
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
File: 8c09eb33-9642-4506-acdc-cda09a75dedd.roa (raw, json)
Hash identifier: PkvYmqSXyoKt3d22X6bP+AABk6YWxVO3PWlPX01ortI=
Subject key identifier: D8:EE:F0:C4:B3:11:71:09:C9:DC:62:CF:B0:6C:12:63:06:2D:86:62
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07AB7BACA64E89B0244CD66184298BAE4ED5609A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
Signing time: Sat 16 May 2026 02:00:03 +0000
ROA not before: Sat 16 May 2026 02:00:03 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ab:7b:ac:a6:4e:89:b0:24:4c:d6:61:84:29:8b:ae:4e:d5:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 02:00:03 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=f058b0e9fcbc8b629043d6195cb2d20b7063e779869b0263b77cec379ff012fa, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f4:ab:4a:1f:8a:8a:eb:24:24:72:e3:5c:d7:
e4:85:8b:db:fa:4d:1f:de:a6:59:21:46:3a:58:de:
cf:7b:ae:5c:ee:29:52:77:21:75:ec:da:5b:10:e7:
de:76:ea:81:46:43:45:bf:02:28:cb:44:d9:ef:a9:
04:9a:5b:8b:0c:ef:55:dc:66:c1:09:ef:4c:85:f0:
3f:97:64:06:5c:77:e2:0b:ab:2d:d5:b2:9c:d0:f4:
54:2e:44:33:35:9d:39:e6:e8:2a:3a:a7:c5:7c:0c:
7e:46:5f:06:83:fa:06:0d:df:03:6e:b9:8f:35:56:
d4:43:d3:c7:e1:42:59:4d:6f:ba:89:20:18:eb:fc:
0c:45:43:d8:cd:4d:2c:a0:d0:3d:0b:3f:e7:dc:88:
ab:81:bd:ae:93:f8:35:18:06:a8:e6:63:d2:af:51:
df:09:3e:f7:04:35:a4:b1:b9:8c:3b:1e:15:bf:21:
f8:b0:e0:56:75:4f:2e:59:a1:52:86:9a:cc:67:f8:
ba:4a:5d:00:43:d1:56:9d:d8:fa:78:9c:c2:d5:06:
a3:9d:b3:e0:56:9b:9b:d5:66:11:08:62:3c:f1:37:
6c:88:4c:14:06:39:64:69:ba:a1:81:0f:36:c1:25:
b3:f9:1b:88:74:5d:aa:bb:e4:52:73:55:4c:1d:51:
8f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EE:F0:C4:B3:11:71:09:C9:DC:62:CF:B0:6C:12:63:06:2D:86:62
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8c09eb33-9642-4506-acdc-cda09a75dedd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c1:a6:da:83:57:58:f0:7f:90:97:cf:17:17:fe:00:69:d8:60:
a8:50:db:dc:bf:48:d5:27:c3:d1:fe:50:47:9a:73:1f:26:0b:
76:bf:da:ab:92:03:16:1c:af:4b:0e:f0:15:fa:fe:cf:08:cc:
52:4c:22:bf:02:e7:71:f8:9d:84:12:2e:a1:45:7f:dc:ee:2e:
92:a9:46:9f:a6:e2:4f:4e:98:09:de:fe:ab:a9:a2:95:f5:6b:
50:37:58:93:13:08:d3:71:43:ec:c2:f2:31:b2:99:54:5a:1f:
86:5e:8a:7f:e0:46:76:ce:0c:10:b6:bd:48:3f:c0:bd:65:9e:
da:13:a5:15:25:c4:87:e6:c4:fc:71:6a:59:81:1c:6c:67:44:
53:89:b3:6c:09:a4:a4:29:53:17:85:c7:70:17:dc:c7:35:e6:
6a:c7:08:1a:5b:ef:ba:86:fd:40:2f:48:17:a8:b0:2a:d0:75:
be:93:ea:c9:3a:10:8b:f5:4b:dd:c3:e2:0e:ce:6c:4d:a4:b9:
17:7b:ef:da:56:8d:50:44:bc:32:d8:16:e7:36:e5:a5:86:93:
59:40:5d:c2:04:97:49:1e:97:c1:7e:80:48:e6:9c:35:02:e1:
ef:83:25:ac:ab:c3:59:93:f5:62:fe:91:72:cc:d7:22:4d:bf:
0b:ae:4c:25
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUB6t7rKZOibAkTNZhhCmLrk7VYJowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE2MDIwMDAzWhcNMjYwODE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMDU4YjBlOWZjYmM4YjYyOTA0M2Q2MTk1Y2IyZDIwYjcw
NjNlNzc5ODY5YjAyNjNiNzdjZWMzNzlmZjAxMmZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw9KtKH4qK6yQkcuNc1+SFi9v6TR/eplkhRjpY3s97rlzu
KVJ3IXXs2lsQ59526oFGQ0W/AijLRNnvqQSaW4sM71XcZsEJ70yF8D+XZAZcd+IL
qy3VspzQ9FQuRDM1nTnm6Co6p8V8DH5GXwaD+gYN3wNuuY81VtRD08fhQllNb7qJ
IBjr/AxFQ9jNTSyg0D0LP+fciKuBva6T+DUYBqjmY9KvUd8JPvcENaSxuYw7HhW/
Ifiw4FZ1Ty5ZoVKGmsxn+LpKXQBD0Vad2Pp4nMLVBqOds+BWm5vVZhEIYjzxN2yI
TBQGOWRpuqGBDzbBJbP5G4h0Xaq75FJzVUwdUY/TAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU2O7wxLMRcQnJ3GLPsGwSYwYthmIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhjMDllYjMzLTk2NDItNDUwNi1hY2RjLWNkYTA5YTc1ZGVkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/yEDANBgkqhkiG9w0BAQsFAAOCAQEAwabag1dY8H+Ql88XF/4Aadhg
qFDb3L9I1SfD0f5QR5pzHyYLdr/aq5IDFhyvSw7wFfr+zwjMUkwivwLncfidhBIu
oUV/3O4ukqlGn6biT06YCd7+q6milfVrUDdYkxMI03FD7MLyMbKZVFofhl6Kf+BG
ds4MELa9SD/AvWWe2hOlFSXEh+bE/HFqWYEcbGdEU4mzbAmkpClTF4XHcBfcxzXm
ascIGlvvuob9QC9IF6iwKtB1vpPqyToQi/VL3cPiDs5sTaS5F3vv2laNUES8MtgW
5zblpYaTWUBdwgSXSR6XwX6ASOacNQLh74MlrKvDWZP1Yv6RcszXIk2/C65MJQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:48:30 2026 by rpki-client