
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa
File: ada9656c-30f4-4e44-894d-f0d706b08daa.roa (raw, json)
Hash identifier: Z90jTUPjG0CIN45J6wx00AJoLNgdzdEM2RdvDynkW+o=
Subject key identifier: F1:5F:81:6B:3B:AD:44:D1:53:17:2E:55:81:EA:9A:75:4C:23:CE:20
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1EE7D2EABC32BC88A3A8129D4E2EE7EE933394FA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa
Signing time: Tue 24 Feb 2026 01:11:17 +0000
ROA not before: Tue 24 Feb 2026 01:11:17 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e7:d2:ea:bc:32:bc:88:a3:a8:12:9d:4e:2e:e7:ee:93:33:94:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 01:11:17 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=c7d3b290b6f9dcb2566419e4507e48ad23e8990aa1683c3f5f3a1989ccd58b96, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:5f:f9:d6:df:55:a9:9d:2c:82:08:f9:e9:
64:57:35:04:90:6d:67:2c:8a:75:cb:31:43:69:93:
38:23:ae:0d:6c:b9:bd:2e:ea:c6:01:ee:6b:5c:e8:
56:f6:02:d5:00:5b:f3:c7:c9:08:6c:e3:55:15:41:
34:b8:cd:2d:ec:c8:6d:3b:a2:f7:f4:91:b8:7c:e5:
e0:79:5a:9e:7c:d3:ed:5d:12:6b:c3:c5:16:69:62:
bc:be:bc:03:8e:4f:5a:2e:20:f7:50:ad:20:9e:a2:
7b:4c:eb:0e:4a:f9:ac:43:09:32:2f:02:e7:43:97:
69:1d:1b:25:67:05:78:fd:17:64:70:8e:59:d0:b6:
97:ac:72:37:b9:c0:e3:90:2f:dc:e5:f0:5f:12:6e:
a7:81:cb:a1:ca:9b:ae:c3:25:da:db:23:c4:af:6a:
55:7a:3f:39:ec:eb:34:ca:36:7f:19:76:80:3c:57:
49:1c:b9:7f:c9:d7:22:0d:41:0b:e2:0e:15:95:54:
24:a5:49:d7:93:41:22:41:28:ce:89:8e:0f:bc:e6:
0a:aa:d0:d4:60:2d:9e:f8:76:36:b2:3e:62:a0:d0:
da:20:e9:08:75:93:c1:63:d5:02:b6:f3:e9:6c:d9:
aa:71:08:ba:68:15:59:7e:be:4c:7a:d7:23:3e:b0:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5F:81:6B:3B:AD:44:D1:53:17:2E:55:81:EA:9A:75:4C:23:CE:20
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ada9656c-30f4-4e44-894d-f0d706b08daa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:34c0::/48
Signature Algorithm: sha256WithRSAEncryption
be:db:22:f4:12:64:8b:8d:46:2f:86:27:46:05:c0:d3:6e:0e:
52:98:b5:95:6a:fe:db:e4:d8:9b:5d:45:1b:8c:28:cc:51:b9:
a7:17:a8:be:98:25:3c:66:2d:38:71:56:8d:f3:d7:6c:d9:ce:
b0:49:7d:98:ac:1e:a4:25:8b:b4:d8:1e:d2:58:39:8c:4f:09:
f1:5a:21:1d:d7:43:aa:a5:27:a3:40:f2:74:58:3a:9b:d1:97:
38:09:59:9e:73:4b:f8:16:d6:cd:18:8c:75:37:9c:83:4f:92:
2b:ad:ab:51:b6:a5:3a:92:81:4a:a8:68:46:2e:b3:93:c9:6c:
9c:3b:72:14:5e:9b:c4:8f:44:d3:3b:18:6b:84:7a:bb:b8:7e:
7c:26:a7:53:51:ec:2b:08:5c:ac:0f:00:54:ff:0a:dd:67:e4:
4f:d0:85:85:e5:f5:c0:14:ef:89:ad:5b:22:57:40:7e:40:cf:
0c:cd:e0:be:c9:36:b7:87:46:eb:22:59:ec:5e:58:ca:53:66:
60:78:5d:49:14:af:b5:3f:b8:f3:15:c8:2a:61:3b:76:f5:b6:
84:d7:fe:9a:de:fc:e4:fb:50:de:79:f9:74:64:99:e4:bd:39:
f3:08:9f:c6:b7:b2:8e:64:70:e2:1a:64:75:b5:8f:38:ad:2a:
c8:e6:e3:d5
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUHufS6rwyvIijqBKdTi7n7pMzlPowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDExMTE3WhcNMjYwNTI1MjM1OTU5
WjB6MUkwRwYDVQQFE0BjN2QzYjI5MGI2ZjlkY2IyNTY2NDE5ZTQ1MDdlNDhhZDIz
ZTg5OTBhYTE2ODNjM2Y1ZjNhMTk4OWNjZDU4Yjk2MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCvD1/51t9VqZ0sggj56WRXNQSQbWcsinXLMUNpkzgjrg1s
ub0u6sYB7mtc6Fb2AtUAW/PHyQhs41UVQTS4zS3syG07ovf0kbh85eB5Wp580+1d
EmvDxRZpYry+vAOOT1ouIPdQrSCeontM6w5K+axDCTIvAudDl2kdGyVnBXj9F2Rw
jlnQtpescje5wOOQL9zl8F8SbqeBy6HKm67DJdrbI8SvalV6Pzns6zTKNn8ZdoA8
V0kcuX/J1yINQQviDhWVVCSlSdeTQSJBKM6Jjg+85gqq0NRgLZ74djayPmKg0Nog
6Qh1k8Fj1QK28+ls2apxCLpoFVl+vkx61yM+sG7pAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU8V+BazutRNFTFy5VgeqadUwjziAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FkYTk2NTZjLTMwZjQtNGU0NC04OTRkLWYwZDcwNmIwOGRhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/yNMAwDQYJKoZIhvcNAQELBQADggEBAL7bIvQSZIuNRi+GJ0YFwNNu
DlKYtZVq/tvk2JtdRRuMKMxRuacXqL6YJTxmLThxVo3z12zZzrBJfZisHqQli7TY
HtJYOYxPCfFaIR3XQ6qlJ6NA8nRYOpvRlzgJWZ5zS/gW1s0YjHU3nINPkiutq1G2
pTqSgUqoaEYus5PJbJw7chRem8SPRNM7GGuEeru4fnwmp1NR7CsIXKwPAFT/Ct1n
5E/QhYXl9cAU74mtWyJXQH5AzwzN4L7JNreHRusiWexeWMpTZmB4XUkUr7U/uPMV
yCphO3b1toTX/pre/OT7UN55+XRkmeS9OfMIn8a3so5kcOIaZHW1jzitKsjm49U=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:22:48 2026 by rpki-client