
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/554be722-ed7e-4a33-8be9-7a3925c9c6c5.roa
File: 554be722-ed7e-4a33-8be9-7a3925c9c6c5.roa (raw, json)
Hash identifier: CEclIh1JQeLyZGhHWR2hF9TgSWgJ0jeVJo4fS9vzgtI=
Subject key identifier: 37:3D:2E:19:37:0D:72:EF:44:39:D1:1F:FD:45:A3:3A:C0:0A:A0:F2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34A23B43F38973E9398D09ABFF9864E76FAD398B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/554be722-ed7e-4a33-8be9-7a3925c9c6c5.roa
Signing time: Fri 15 May 2026 00:31:11 +0000
ROA not before: Fri 15 May 2026 00:31:11 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f38:6040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a2:3b:43:f3:89:73:e9:39:8d:09:ab:ff:98:64:e7:6f:ad:39:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 00:31:11 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=36218b5925a493fb1ba5b14428b026862038cfef8b3b34ed427597b515ad1b55, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:16:1f:fb:30:cb:8d:2b:6d:df:fe:36:29:61:
c5:e7:fe:fc:88:fb:16:2a:a8:bd:e8:58:5b:d1:bc:
c9:44:e5:c3:5e:a9:90:79:64:7f:f1:88:cb:96:72:
78:c4:a5:cc:0d:d6:3c:79:e4:d9:fa:5e:66:70:fd:
5a:86:dc:7d:fe:76:bf:f0:98:c8:11:6e:82:1c:0b:
67:65:b5:42:1e:68:34:cd:8c:b6:24:6b:09:d3:f2:
00:06:6e:8a:80:62:e1:9e:f0:e5:37:d7:02:95:3e:
62:28:e2:32:e3:27:ea:22:be:ef:89:1e:aa:7e:4c:
74:c3:ad:d9:36:55:83:b8:8b:b3:e0:9a:75:f1:41:
ee:cc:b1:56:01:4d:db:c8:88:d5:a6:ef:da:0e:ac:
1c:fc:4e:a4:ad:3f:bd:78:83:a4:55:ae:35:65:46:
ed:29:5d:97:89:53:ad:22:30:ab:6a:dd:71:73:a1:
02:b8:3b:01:05:73:1e:76:03:ab:43:bd:26:75:20:
57:c6:d9:5e:4d:4e:5a:6a:e5:b6:53:d6:e8:0f:5d:
f5:76:ef:85:19:1c:c2:84:18:a3:a1:4a:d4:a2:14:
be:71:c9:04:50:ca:88:d9:6c:73:5d:ad:96:ee:65:
fa:a7:9a:92:6d:ab:fc:2c:b4:70:9e:70:6a:ed:0b:
22:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3D:2E:19:37:0D:72:EF:44:39:D1:1F:FD:45:A3:3A:C0:0A:A0:F2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/554be722-ed7e-4a33-8be9-7a3925c9c6c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:6040::/48
Signature Algorithm: sha256WithRSAEncryption
b5:bd:59:14:32:55:35:04:80:89:8c:7c:97:a8:ab:ff:39:c2:
1b:26:52:80:ff:bc:0e:56:da:e3:a3:9f:72:43:f0:62:fd:b2:
cf:df:c1:a7:23:73:f9:a1:78:7b:c9:52:52:68:b6:19:d8:53:
71:4d:79:d4:69:9d:2c:7e:02:1c:fa:25:ff:6d:49:a9:3a:55:
42:16:47:82:ce:ef:bd:a6:ca:2d:dd:56:da:3c:f7:53:7c:2c:
ee:2f:1c:e5:04:bb:71:34:73:8f:92:4a:91:f8:dc:cb:a4:8f:
75:76:a4:11:22:0e:a2:b1:a8:1f:27:d3:bd:a5:18:7a:39:e6:
da:d2:41:91:d2:5c:14:f8:d8:f2:30:5d:e8:be:fa:c9:a5:15:
86:60:95:b0:ab:02:0b:30:0f:25:c9:e8:fd:a0:28:08:90:c2:
cb:62:e0:f2:c4:e9:5e:4f:28:2b:c9:98:1a:a6:78:e0:45:b3:
9a:68:c3:f2:72:c3:d3:09:3c:5f:d7:e9:7c:80:d8:8f:cd:f2:
bf:78:1e:9a:5a:75:1d:d0:7b:b3:77:a0:77:5e:6f:53:ab:3e:
10:2d:c7:a7:96:ff:a3:64:34:90:37:09:3d:85:97:e1:38:12:
59:5c:43:3b:1a:2f:22:81:df:ca:c3:6c:d1:f0:0c:d4:dd:37:
86:b1:0b:09
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUNKI7Q/OJc+k5jQmr/5hk52+tOYswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDAzMTExWhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AzNjIxOGI1OTI1YTQ5M2ZiMWJhNWIxNDQyOGIwMjY4NjIw
MzhjZmVmOGIzYjM0ZWQ0Mjc1OTdiNTE1YWQxYjU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCSFh/7MMuNK23f/jYpYcXn/vyI+xYqqL3oWFvRvMlE5cNe
qZB5ZH/xiMuWcnjEpcwN1jx55Nn6XmZw/VqG3H3+dr/wmMgRboIcC2dltUIeaDTN
jLYkawnT8gAGboqAYuGe8OU31wKVPmIo4jLjJ+oivu+JHqp+THTDrdk2VYO4i7Pg
mnXxQe7MsVYBTdvIiNWm79oOrBz8TqStP714g6RVrjVlRu0pXZeJU60iMKtq3XFz
oQK4OwEFcx52A6tDvSZ1IFfG2V5NTlpq5bZT1ugPXfV274UZHMKEGKOhStSiFL5x
yQRQyojZbHNdrZbuZfqnmpJtq/wstHCecGrtCyK5AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUNz0uGTcNcu9EOdEf/UWjOsAKoPIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU1NGJlNzIyLWVkN2UtNGEzMy04YmU5LTdhMzkyNWM5YzZjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB84YEAwDQYJKoZIhvcNAQELBQADggEBALW9WRQyVTUEgImMfJeoq/85
whsmUoD/vA5W2uOjn3JD8GL9ss/fwacjc/mheHvJUlJothnYU3FNedRpnSx+Ahz6
Jf9tSak6VUIWR4LO772myi3dVto891N8LO4vHOUEu3E0c4+SSpH43Mukj3V2pBEi
DqKxqB8n072lGHo55trSQZHSXBT42PIwXei++smlFYZglbCrAgswDyXJ6P2gKAiQ
wsti4PLE6V5PKCvJmBqmeOBFs5pow/Jyw9MJPF/X6XyA2I/N8r94HppadR3Qe7N3
oHdeb1OrPhAtx6eW/6NkNJA3CT2Fl+E4EllcQzsaLyKB38rDbNHwDNTdN4axCwk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:22:24 2026 by rpki-client