
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be4e97c9-f73c-4bb3-ae0f-c126be1890bc.roa
File: be4e97c9-f73c-4bb3-ae0f-c126be1890bc.roa (raw, json)
Hash identifier: WfQxOKXaYI+pSOjB80TqtxMUEfzVvpNxIAI/Ynrdohg=
Subject key identifier: 5C:46:EA:4F:F0:99:84:2D:4F:A8:E1:22:7D:E4:AA:72:74:C0:0E:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3C498CC47A3B083C86154BA4B2049D6DDD09FF25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be4e97c9-f73c-4bb3-ae0f-c126be1890bc.roa
Signing time: Fri 13 Feb 2026 00:30:33 +0000
ROA not before: Fri 13 Feb 2026 00:30:33 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f38:ec80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:49:8c:c4:7a:3b:08:3c:86:15:4b:a4:b2:04:9d:6d:dd:09:ff:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:30:33 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=463508a8578f2b876070a26c26a850de4fe566bec233393a39f0bce9984c2a8f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f0:cc:f8:8c:23:c4:5c:f9:60:5b:42:b1:e2:
c5:8d:0e:59:63:09:52:8c:57:a6:1f:40:da:f2:a0:
62:79:71:20:0f:64:a5:10:6e:d3:9d:a3:99:24:51:
fe:95:06:bb:5a:05:d3:1b:fd:c7:a7:0d:5b:dd:38:
95:ad:60:f8:28:dc:a8:22:ea:00:83:77:24:51:e3:
e0:c5:ca:94:c1:97:9e:9f:a6:00:52:f6:ff:31:4f:
44:63:fb:da:8d:88:a9:24:30:90:cc:41:2e:df:dc:
e6:3d:b3:28:60:fb:37:a7:64:3f:d6:69:e7:60:58:
bd:11:17:9e:f9:76:2f:16:37:71:43:e6:fb:ac:51:
89:a5:c4:f4:9e:da:91:28:5d:5b:9d:af:43:9d:95:
85:72:9c:97:11:f2:45:3b:3a:93:40:15:94:73:21:
46:26:c4:b2:e9:bc:1e:b5:f5:9e:3c:4d:56:37:fb:
47:53:98:5f:07:a9:d3:71:74:b2:9a:51:cb:46:16:
bf:f7:db:3d:a5:78:b1:47:82:80:69:89:ea:df:dd:
ae:32:05:5c:f1:4d:82:00:5c:79:43:ec:19:56:cd:
95:f6:ff:fc:c1:9c:04:7d:07:92:ba:1d:80:0d:eb:
a3:c9:7b:39:a2:ed:e9:b0:38:62:2b:8f:4c:7e:46:
d9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:46:EA:4F:F0:99:84:2D:4F:A8:E1:22:7D:E4:AA:72:74:C0:0E:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/be4e97c9-f73c-4bb3-ae0f-c126be1890bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f38:ec80::/48
Signature Algorithm: sha256WithRSAEncryption
68:c1:4e:26:f3:2b:3e:6b:78:39:79:9a:02:c0:01:08:9a:5c:
89:a0:2d:17:13:d6:df:d0:b8:d7:29:7f:1a:6a:5f:c9:cb:0a:
2c:e7:5d:83:d2:c1:d4:31:ca:ef:50:f7:ef:15:9f:da:b1:e2:
5b:c6:01:56:cc:d5:e7:2e:e4:3e:37:14:cc:99:ca:14:73:a1:
31:81:83:d9:83:42:db:8f:66:b3:40:24:78:db:9e:4b:a5:65:
af:52:d6:b6:b4:91:cd:0d:66:7d:20:54:2f:b7:9e:b1:2b:a6:
88:d4:65:3e:94:c6:07:ab:1a:a6:e0:4e:cd:b2:1b:73:4d:93:
fa:b7:cd:f5:11:e2:98:39:fe:b2:2c:a5:df:c3:27:6f:25:24:
4b:65:21:3c:66:df:42:78:59:cd:09:7e:7a:7b:e0:17:9d:f3:
16:a8:0d:99:4c:b6:a2:ab:9a:1f:55:cd:2d:71:96:0c:6b:a6:
ed:3a:4c:95:09:a9:39:e3:73:32:be:3e:f3:7e:5f:36:3a:cf:
f9:c9:37:6f:3d:4b:dc:62:17:11:ae:6d:c1:94:67:71:b2:0f:
f8:15:0e:a1:ac:1b:4a:b5:a4:88:ad:80:82:35:f8:6c:f2:a1:
9b:52:eb:90:bf:f2:57:74:3c:a5:24:a8:e9:83:ee:7d:38:5e:
74:02:86:a1
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPEmMxHo7CDyGFUuksgSdbd0J/yUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDAzMDMzWhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NjM1MDhhODU3OGYyYjg3NjA3MGEyNmMyNmE4NTBkZTRm
ZTU2NmJlYzIzMzM5M2EzOWYwYmNlOTk4NGMyYThmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDg8Mz4jCPEXPlgW0Kx4sWNDlljCVKMV6YfQNryoGJ5cSAP
ZKUQbtOdo5kkUf6VBrtaBdMb/cenDVvdOJWtYPgo3Kgi6gCDdyRR4+DFypTBl56f
pgBS9v8xT0Rj+9qNiKkkMJDMQS7f3OY9syhg+zenZD/WaedgWL0RF575di8WN3FD
5vusUYmlxPSe2pEoXVudr0OdlYVynJcR8kU7OpNAFZRzIUYmxLLpvB619Z48TVY3
+0dTmF8HqdNxdLKaUctGFr/32z2leLFHgoBpierf3a4yBVzxTYIAXHlD7BlWzZX2
//zBnAR9B5K6HYAN66PJezmi7emwOGIrj0x+Rtk1AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXEbqT/CZhC1PqOEifeSqcnTADsQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JlNGU5N2M5LWY3M2MtNGJiMy1hZTBmLWMxMjZiZTE4OTBiYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB847IAwDQYJKoZIhvcNAQELBQADggEBAGjBTibzKz5reDl5mgLAAQia
XImgLRcT1t/QuNcpfxpqX8nLCiznXYPSwdQxyu9Q9+8Vn9qx4lvGAVbM1ecu5D43
FMyZyhRzoTGBg9mDQtuPZrNAJHjbnkulZa9S1ra0kc0NZn0gVC+3nrErpojUZT6U
xgerGqbgTs2yG3NNk/q3zfUR4pg5/rIspd/DJ28lJEtlITxm30J4Wc0Jfnp74Bed
8xaoDZlMtqKrmh9VzS1xlgxrpu06TJUJqTnjczK+PvN+XzY6z/nJN289S9xiFxGu
bcGUZ3GyD/gVDqGsG0q1pIitgII1+GzyoZtS65C/8ld0PKUkqOmD7n04XnQChqE=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:06:48 2026 by rpki-client