
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa
File: 5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa (raw, json)
Hash identifier: 7BHf4UcS8XaCNRpG94AbMiQ0yV56FGkBIYcVCAcFeCw=
Subject key identifier: E8:46:F5:93:51:A6:4A:BE:CF:97:F3:26:CE:93:C0:66:AF:9F:B9:EC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18E43F314959AEDC487C347A06FC25DC802AE1B9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa
Signing time: Sat 28 Feb 2026 00:00:10 +0000
ROA not before: Sat 28 Feb 2026 00:00:10 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.79.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e4:3f:31:49:59:ae:dc:48:7c:34:7a:06:fc:25:dc:80:2a:e1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 28 00:00:10 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=846694161607aace5462d436ceb6da4ed17d34df04513c0d0ab1440e549eff2c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:be:bb:ca:7d:32:d7:f7:2e:a2:69:f5:21:0a:
be:f8:77:c0:49:cf:ea:15:99:e9:42:d9:db:94:e4:
ed:78:e9:8b:84:b2:d2:d9:4c:e1:f1:c6:fe:3b:7f:
8c:ba:22:97:bd:69:3e:fd:26:c5:2d:5d:cf:fb:eb:
d4:43:a3:fb:88:de:1e:a7:7a:2d:13:63:88:1a:71:
2a:b3:50:41:5a:ae:25:00:8b:7f:92:3f:3a:79:e0:
27:e7:40:f8:c1:ad:59:ee:6f:67:f6:75:95:96:29:
b5:4d:9c:2c:61:6e:09:c4:f2:4a:17:01:c3:63:8c:
3e:4a:f7:eb:4a:fd:6e:88:90:51:c5:39:22:c7:cd:
fb:d1:94:ff:c4:53:29:e8:60:31:eb:8e:1c:67:1d:
c6:11:cc:86:02:c9:8e:a9:ee:c8:4f:91:fd:59:88:
56:50:eb:66:cb:79:a9:95:03:76:4a:3e:5f:8a:26:
5b:33:0f:4f:5e:a7:e8:d9:a7:8a:66:06:56:2b:be:
19:8f:b9:5e:d2:1f:ea:b9:83:1a:ee:a7:73:b7:50:
6d:86:f5:9a:e9:d9:47:64:6a:3e:96:4e:d2:e2:a5:
c1:a5:ba:f5:e8:6e:a5:02:d5:0a:28:25:c3:23:df:
c7:17:df:9b:7f:66:d2:09:b4:89:75:f3:32:60:ed:
71:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:F5:93:51:A6:4A:BE:CF:97:F3:26:CE:93:C0:66:AF:9F:B9:EC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5ed5d2af-9146-4946-ba1f-680b4ba1e0f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.79.34.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:e5:41:cb:87:7e:90:da:79:c8:fc:9f:18:74:15:e4:a8:d2:
3b:f4:c7:13:3e:48:47:55:10:f5:7c:8c:8a:3f:be:0d:62:d3:
4a:87:40:97:89:39:53:01:0d:e7:0f:6b:56:18:fb:c9:c0:c0:
ce:45:f2:4d:b4:69:64:0e:a1:db:6b:8b:94:ea:01:8a:e9:89:
f5:80:47:5c:95:3e:53:eb:89:b8:ff:89:34:2c:3e:31:0f:01:
7d:ae:4b:8f:08:cb:cd:e1:bc:c1:62:d7:2c:cb:28:29:2b:d4:
0c:fa:2f:e7:df:5f:b7:00:b5:5d:14:1d:39:bd:62:13:8b:80:
0f:cc:12:33:50:7c:7d:b3:a3:3d:1a:1f:5f:bb:8e:b4:54:a5:
5d:af:8f:d8:db:f6:72:c7:89:37:ec:09:88:b3:29:dc:07:4d:
65:c4:13:59:1c:30:cd:c6:61:bb:5f:10:a5:02:96:6c:3a:51:
8c:3a:bf:7d:12:da:a0:4e:18:d2:4a:3b:e8:65:7e:2a:b2:89:
dd:67:33:38:bc:28:3b:07:4e:d2:fe:fb:d8:64:28:4d:56:19:
ce:19:03:78:8e:3b:5b:de:d1:7d:87:c6:18:b4:7e:fc:3e:4e:
7b:b7:2b:31:5a:c5:2d:41:11:bd:a5:eb:a1:fd:51:e4:25:34:
aa:54:60:27
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGOQ/MUlZrtxIfDR6Bvwl3IAq4bkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI4MDAwMDEwWhcNMjYwNTI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4NDY2OTQxNjE2MDdhYWNlNTQ2MmQ0MzZjZWI2ZGE0ZWQx
N2QzNGRmMDQ1MTNjMGQwYWIxNDQwZTU0OWVmZjJjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNvrvKfTLX9y6iafUhCr74d8BJz+oVmelC2duU5O146YuE
stLZTOHxxv47f4y6Ipe9aT79JsUtXc/769RDo/uI3h6nei0TY4gacSqzUEFariUA
i3+SPzp54CfnQPjBrVnub2f2dZWWKbVNnCxhbgnE8koXAcNjjD5K9+tK/W6IkFHF
OSLHzfvRlP/EUynoYDHrjhxnHcYRzIYCyY6p7shPkf1ZiFZQ62bLeamVA3ZKPl+K
JlszD09ep+jZp4pmBlYrvhmPuV7SH+q5gxrup3O3UG2G9Zrp2Udkaj6WTtLipcGl
uvXobqUC1QooJcMj38cX35t/ZtIJtIl18zJg7XGFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6Eb1k1GmSr7Pl/MmzpPAZq+fuewwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzVlZDVkMmFmLTkxNDYtNDk0Ni1iYTFmLTY4MGI0YmExZTBmMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFjTyIwDQYJKoZIhvcNAQELBQADggEBALvlQcuHfpDaecj8nxh0FeSo0jv0
xxM+SEdVEPV8jIo/vg1i00qHQJeJOVMBDecPa1YY+8nAwM5F8k20aWQOodtri5Tq
AYrpifWAR1yVPlPribj/iTQsPjEPAX2uS48Iy83hvMFi1yzLKCkr1Az6L+ffX7cA
tV0UHTm9YhOLgA/MEjNQfH2zoz0aH1+7jrRUpV2vj9jb9nLHiTfsCYizKdwHTWXE
E1kcMM3GYbtfEKUClmw6UYw6v30S2qBOGNJKO+hlfiqyid1nMzi8KDsHTtL++9hk
KE1WGc4ZA3iOO1ve0X2Hxhi0fvw+Tnu3KzFaxS1BEb2l66H9UeQlNKpUYCc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:00:35 2026 by rpki-client