
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3ddbe26-074e-4d33-8a31-3cb83c403402.roa
File: a3ddbe26-074e-4d33-8a31-3cb83c403402.roa (raw, json)
Hash identifier: ZpnZtGML40esDL93/NbPYyn9XzwuwjYnTkGWHAMe7FU=
Subject key identifier: 31:7C:61:9E:73:18:90:E1:C4:D7:C6:1F:4E:D4:93:5A:A3:29:F2:F0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 30B844FA5081770583862EE6545C12AF2A0DCC85
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3ddbe26-074e-4d33-8a31-3cb83c403402.roa
Signing time: Sun 31 May 2026 00:30:50 +0000
ROA not before: Sun 31 May 2026 00:30:50 +0000
ROA not after: Sat 29 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fe9:c040::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b8:44:fa:50:81:77:05:83:86:2e:e6:54:5c:12:af:2a:0d:cc:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 31 00:30:50 2026 GMT
Not After : Aug 29 23:59:59 2026 GMT
Subject: serialNumber=fcc63b63d163cc1eefa17278cec28ea17b827fb53b5c3b7843fbe9b15081835a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:82:d9:d5:50:e2:0f:20:6e:bc:21:a7:d9:84:
7d:2e:53:85:eb:0b:dd:ef:d5:1d:c1:83:f2:f6:d3:
7e:99:15:3b:c4:55:67:e4:84:ed:5d:cc:6e:53:ca:
50:26:51:bc:5c:40:9a:2c:06:da:5c:f4:22:db:26:
d8:32:d5:47:d1:35:6a:48:d1:03:8b:08:eb:ea:6c:
69:61:37:6b:bc:25:24:f8:aa:36:0d:b7:fd:ff:16:
c6:17:e6:ea:2b:5c:dc:0e:e2:b1:86:76:35:f9:ae:
a1:9b:d5:e8:09:0d:cf:62:72:cb:d9:a8:16:df:ba:
ee:2a:28:3c:99:67:22:7a:67:ef:6a:b1:95:5f:5c:
a9:8b:a7:bf:1a:15:5b:8b:89:a1:c6:83:8a:32:fc:
ab:26:4d:8f:ed:66:33:d6:d0:ce:8e:d5:2c:87:7c:
82:84:3e:da:04:d7:6b:2d:e5:f9:13:4b:43:41:88:
20:e3:d6:94:f4:f5:91:f1:1b:db:8a:c3:3b:ba:a0:
f7:8a:66:68:0b:b0:bf:17:2b:c6:98:3f:c0:bb:d2:
39:87:b1:60:ac:e2:b0:48:99:5b:47:c4:3e:c1:14:
88:fb:8b:fa:1f:12:66:10:60:d2:3b:37:37:cf:56:
b2:99:44:c4:fd:aa:c5:66:45:ca:1d:20:81:ca:92:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7C:61:9E:73:18:90:E1:C4:D7:C6:1F:4E:D4:93:5A:A3:29:F2:F0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a3ddbe26-074e-4d33-8a31-3cb83c403402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fe9:c040::/48
Signature Algorithm: sha256WithRSAEncryption
7a:6c:80:37:e3:36:ef:99:98:b9:8f:d0:f4:40:59:22:81:69:
6f:d1:9f:30:ac:df:fa:a1:b1:2d:59:cf:a0:b3:9e:3e:16:87:
a0:61:e3:05:5e:8f:e8:bf:b0:e2:a6:d3:09:7d:dc:28:24:e9:
b7:67:c7:6f:f7:a0:75:bf:02:8b:0e:42:ab:3d:e3:c3:ac:e3:
50:88:fd:70:26:45:20:03:25:3b:4a:0d:70:73:be:4a:46:a3:
36:47:10:ab:6a:5c:9c:39:96:83:76:20:a1:d3:44:87:b0:14:
f0:e6:e7:65:68:6e:09:15:cd:91:d5:44:25:e5:24:43:bc:ae:
87:1d:86:19:f1:05:d9:93:d1:a2:d9:0d:f5:39:7b:70:96:42:
bf:85:01:04:cf:71:87:5d:72:81:83:60:4f:68:8c:e0:5a:da:
9d:30:89:21:8c:f5:0e:27:aa:79:06:86:43:ae:bd:2a:8e:90:
53:4e:c5:e3:53:ae:6f:9c:e9:80:ad:eb:0e:57:ec:c1:aa:14:
ec:2e:95:e7:91:4e:18:e2:21:7c:5b:fe:87:6d:4b:81:26:66:
cc:a7:7f:98:c8:51:4f:c7:89:79:a6:db:b9:0d:b9:21:12:41:
1a:eb:2a:40:95:87:78:d7:a7:10:72:2b:73:6c:6b:66:6d:15:
90:0a:b4:4b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUMLhE+lCBdwWDhi7mVFwSryoNzIUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTMxMDAzMDUwWhcNMjYwODI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BmY2M2M2I2M2QxNjNjYzFlZWZhMTcyNzhjZWMyOGVhMTdi
ODI3ZmI1M2I1YzNiNzg0M2ZiZTliMTUwODE4MzVhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDKgtnVUOIPIG68IafZhH0uU4XrC93v1R3Bg/L2036ZFTvE
VWfkhO1dzG5TylAmUbxcQJosBtpc9CLbJtgy1UfRNWpI0QOLCOvqbGlhN2u8JST4
qjYNt/3/FsYX5uorXNwO4rGGdjX5rqGb1egJDc9icsvZqBbfuu4qKDyZZyJ6Z+9q
sZVfXKmLp78aFVuLiaHGg4oy/KsmTY/tZjPW0M6O1SyHfIKEPtoE12st5fkTS0NB
iCDj1pT09ZHxG9uKwzu6oPeKZmgLsL8XK8aYP8C70jmHsWCs4rBImVtHxD7BFIj7
i/ofEmYQYNI7NzfPVrKZRMT9qsVmRcodIIHKkp5VAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUMXxhnnMYkOHE18YfTtSTWqMp8vAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzZGRiZTI2LTA3NGUtNGQzMy04YTMxLTNjYjgzYzQwMzQwMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/pwEAwDQYJKoZIhvcNAQELBQADggEBAHpsgDfjNu+ZmLmP0PRAWSKB
aW/RnzCs3/qhsS1Zz6Cznj4Wh6Bh4wVej+i/sOKm0wl93Cgk6bdnx2/3oHW/AosO
Qqs948Os41CI/XAmRSADJTtKDXBzvkpGozZHEKtqXJw5loN2IKHTRIewFPDm52Vo
bgkVzZHVRCXlJEO8rocdhhnxBdmT0aLZDfU5e3CWQr+FAQTPcYddcoGDYE9ojOBa
2p0wiSGM9Q4nqnkGhkOuvSqOkFNOxeNTrm+c6YCt6w5X7MGqFOwuleeRThjiIXxb
/odtS4EmZsynf5jIUU/HiXmm27kNuSESQRrrKkCVh3jXpxByK3Nsa2ZtFZAKtEs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:46:18 2026 by rpki-client