
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4402c3e-b843-445e-9e31-c52516848923.roa
File: d4402c3e-b843-445e-9e31-c52516848923.roa (raw, json)
Hash identifier: Dw1hJ188Dj4r49o2uJhtPGDTV1zs/Jb4f8QNJW8fGOI=
Subject key identifier: E9:BF:E2:F2:1D:8D:92:58:78:FF:0E:CF:FF:9B:5F:27:AE:98:D7:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AF889E07A33C9C551848B69012C19AE7BB10A38
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4402c3e-b843-445e-9e31-c52516848923.roa
Signing time: Mon 01 Jun 2026 23:32:07 +0000
ROA not before: Mon 01 Jun 2026 23:32:07 +0000
ROA not after: Sun 30 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:8200::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f8:89:e0:7a:33:c9:c5:51:84:8b:69:01:2c:19:ae:7b:b1:0a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jun 1 23:32:07 2026 GMT
Not After : Aug 30 23:59:59 2026 GMT
Subject: serialNumber=927416a6f00057abf781598cc5d3781a74e4c42a0bf9a45bd238d4e80e252ccf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8c:b9:ca:3b:88:87:01:e0:59:ff:2c:46:3a:
bc:f3:e4:5a:f2:4b:27:88:4e:14:b9:7f:6f:72:dc:
14:98:05:6a:1b:55:af:b7:02:fb:7c:6e:71:7e:ce:
28:d3:4e:39:18:6a:c4:6d:64:53:34:49:27:5a:90:
e7:9f:1d:37:13:8d:5d:4b:5b:4b:c6:ad:97:8f:2b:
b2:1f:49:48:b7:e6:08:50:b9:60:01:54:5b:87:0a:
3e:a7:35:52:4d:91:7d:37:97:59:5c:d2:54:46:b6:
71:0f:9c:83:d4:a5:a3:71:d5:79:5a:be:c3:d5:c8:
2d:62:46:86:54:53:f5:10:00:bc:4c:b9:4b:28:26:
44:50:6b:c8:6f:9e:41:04:e6:0d:5a:48:2e:6f:78:
fa:d4:56:11:99:35:c7:9a:23:8f:ff:d9:3d:15:0e:
20:c0:59:82:b3:cc:a1:19:37:65:70:1b:d5:f0:59:
73:e8:89:42:26:8f:ba:f4:01:f9:ea:74:48:5a:9a:
b8:04:48:e4:c8:66:9c:56:ad:ac:4f:f0:50:d4:04:
83:01:d8:e1:99:82:4f:52:b7:9a:28:28:51:ec:7c:
52:d6:6a:c2:58:33:10:dd:fa:b7:4e:18:e5:b9:d2:
61:50:ca:b1:7c:5e:66:9b:27:4b:71:18:94:b6:67:
75:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BF:E2:F2:1D:8D:92:58:78:FF:0E:CF:FF:9B:5F:27:AE:98:D7:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4402c3e-b843-445e-9e31-c52516848923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:8200::/39
Signature Algorithm: sha256WithRSAEncryption
b7:6b:24:93:64:8f:32:cb:ef:41:38:2b:3b:33:e8:07:e0:76:
22:da:cb:b5:5f:1a:e7:9b:41:f0:2e:b6:70:a6:f6:df:83:34:
f4:c6:ac:41:e6:64:cf:25:b8:4f:7c:a9:ba:5f:ca:60:c2:e5:
51:92:28:14:75:cd:2f:6d:b9:ac:77:48:3e:b9:60:ab:e9:67:
5c:d5:dc:b6:2a:d0:46:be:f8:a4:1c:e9:86:31:47:3a:66:40:
d5:93:37:71:21:5e:b7:8c:07:25:55:cf:bd:66:e5:4f:58:2b:
44:8e:d0:f3:96:41:69:fa:df:b8:3a:f0:2d:02:e5:86:77:34:
7b:a7:05:30:ec:2e:79:89:00:a7:fb:55:b1:19:bb:d8:96:6e:
f1:b5:f9:09:4b:57:f3:a6:cc:23:bd:4a:d0:71:84:d4:9f:e3:
d5:cf:db:7e:a9:41:69:3d:7f:86:4b:76:00:aa:4b:61:4f:ad:
92:41:ef:a9:76:f7:d4:a1:29:60:9c:0a:aa:a2:89:dd:fc:86:
9c:89:14:14:b8:b3:e8:85:7c:d5:2c:4c:eb:f9:a0:aa:1b:c2:
3a:a1:32:57:1a:b4:e7:6e:fe:32:06:82:e9:34:08:f3:cf:00:
59:b8:7e:93:18:f3:52:1d:77:23:e8:31:6b:05:00:5f:51:77:
95:0d:7c:82
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUGviJ4HozycVRhItpASwZrnuxCjgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNjAxMjMzMjA3WhcNMjYwODMwMjM1OTU5
WjB6MUkwRwYDVQQFE0A5Mjc0MTZhNmYwMDA1N2FiZjc4MTU5OGNjNWQzNzgxYTc0
ZTRjNDJhMGJmOWE0NWJkMjM4ZDRlODBlMjUyY2NmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqjLnKO4iHAeBZ/yxGOrzz5FrySyeIThS5f29y3BSYBWob
Va+3Avt8bnF+zijTTjkYasRtZFM0SSdakOefHTcTjV1LW0vGrZePK7IfSUi35ghQ
uWABVFuHCj6nNVJNkX03l1lc0lRGtnEPnIPUpaNx1XlavsPVyC1iRoZUU/UQALxM
uUsoJkRQa8hvnkEE5g1aSC5vePrUVhGZNceaI4//2T0VDiDAWYKzzKEZN2VwG9Xw
WXPoiUImj7r0AfnqdEhamrgESOTIZpxWraxP8FDUBIMB2OGZgk9St5ooKFHsfFLW
asJYMxDd+rdOGOW50mFQyrF8XmabJ0txGJS2Z3XtAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQU6b/i8h2Nklh4/w7P/5tfJ66Y1yQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q0NDAyYzNlLWI4NDMtNDQ1ZS05ZTMxLWM1MjUxNjg0ODkyMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgEmAB/xgjANBgkqhkiG9w0BAQsFAAOCAQEAt2skk2SPMsvvQTgrOzPoB+B2
ItrLtV8a55tB8C62cKb234M09MasQeZkzyW4T3ypul/KYMLlUZIoFHXNL225rHdI
Prlgq+lnXNXctirQRr74pBzphjFHOmZA1ZM3cSFet4wHJVXPvWblT1grRI7Q85ZB
afrfuDrwLQLlhnc0e6cFMOwueYkAp/tVsRm72JZu8bX5CUtX86bMI71K0HGE1J/j
1c/bfqlBaT1/hkt2AKpLYU+tkkHvqXb31KEpYJwKqqKJ3fyGnIkUFLiz6IV81SxM
6/mgqhvCOqEyVxq0527+MgaC6TQI888AWbh+kxjzUh13I+gxawUAX1F3lQ18gg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:49 2026 by rpki-client