
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
File: 7109eae2-0e21-4e85-9b88-63b1777e3c13.roa (raw, json)
Hash identifier: hB0SpOmgjljpJ87ERkgZL9EFZem93b1Kk10OCapPVBM=
Subject key identifier: 3D:ED:5E:EC:D3:F7:FF:33:19:B5:A4:40:4E:18:D9:87:38:E6:31:CB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 28575E1133AEAADFF831B192359DD86AF026E2B0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
Signing time: Wed 25 Feb 2026 00:30:10 +0000
ROA not before: Wed 25 Feb 2026 00:30:10 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f70:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:57:5e:11:33:ae:aa:df:f8:31:b1:92:35:9d:d8:6a:f0:26:e2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 00:30:10 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=f2134751e8decff95e94b58dce81015be5915ada2383af94a4725d73bdd60b21, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:fa:1c:90:0e:e1:39:51:9a:90:2e:24:2c:
75:67:81:8c:b0:e3:69:6f:0a:71:8a:23:fa:db:45:
a4:f6:10:5b:a3:ea:34:e0:5e:e9:6b:5a:3c:f6:89:
17:4b:f5:bd:59:fe:d7:fd:21:72:13:59:03:e4:ba:
86:4c:48:fa:f3:39:37:46:76:95:72:01:c6:af:81:
3a:e3:c8:2d:c2:59:f0:ca:d5:97:61:3a:1c:b0:c3:
2b:07:67:5e:81:b1:7b:b3:2c:f3:79:ec:66:34:42:
29:f6:79:35:f5:01:70:e3:bb:06:c0:9d:02:f0:b2:
4d:f8:9f:28:96:71:66:58:b8:f0:2e:3e:08:4c:ec:
0a:dd:f5:e7:d5:1c:75:6c:9e:2c:5b:57:f3:7a:f5:
09:fb:50:aa:90:07:c8:56:66:aa:67:34:9e:e6:e0:
34:33:fc:0e:87:33:0b:93:a9:2b:e5:8d:d0:05:5c:
a3:5c:3e:20:21:06:9b:62:e8:a2:06:df:81:96:d8:
ca:75:c4:48:01:b4:57:33:72:65:39:6a:59:0d:ee:
13:7f:84:79:a7:f8:21:a2:51:67:f1:35:91:35:74:
4d:24:a1:1f:5a:3f:b4:3f:ba:12:0b:2c:7f:4a:19:
de:19:7c:51:f9:71:94:c2:54:45:db:b7:aa:54:db:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:5E:EC:D3:F7:FF:33:19:B5:A4:40:4E:18:D9:87:38:E6:31:CB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7109eae2-0e21-4e85-9b88-63b1777e3c13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f70:6000::/40
Signature Algorithm: sha256WithRSAEncryption
6e:df:26:87:e2:57:da:20:a6:eb:77:44:50:05:d7:38:f6:3e:
1e:94:cb:a3:96:59:ce:f1:5f:03:20:93:33:5e:0d:ab:17:dc:
7e:1a:5b:fa:e7:c7:a0:9e:26:56:fd:7c:e4:17:bb:61:15:6b:
7a:a8:0c:09:46:1e:84:5b:17:cf:8b:84:8d:4d:a5:46:2b:1e:
d0:fd:6f:c6:f6:58:c9:33:99:bf:f4:2f:e3:99:9e:52:64:f7:
b7:56:0c:d9:da:f7:7a:57:a7:82:f6:87:e9:63:5e:92:3a:73:
dc:ab:12:b8:6e:82:0e:e9:62:1f:c0:8b:e9:6c:84:ae:e1:6d:
99:15:e1:0b:f7:83:1a:43:c2:8e:82:de:6b:99:ae:8d:d1:d8:
2d:93:6b:24:58:1a:17:c8:e0:45:dd:ce:96:f6:60:ff:e3:ed:
22:b1:ce:f0:17:76:84:5f:32:d1:ba:e0:90:ef:74:15:ce:da:
54:80:67:1e:25:1e:07:f7:8d:46:7a:49:21:75:c3:e6:e3:5a:
65:cf:ba:73:6e:c4:19:82:c9:7b:30:38:0d:c1:9b:85:4a:46:
9e:30:f4:a8:94:4a:8c:5c:5c:bc:4b:23:db:28:c6:db:65:47:
42:ad:2f:46:99:3c:c2:45:23:ab:c9:fd:6e:a0:b1:c6:1f:14:
93:82:a2:e6
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUKFdeETOuqt/4MbGSNZ3YavAm4rAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI1MDAzMDEwWhcNMjYwNTI2MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMjEzNDc1MWU4ZGVjZmY5NWU5NGI1OGRjZTgxMDE1YmU1
OTE1YWRhMjM4M2FmOTRhNDcyNWQ3M2JkZDYwYjIxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsX/ockA7hOVGakC4kLHVngYyw42lvCnGKI/rbRaT2EFuj
6jTgXulrWjz2iRdL9b1Z/tf9IXITWQPkuoZMSPrzOTdGdpVyAcavgTrjyC3CWfDK
1ZdhOhywwysHZ16BsXuzLPN57GY0Qin2eTX1AXDjuwbAnQLwsk34nyiWcWZYuPAu
PghM7Ard9efVHHVsnixbV/N69Qn7UKqQB8hWZqpnNJ7m4DQz/A6HMwuTqSvljdAF
XKNcPiAhBpti6KIG34GW2Mp1xEgBtFczcmU5alkN7hN/hHmn+CGiUWfxNZE1dE0k
oR9aP7Q/uhILLH9KGd4ZfFH5cZTCVEXbt6pU277vAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUPe1e7NP3/zMZtaRAThjZhzjmMcswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcxMDllYWUyLTBlMjEtNGU4NS05Yjg4LTYzYjE3NzdlM2MxMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9wYDANBgkqhkiG9w0BAQsFAAOCAQEAbt8mh+JX2iCm63dEUAXXOPY+
HpTLo5ZZzvFfAyCTM14Nqxfcfhpb+ufHoJ4mVv185Be7YRVreqgMCUYehFsXz4uE
jU2lRise0P1vxvZYyTOZv/Qv45meUmT3t1YM2dr3elengvaH6WNekjpz3KsSuG6C
DuliH8CL6WyEruFtmRXhC/eDGkPCjoLea5mujdHYLZNrJFgaF8jgRd3OlvZg/+Pt
IrHO8Bd2hF8y0brgkO90Fc7aVIBnHiUeB/eNRnpJIXXD5uNaZc+6c27EGYLJezA4
DcGbhUpGnjD0qJRKjFxcvEsj2yjG22VHQq0vRpk8wkUjq8n9bqCxxh8Uk4Ki5g==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:17:29 2026 by rpki-client