:a3:e3:85:cc:e1:83:
11:e0:33:29:72:e5:58:94:31:00:7d:2f:83:52:34:ba:49:4e:
95:cc:89:c4:91:9d:e2:d8:fc:14:85:13:87:09:09:71:37:e4:
40:fb:61:0c:56:97:75:e3:c0:c7:5f:df:47:b7:fe:2a:df:ad:
3e:2b:9d:8f:59:75:ba:0f:3c:ec:db:6d:40:fa:5e:ab:b7:ae:
6c:ed:8c:eb:04:ec:05:26:8d:38:16:54:30:b7:46:85:0e:ee:
b0:bf:bf:92:e1:70:58:b2:e3:a9:eb:1f:d5:c4:05:89:2d:de:
9c:f8:58:a2:43:c3:69:0e:8a:39:35:d5:c1:17:fc:0c:f9:a2:
4e:f6:e6:45:e4:73:00:1f:9c:89:2c:7a:9b:4f:53:9c:49:33:
ec:6a:55:48:8d:d2:4a:74:38:59:6b:bd:b7:b1:cc:de:46:65:
82:5c:12:a2:26:ae:4e:ae:cc:24:95:64:4b:75:f4:2a:85:58:
33:7d:e6:f3
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUHgF4DRhOg5yaIh3HqENOVYVw8eIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDExMDUyWhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A1YTZhYmMwOGMyMWM0ZDNiNDFkZGMxNGQwM2ZlNTkzZjNk
OWIxM2FkODVhMDM2YWIzMGYwMzE1YWZmZGJlNzM1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+LTQ2jG9s4TGrSiBYr3y1h53e2PRAAmzSJxlzsTSZQNRr
D0fXf9rFDcw4TbJFbxU0ePoJWBrERRfNSprCrIYJsXJA/7K4bkDkE1toln93+vny
SJ313f3U9UodyG9RKWHUvB7J/+w7LsoVp6///TsIISA6AMEFs72V/upJUHVhGIab
TJ7an1CV/tnYo6ylQ83+72qjI5oqEbDlElh+EEqjewulv5NSM7xGokfNUd8d7XUc
ZwqnQ9WBZEh/K+yDvHscutOoYtu1HJn0Z9WlrBitTrPMFYudYIgAiFd50dWIn8Il
FCtliLZJaQzYaqPfnjlegY0Iuw3AagKuY0xINhf9AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUr/p2uN6Ms7Vg+DhDiLSzdymiq9wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBmMzRiOWJmLTVmNzQtNGVkNy04NDA1LTAyYmVjYzU5ZjIyOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9wpDANBgkqhkiG9w0BAQsFAAOCAQEAer4rygyMDpL6KucvnXlvU1Zi
FcdnySGOfCzU+XyV46DNWQqraVMf/aZf93QqK3543I9J0I9p+t0hLQAEd5PiWyLu
o+OFzOGDEeAzKXLlWJQxAH0vg1I0uklOlcyJxJGd4tj8FIUThwkJcTfkQPthDFaX
dePAx1/fR7f+Kt+tPiudj1l1ug887NttQPpeq7eubO2M6wTsBSaNOBZUMLdGhQ7u
sL+/kuFwWLLjqesf1cQFiS3enPhYokPDaQ6KOTXVwRf8DPmiTvbmReRzAB+ciSx6
m09TnEkz7GpVSI3SSnQ4WWu9t7HM3kZlglwSoiauTq7MJJVkS3X0KoVYM33m8w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:50 2026 by rpki-client