
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
File: 12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa (raw, json)
Hash identifier: mWDjdfCnNmai89wAe0ILoBwtsVQm24WqDyrqD4rpVLs=
Subject key identifier: 50:78:82:74:99:C6:BC:37:8B:63:9E:97:01:15:EB:69:1E:2E:61:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5B77694E58DFDD299D3D2EA364F67A63AD286D64
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
Signing time: Tue 17 Feb 2026 00:10:29 +0000
ROA not before: Tue 17 Feb 2026 00:10:29 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1ff4:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:77:69:4e:58:df:dd:29:9d:3d:2e:a3:64:f6:7a:63:ad:28:6d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 17 00:10:29 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=72211abf97470097c822879d94e07c8cece8d0e79bf5eb0fd0bdf307ad9d30cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:a8:e7:a7:15:16:d4:71:f8:36:81:48:0b:
27:39:66:c3:25:bc:db:8e:ea:5a:91:70:e5:b7:a7:
91:c6:c4:cf:a8:9a:2e:80:7c:69:b5:af:bc:02:be:
ce:75:db:15:ab:95:82:18:f5:d8:39:f9:a0:81:67:
57:87:84:a8:a1:ff:67:bb:24:d7:07:dc:89:b0:52:
06:7c:7f:53:a2:f5:97:53:b5:bd:4b:9b:83:08:bd:
5a:a9:85:63:cd:66:b1:f7:ab:e9:1e:0a:7b:a0:3f:
51:12:77:bc:4e:42:1f:60:30:77:03:39:7f:8b:bb:
64:98:fc:4b:55:b1:1a:2a:5b:59:0c:c7:a0:ec:66:
42:ca:3f:19:7d:9c:79:31:f8:17:c7:7d:c5:74:49:
95:7c:71:a3:9f:04:39:4a:5f:b7:05:ab:31:02:7d:
3b:45:01:78:4b:9e:0e:de:d9:4a:58:fe:1c:ce:67:
ef:99:76:54:4c:a8:2c:c1:a5:74:33:ca:a4:84:60:
76:c0:ef:69:d7:6c:a6:fe:d3:ca:61:e5:73:35:c6:
b3:d1:c4:af:2c:c7:de:49:43:78:88:9c:1c:e4:d6:
2a:31:c8:9f:8a:fe:45:e8:3b:44:fd:0d:79:4e:0d:
4c:48:48:d7:54:f3:a9:96:37:0d:28:16:0c:ee:94:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:78:82:74:99:C6:BC:37:8B:63:9E:97:01:15:EB:69:1E:2E:61:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/12d46d44-c4e3-4542-a08b-4f833b5a0c91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff4:c000::/40
Signature Algorithm: sha256WithRSAEncryption
45:c2:22:d0:94:b5:fe:9f:01:ed:eb:2e:13:85:9e:0e:1d:8a:
e9:66:f9:d4:5d:35:07:ff:a0:53:a2:8a:e7:24:ef:8c:0b:24:
a0:3f:87:44:63:f7:54:f9:cb:31:80:de:3f:70:8c:19:95:eb:
79:3c:64:2a:e4:c8:2a:64:cf:e6:08:1d:76:09:c7:b9:5f:69:
a2:c5:b2:b4:db:05:92:5b:3c:43:a7:86:e8:4e:5b:77:15:ec:
8c:fe:00:8f:9e:0d:e7:98:74:10:0f:1a:b0:95:4b:29:d0:fd:
77:80:91:b0:18:96:8f:d3:61:08:ab:41:5f:bd:f3:5e:a1:fe:
43:f8:d1:cd:67:f6:9b:aa:e1:a1:63:61:da:11:51:ea:fa:87:
1c:c5:81:03:a9:38:c1:f3:47:cf:58:8b:74:2d:68:91:2c:ea:
5e:7b:91:26:bb:dc:ac:c5:a7:b6:ea:04:38:b5:37:da:85:69:
e8:7a:f8:72:43:17:5c:2f:ee:dd:a4:17:87:cc:e3:79:b1:13:
b9:fc:18:2b:ba:bd:88:75:e7:39:13:3e:26:78:8e:af:3f:86:
bf:d3:92:3e:53:64:1a:b6:d9:ee:64:f1:72:e2:8c:66:6f:8e:
cb:93:24:ea:ac:f2:20:0c:d6:c3:d5:fb:a1:52:3e:85:91:5d:
c5:95:62:98
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUW3dpTljf3SmdPS6jZPZ6Y60obWQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE3MDAxMDI5WhcNMjYwNTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MjIxMWFiZjk3NDcwMDk3YzgyMjg3OWQ5NGUwN2M4Y2Vj
ZThkMGU3OWJmNWViMGZkMGJkZjMwN2FkOWQzMGNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4m6jnpxUW1HH4NoFICyc5ZsMlvNuO6lqRcOW3p5HGxM+o
mi6AfGm1r7wCvs512xWrlYIY9dg5+aCBZ1eHhKih/2e7JNcH3ImwUgZ8f1Oi9ZdT
tb1Lm4MIvVqphWPNZrH3q+keCnugP1ESd7xOQh9gMHcDOX+Lu2SY/EtVsRoqW1kM
x6DsZkLKPxl9nHkx+BfHfcV0SZV8caOfBDlKX7cFqzECfTtFAXhLng7e2UpY/hzO
Z++ZdlRMqCzBpXQzyqSEYHbA72nXbKb+08ph5XM1xrPRxK8sx95JQ3iInBzk1iox
yJ+K/kXoO0T9DXlODUxISNdU86mWNw0oFgzulK5rAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUUHiCdJnGvDeLY56XARXraR4uYQEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzEyZDQ2ZDQ0LWM0ZTMtNDU0Mi1hMDhiLTRmODMzYjVhMGM5MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/0wDANBgkqhkiG9w0BAQsFAAOCAQEARcIi0JS1/p8B7esuE4WeDh2K
6Wb51F01B/+gU6KK5yTvjAskoD+HRGP3VPnLMYDeP3CMGZXreTxkKuTIKmTP5ggd
dgnHuV9posWytNsFkls8Q6eG6E5bdxXsjP4Aj54N55h0EA8asJVLKdD9d4CRsBiW
j9NhCKtBX73zXqH+Q/jRzWf2m6rhoWNh2hFR6vqHHMWBA6k4wfNHz1iLdC1okSzq
XnuRJrvcrMWntuoEOLU32oVp6Hr4ckMXXC/u3aQXh8zjebETufwYK7q9iHXnORM+
JniOrz+Gv9OSPlNkGrbZ7mTxcuKMZm+Oy5Mk6qzyIAzWw9X7oVI+hZFdxZVimA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:59 2026 by rpki-client