
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa
File: 46911f37-9bdc-41b4-a459-8cf84f957313.roa (raw, json)
Hash identifier: K/g1fQBaQLZTsfnBPco4JaLiPztCc16D62KdYg/eIhQ=
Subject key identifier: BD:FE:F8:D2:8B:85:6E:D7:14:00:A3:73:53:66:79:54:1F:8C:8C:5C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 334971E47F66131980E877EF024C5481640ED33B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa
Signing time: Wed 11 Feb 2026 01:11:23 +0000
ROA not before: Wed 11 Feb 2026 01:11:23 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:49:71:e4:7f:66:13:19:80:e8:77:ef:02:4c:54:81:64:0e:d3:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 11 01:11:23 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=0f2e28c23c17b5bfa2e974219f538af3f2f2056178fa2a2a69a5340649f5fe51, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2d:49:98:63:c5:16:fb:1b:e1:3d:5c:ff:1d:
5a:64:8d:a5:94:c0:5a:ab:7f:2b:9c:a0:51:5f:bc:
b7:63:ae:6b:e2:e0:4e:7a:ce:da:a1:fa:4d:6b:93:
fb:4b:65:b8:9d:f2:fc:7d:d7:98:09:07:69:84:d1:
93:89:45:33:06:d4:60:51:e1:7f:08:46:4e:67:3b:
6b:53:63:3d:d0:ff:8e:33:00:0e:ae:0e:5a:13:37:
25:63:34:c9:43:ef:c6:7d:b3:cf:9b:7e:6d:b3:17:
15:e3:bf:5d:75:9d:56:ee:ed:32:05:18:98:4d:33:
e4:a4:0a:09:65:f2:c9:40:b5:fd:f9:eb:7a:81:b0:
c6:fd:6c:e9:f1:9f:33:08:7e:8c:71:72:ff:c3:43:
78:7c:ed:3d:21:fc:bc:f3:94:bd:f8:31:c8:52:63:
7e:1b:5e:f0:6f:76:7e:11:1c:be:0d:2e:80:12:c1:
c3:f5:d7:38:c8:a5:99:e6:4d:d3:ed:90:a4:78:ef:
1a:35:32:b9:aa:35:73:80:b6:0b:2a:8c:e9:15:7a:
97:00:60:15:0a:b2:8b:42:1a:0b:ef:c0:44:40:f2:
b6:c7:0d:56:21:85:4a:71:01:72:c9:36:50:35:36:
a6:a9:68:3c:44:01:76:7b:76:61:40:43:d9:ba:f6:
57:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:FE:F8:D2:8B:85:6E:D7:14:00:A3:73:53:66:79:54:1F:8C:8C:5C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/46911f37-9bdc-41b4-a459-8cf84f957313.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
b5:cc:de:0a:4b:19:33:90:77:56:e0:fa:82:52:25:a0:4b:56:
b2:cc:63:60:07:c2:04:4f:89:0c:1e:14:bd:76:49:f6:74:d9:
d6:eb:38:1a:9f:46:5f:3c:4f:8f:6d:b0:17:68:e2:97:b3:e9:
c3:7b:5f:6a:33:44:a0:d4:bc:86:95:f2:93:87:41:64:82:93:
bf:e1:7c:8c:ed:6d:53:1d:72:49:c1:1d:d3:3a:d4:90:73:eb:
dc:de:14:e0:9f:7a:2b:11:2c:66:23:35:4f:d8:82:ce:ff:39:
fc:aa:0f:49:ae:fe:d2:24:90:98:aa:9e:ba:88:a0:86:f8:8b:
31:d5:e3:4f:45:a3:2e:ca:7b:07:55:bd:eb:fe:47:58:02:f3:
a3:75:93:ca:87:a7:25:ce:a2:d9:47:89:79:d2:6c:36:cf:a4:
38:ad:76:b4:8c:23:c3:44:b6:bd:ce:d4:7b:07:fe:99:05:0a:
9e:38:73:ee:f9:ac:be:0a:91:7a:7a:7b:87:a3:83:79:9b:34:
7d:42:8d:ea:93:0f:a1:5a:ae:ff:17:87:e3:4c:e0:a7:f9:3c:
80:49:13:f9:fe:8e:c0:f2:06:c9:0b:d2:18:20:b4:83:f1:56:
4f:23:36:74:f0:0c:47:13:a1:7d:0c:f1:bf:a6:90:68:b8:51:
6d:6a:d5:c6
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUM0lx5H9mExmA6HfvAkxUgWQO0zswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjExMDExMTIzWhcNMjYwNTEyMjM1OTU5
WjB6MUkwRwYDVQQFE0AwZjJlMjhjMjNjMTdiNWJmYTJlOTc0MjE5ZjUzOGFmM2Yy
ZjIwNTYxNzhmYTJhMmE2OWE1MzQwNjQ5ZjVmZTUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC+LUmYY8UW+xvhPVz/HVpkjaWUwFqrfyucoFFfvLdjrmvi
4E56ztqh+k1rk/tLZbid8vx915gJB2mE0ZOJRTMG1GBR4X8IRk5nO2tTYz3Q/44z
AA6uDloTNyVjNMlD78Z9s8+bfm2zFxXjv111nVbu7TIFGJhNM+SkCgll8slAtf35
63qBsMb9bOnxnzMIfoxxcv/DQ3h87T0h/LzzlL34MchSY34bXvBvdn4RHL4NLoAS
wcP11zjIpZnmTdPtkKR47xo1MrmqNXOAtgsqjOkVepcAYBUKsotCGgvvwERA8rbH
DVYhhUpxAXLJNlA1NqapaDxEAXZ7dmFAQ9m69lf/AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUvf740ouFbtcUAKNzU2Z5VB+MjFwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ2OTExZjM3LTliZGMtNDFiNC1hNDU5LThjZjg0Zjk1NzMxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/qQMAwDQYJKoZIhvcNAQELBQADggEBALXM3gpLGTOQd1bg+oJSJaBL
VrLMY2AHwgRPiQweFL12SfZ02dbrOBqfRl88T49tsBdo4pez6cN7X2ozRKDUvIaV
8pOHQWSCk7/hfIztbVMdcknBHdM61JBz69zeFOCfeisRLGYjNU/Ygs7/OfyqD0mu
/tIkkJiqnrqIoIb4izHV409Foy7KewdVvev+R1gC86N1k8qHpyXOotlHiXnSbDbP
pDitdrSMI8NEtr3O1HsH/pkFCp44c+75rL4KkXp6e4ejg3mbNH1CjeqTD6Farv8X
h+NM4Kf5PIBJE/n+jsDyBskL0hggtIPxVk8jNnTwDEcToX0M8b+mkGi4UW1q1cY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:52:27 2026 by rpki-client