
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa
File: 3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa (raw, json)
Hash identifier: 1IU1YikRN3B6opIc1w8BvC3bAUMCyIhjG3z2SISiwGE=
Subject key identifier: 5F:DC:21:07:5C:A9:B8:BC:83:53:C9:90:23:85:74:3D:EA:59:1F:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E2DBB8C0F91FF84D7DCF29B13E7CB6EA9D86F69
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa
Signing time: Wed 20 May 2026 00:30:13 +0000
ROA not before: Wed 20 May 2026 00:30:13 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 46.215.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:2d:bb:8c:0f:91:ff:84:d7:dc:f2:9b:13:e7:cb:6e:a9:d8:6f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 20 00:30:13 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=723e89e9d5d7768829c5707e1bccb914f71bfa7ef42530231a2c5097c59a86df, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:62:0e:53:cd:11:68:32:7a:9e:a4:f2:8f:02:
18:d4:01:01:3c:86:ef:49:ff:3c:c0:26:d7:df:e6:
27:06:11:27:db:e7:8c:9a:86:85:d3:72:6e:fc:2d:
5d:b8:83:a2:77:04:a0:f4:48:1a:a4:d1:f1:f9:97:
da:ab:f6:71:16:a0:cb:ce:a1:e1:33:67:e9:8a:7c:
e6:4b:f9:48:4d:7c:76:8e:13:56:f5:3d:24:af:02:
d7:1e:83:a5:6a:95:aa:05:1f:b8:99:79:a8:ad:bb:
43:18:48:82:e1:e2:f8:7e:79:6d:7f:4f:0a:4b:6b:
0d:02:44:07:bd:31:47:28:20:b4:18:53:bc:f7:99:
fe:b6:6c:59:6a:e8:bb:a7:cd:cc:d9:02:10:65:3f:
f1:b6:81:65:8c:00:33:41:8f:42:a0:8a:e4:3f:59:
c1:22:59:dc:39:19:ca:3a:12:2e:26:74:c9:fb:f6:
23:94:16:6e:33:01:65:af:85:df:28:e2:81:ef:fa:
00:c2:d3:5f:e7:db:6b:0f:98:0b:0a:a9:45:0e:c1:
ba:b3:95:b7:d2:15:85:54:ac:43:cf:3f:ca:a6:15:
8d:74:07:3d:ac:1b:62:05:c9:6e:fe:05:ad:f8:82:
3b:9d:04:e7:65:c1:6c:5d:6e:c6:74:87:1c:a6:a9:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DC:21:07:5C:A9:B8:BC:83:53:C9:90:23:85:74:3D:EA:59:1F:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3b0a8b46-f8a6-4f03-81cc-e42817a6a82d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.215.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d7:6f:36:f6:2b:b1:c6:30:88:3e:de:e8:f6:57:6b:f8:16:91:
09:1e:79:45:ee:95:81:0b:60:6f:7a:9f:2d:e3:9c:1d:cf:5b:
e0:85:6c:a1:bd:55:90:84:4a:09:aa:17:a9:2a:39:ae:72:e8:
59:2d:bd:4c:13:ea:f3:06:5b:7d:72:f0:a5:e1:20:7f:4b:b6:
e2:fd:af:b2:39:98:81:b8:73:ad:d7:18:0a:87:17:38:f5:f1:
4f:fc:e0:64:96:7e:2a:0a:f0:7a:83:a1:a1:ce:00:a3:bd:15:
44:8f:71:8b:7d:d1:36:9f:2f:c1:31:32:f7:1c:01:b5:fc:86:
0e:a0:14:9b:a2:70:83:ca:9d:87:e4:b6:53:27:57:3b:1f:0d:
a4:9a:27:6c:af:c5:72:65:16:38:20:2f:59:55:16:ed:0a:85:
59:75:d8:2d:16:1f:7a:fa:80:68:ef:34:8a:db:51:33:74:90:
6f:68:82:36:72:55:0e:b7:1f:b1:dc:46:f3:a6:81:11:c5:87:
7f:c0:72:1d:fc:0e:e4:1b:92:d6:24:db:5b:d9:80:3a:40:32:
47:f7:80:3c:d0:e3:f6:66:41:e8:46:55:74:47:4f:bd:54:96:
b1:ad:6f:5b:29:a1:6e:8f:b4:5f:82:31:5f:67:27:85:27:b7:
a5:ad:40:e4
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUfi27jA+R/4TX3PKbE+fLbqnYb2kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAzMDEzWhcNMjYwODE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MjNlODllOWQ1ZDc3Njg4MjljNTcwN2UxYmNjYjkxNGY3
MWJmYTdlZjQyNTMwMjMxYTJjNTA5N2M1OWE4NmRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDNYg5TzRFoMnqepPKPAhjUAQE8hu9J/zzAJtff5icGESfb
54yahoXTcm78LV24g6J3BKD0SBqk0fH5l9qr9nEWoMvOoeEzZ+mKfOZL+UhNfHaO
E1b1PSSvAtceg6VqlaoFH7iZeaitu0MYSILh4vh+eW1/TwpLaw0CRAe9MUcoILQY
U7z3mf62bFlq6LunzczZAhBlP/G2gWWMADNBj0KgiuQ/WcEiWdw5Gco6Ei4mdMn7
9iOUFm4zAWWvhd8o4oHv+gDC01/n22sPmAsKqUUOwbqzlbfSFYVUrEPPP8qmFY10
Bz2sG2IFyW7+Ba34gjudBOdlwWxdbsZ0hxymqVAnAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUX9whB1ypuLyDU8mQI4V0PepZHy8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzNiMGE4YjQ2LWY4YTYtNGYwMy04MWNjLWU0MjgxN2E2YTgyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAu1zANBgkqhkiG9w0BAQsFAAOCAQEA12829iuxxjCIPt7o9ldr+BaRCR55
Re6VgQtgb3qfLeOcHc9b4IVsob1VkIRKCaoXqSo5rnLoWS29TBPq8wZbfXLwpeEg
f0u24v2vsjmYgbhzrdcYCocXOPXxT/zgZJZ+KgrweoOhoc4Ao70VRI9xi33RNp8v
wTEy9xwBtfyGDqAUm6Jwg8qdh+S2UydXOx8NpJonbK/FcmUWOCAvWVUW7QqFWXXY
LRYfevqAaO80ittRM3SQb2iCNnJVDrcfsdxG86aBEcWHf8ByHfwO5BuS1iTbW9mA
OkAyR/eAPNDj9mZB6EZVdEdPvVSWsa1vWymhbo+0X4IxX2cnhSe3pa1A5A==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:08:48 2026 by rpki-client