
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a06b439-ac99-416a-876d-39e54e97d865.roa
File: 7a06b439-ac99-416a-876d-39e54e97d865.roa (raw, json)
Hash identifier: 1z9yy7K9JIFAfDYpyaJJTvjqeaeolaOZhpsJp5xHMEg=
Subject key identifier: E2:57:F0:2F:D9:D6:8C:66:4E:D4:36:22:F2:5F:5A:72:B4:B4:86:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2DCB24777503C5AEFD4855934F67791D2C722D22
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a06b439-ac99-416a-876d-39e54e97d865.roa
Signing time: Sun 17 May 2026 00:00:44 +0000
ROA not before: Sun 17 May 2026 00:00:44 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1fed:5000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:cb:24:77:75:03:c5:ae:fd:48:55:93:4f:67:79:1d:2c:72:2d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 17 00:00:44 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=d068066e4fd09cfa797b558f639e5ac5a2156f5808288eb65707ea0a1be4187c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:4a:ec:21:bc:9f:a5:dc:f1:49:77:e0:f1:
70:7b:ae:a3:bf:bc:6f:94:93:14:ac:a6:aa:fb:66:
b5:57:fb:0b:1e:dd:69:2c:fd:f9:33:d2:e5:6d:e5:
6d:23:97:af:0b:c8:37:c4:46:b0:43:aa:7a:de:1a:
da:fb:b1:ba:f2:ed:f5:73:b4:3a:fd:f3:1a:5b:59:
45:81:b1:ad:6b:b6:25:41:46:f3:65:ca:00:fd:17:
3a:25:2c:b7:0e:31:1f:5f:65:f3:40:78:7b:db:70:
17:ed:c7:28:1a:55:0b:fd:1a:77:eb:d2:ed:15:08:
89:6d:55:9f:c1:33:b2:6d:af:79:8c:77:9c:f8:09:
c1:b8:f1:6b:f4:39:d1:e7:09:66:af:ab:4c:e3:2e:
f3:79:e5:f2:3b:03:09:41:93:72:d3:fd:3e:bc:40:
0e:17:23:ca:08:57:c6:92:fe:16:9f:1e:8d:43:62:
67:95:a9:11:2b:42:f3:14:06:01:58:2b:66:4d:85:
bb:f3:1c:77:1e:89:51:91:7b:a5:0d:28:5d:1e:fc:
4d:76:20:78:78:70:86:e4:94:86:70:35:15:af:81:
b5:6d:ce:66:cb:d9:15:1c:98:88:db:c3:14:5a:89:
3c:35:90:48:a1:43:7c:b0:74:41:c7:22:4d:6c:e0:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:57:F0:2F:D9:D6:8C:66:4E:D4:36:22:F2:5F:5A:72:B4:B4:86:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a06b439-ac99-416a-876d-39e54e97d865.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fed:5000::/40
Signature Algorithm: sha256WithRSAEncryption
84:e1:ae:8e:1e:dc:d2:89:8a:4d:ad:2e:d5:0b:d4:2f:c0:c0:
3d:2c:01:fe:c1:14:f4:ea:05:74:63:2e:0d:ca:e8:38:54:9e:
68:bb:5e:34:9f:f3:29:63:93:77:a1:a7:d9:0c:f8:7e:7e:f7:
90:b6:56:52:ea:0a:f9:42:f4:16:0c:4c:b6:ea:de:6b:20:6a:
5c:07:56:30:ef:b5:0a:92:63:05:95:06:68:8f:0b:5a:b5:2f:
1f:08:0d:20:c8:fa:8f:57:86:86:f2:d3:c0:bb:ea:32:15:dd:
24:39:31:72:95:95:0c:0e:b1:a2:e3:15:59:53:0b:78:40:a9:
1d:b8:38:36:5b:1c:0f:80:4c:4b:69:bc:c8:03:4a:bd:d1:1d:
bc:2c:ea:b0:46:37:b7:a5:de:6a:23:b5:ac:2e:b1:23:c2:e5:
03:81:03:d1:e9:8c:fe:94:81:cd:35:f3:4a:dd:c3:e4:a3:56:
62:94:22:c4:75:12:60:1d:de:3f:f1:72:55:37:de:ae:69:62:
e6:a2:c0:a9:f4:7c:3c:31:4b:75:a8:72:e0:91:c0:cf:d1:79:
2b:25:b8:ee:6e:7f:48:ed:82:c8:a3:ac:57:1a:a5:40:2e:1d:
fd:d3:4b:27:b9:6e:b9:3c:9f:5d:38:f1:e9:84:c5:d4:f0:b6:
e1:66:ed:3b
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIULcskd3UDxa79SFWTT2d5HSxyLSIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE3MDAwMDQ0WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMDY4MDY2ZTRmZDA5Y2ZhNzk3YjU1OGY2MzllNWFjNWEy
MTU2ZjU4MDgyODhlYjY1NzA3ZWEwYTFiZTQxODdjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsqUrsIbyfpdzxSXfg8XB7rqO/vG+UkxSspqr7ZrVX+wse
3Wks/fkz0uVt5W0jl68LyDfERrBDqnreGtr7sbry7fVztDr98xpbWUWBsa1rtiVB
RvNlygD9FzolLLcOMR9fZfNAeHvbcBftxygaVQv9Gnfr0u0VCIltVZ/BM7Jtr3mM
d5z4CcG48Wv0OdHnCWavq0zjLvN55fI7AwlBk3LT/T68QA4XI8oIV8aS/hafHo1D
YmeVqRErQvMUBgFYK2ZNhbvzHHceiVGRe6UNKF0e/E12IHh4cIbklIZwNRWvgbVt
zmbL2RUcmIjbwxRaiTw1kEihQ3ywdEHHIk1s4EG9AgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU4lfwL9nWjGZO1DYi8l9acrS0huUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhMDZiNDM5LWFjOTktNDE2YS04NzZkLTM5ZTU0ZTk3ZDg2NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/tUDANBgkqhkiG9w0BAQsFAAOCAQEAhOGujh7c0omKTa0u1QvUL8DA
PSwB/sEU9OoFdGMuDcroOFSeaLteNJ/zKWOTd6Gn2Qz4fn73kLZWUuoK+UL0FgxM
tureayBqXAdWMO+1CpJjBZUGaI8LWrUvHwgNIMj6j1eGhvLTwLvqMhXdJDkxcpWV
DA6xouMVWVMLeECpHbg4NlscD4BMS2m8yANKvdEdvCzqsEY3t6XeaiO1rC6xI8Ll
A4ED0emM/pSBzTXzSt3D5KNWYpQixHUSYB3eP/FyVTfermli5qLAqfR8PDFLdahy
4JHAz9F5KyW47m5/SO2CyKOsVxqlQC4d/dNLJ7luuTyfXTjx6YTF1PC24WbtOw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 12:57:57 2026 by rpki-client