
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7360de1-e186-40c6-bd23-3c7bd4024b9f.roa
File: c7360de1-e186-40c6-bd23-3c7bd4024b9f.roa (raw, json)
Hash identifier: 1ZbXghEpelsS+W1Tr/h2NLvfvynNhhIiCxIzP+ERf98=
Subject key identifier: 0B:3E:E6:8C:7C:46:C5:2E:D7:10:64:F5:F8:33:94:CB:87:B9:3B:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3F8D7C8697F6E40E59ABC50F4AC6C91C87E09394
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7360de1-e186-40c6-bd23-3c7bd4024b9f.roa
Signing time: Fri 06 Feb 2026 00:10:10 +0000
ROA not before: Fri 06 Feb 2026 00:10:10 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 74.173.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:8d:7c:86:97:f6:e4:0e:59:ab:c5:0f:4a:c6:c9:1c:87:e0:93:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 6 00:10:10 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=61bc5d3f6b12c1d5bae04fed62cafd846483e78549f6382f2fc04ec5b58b45ed, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:70:ad:a0:ce:38:1d:06:33:b5:83:87:b7:5b:
24:ec:44:82:8a:83:71:78:0f:e1:3c:f2:a5:ab:be:
30:0b:86:6a:40:d4:0f:a5:a5:61:6f:c3:ba:8b:f3:
03:e1:df:fd:a7:60:8e:ce:b4:91:d9:8c:22:39:6e:
fa:57:25:47:53:d1:29:df:cf:8d:0e:71:48:2f:f9:
e1:c7:20:ce:28:17:b7:c9:a1:b7:25:d7:76:7a:2d:
c2:cb:8e:a4:0c:81:d7:f4:12:d3:f6:22:5d:10:f9:
db:67:cb:4e:f6:10:5f:83:54:57:af:61:39:28:5e:
dd:a0:23:ae:c2:28:80:aa:80:d9:cf:85:b0:80:c0:
3e:f1:60:2c:95:35:6e:5b:94:f8:26:d7:38:6f:10:
b0:dc:a7:01:9f:31:dc:6f:33:d8:74:e4:c9:a2:4a:
d4:bf:fe:5c:98:ad:0d:f7:99:dd:e2:96:74:e4:25:
c4:0b:50:83:64:58:ac:dd:07:5b:b2:42:ef:7f:e2:
5f:6e:b7:1b:1c:6c:f5:b2:16:ab:bd:9b:14:00:cc:
a4:28:7e:e3:dc:f8:54:8e:53:8e:d4:e8:e4:f2:a7:
61:aa:9d:81:0f:39:a3:17:5e:18:e4:eb:c6:ca:08:
93:65:dc:1d:11:2a:c5:56:f7:78:2d:ff:cf:37:21:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:3E:E6:8C:7C:46:C5:2E:D7:10:64:F5:F8:33:94:CB:87:B9:3B:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7360de1-e186-40c6-bd23-3c7bd4024b9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.173.0.0/16
Signature Algorithm: sha256WithRSAEncryption
63:17:90:c0:31:66:84:49:f5:36:31:72:27:5a:99:1e:82:ca:
81:b9:51:59:ab:2e:54:55:50:33:3a:39:51:46:05:4b:89:87:
88:e9:e1:fd:65:8d:01:dc:84:9f:45:cc:35:e4:c2:76:3d:8a:
67:d3:9c:81:ec:28:4d:4e:51:2e:4d:13:e2:47:e2:00:7e:57:
dc:b9:29:58:8b:1e:20:61:52:34:7a:17:e2:59:72:2b:c2:9a:
bc:b2:15:d2:bc:7e:ca:ba:28:c9:02:7d:33:35:f9:5e:5c:6f:
a3:5f:b0:46:88:45:61:7f:a0:8c:72:8f:e3:cc:63:39:30:3f:
a4:ab:07:95:32:99:e6:35:4b:6c:cb:54:5f:f1:cf:36:52:55:
d4:34:bd:58:c4:e3:26:ab:ea:35:a0:1b:fc:38:09:2e:5d:39:
46:01:3d:e5:8e:30:9f:9b:af:e8:41:ce:ec:32:44:87:ab:78:
b5:67:ac:91:fd:0b:a5:25:8d:94:10:29:28:a8:32:d2:74:ee:
6c:de:e8:ac:fe:a4:62:8f:c5:ce:ae:c5:fe:b3:c1:9b:d0:05:
45:70:0d:6b:9c:73:02:98:9c:5f:ea:62:aa:1a:65:df:3e:4c:
7e:6d:4a:b4:d8:05:dd:0a:61:2a:a9:ea:bc:6b:7e:ad:0b:bf:
6d:9a:56:17
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUP418hpf25A5Zq8UPSsbJHIfgk5QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA2MDAxMDEwWhcNMjYwNTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A2MWJjNWQzZjZiMTJjMWQ1YmFlMDRmZWQ2MmNhZmQ4NDY0
ODNlNzg1NDlmNjM4MmYyZmMwNGVjNWI1OGI0NWVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqcK2gzjgdBjO1g4e3WyTsRIKKg3F4D+E88qWrvjALhmpA
1A+lpWFvw7qL8wPh3/2nYI7OtJHZjCI5bvpXJUdT0Snfz40OcUgv+eHHIM4oF7fJ
obcl13Z6LcLLjqQMgdf0EtP2Il0Q+dtny072EF+DVFevYTkoXt2gI67CKICqgNnP
hbCAwD7xYCyVNW5blPgm1zhvELDcpwGfMdxvM9h05MmiStS//lyYrQ33md3ilnTk
JcQLUINkWKzdB1uyQu9/4l9utxscbPWyFqu9mxQAzKQofuPc+FSOU47U6OTyp2Gq
nYEPOaMXXhjk68bKCJNl3B0RKsVW93gt/883ITHFAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUCz7mjHxGxS7XEGT1+DOUy4e5O34wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M3MzYwZGUxLWUxODYtNDBjNi1iZDIzLTNjN2JkNDAyNGI5Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBKrTANBgkqhkiG9w0BAQsFAAOCAQEAYxeQwDFmhEn1NjFyJ1qZHoLKgblR
WasuVFVQMzo5UUYFS4mHiOnh/WWNAdyEn0XMNeTCdj2KZ9OcgewoTU5RLk0T4kfi
AH5X3LkpWIseIGFSNHoX4llyK8KavLIV0rx+yrooyQJ9MzX5Xlxvo1+wRohFYX+g
jHKP48xjOTA/pKsHlTKZ5jVLbMtUX/HPNlJV1DS9WMTjJqvqNaAb/DgJLl05RgE9
5Y4wn5uv6EHO7DJEh6t4tWeskf0LpSWNlBApKKgy0nTubN7orP6kYo/Fzq7F/rPB
m9AFRXANa5xzApicX+piqhpl3z5Mfm1KtNgF3QphKqnqvGt+rQu/bZpWFw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:55:18 2026 by rpki-client