
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6194b27-8378-4959-8e87-076083a0e654.roa
File: f6194b27-8378-4959-8e87-076083a0e654.roa (raw, json)
Hash identifier: 68PiC/GkNexBE1rWGRC1J1GuSouwnTur90aBsEr+Q0s=
Subject key identifier: 91:15:85:B4:ED:08:74:99:9F:18:43:97:1C:50:C2:B5:20:E7:74:70
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6D2C99E4CA783489CD5CC0B9565C35287535C5C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6194b27-8378-4959-8e87-076083a0e654.roa
Signing time: Sun 15 Feb 2026 00:20:45 +0000
ROA not before: Sun 15 Feb 2026 00:20:45 +0000
ROA not after: Sat 16 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 107.179.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:2c:99:e4:ca:78:34:89:cd:5c:c0:b9:56:5c:35:28:75:35:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 15 00:20:45 2026 GMT
Not After : May 16 23:59:59 2026 GMT
Subject: serialNumber=5f11a0df5deeaa61729e4e04d5c8d0ca7fe335bdc70fe428fa701f57fe917465, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:8c:f5:a0:04:88:04:02:73:95:f9:b0:9b:
56:fb:2e:4a:d0:e2:3d:92:60:29:89:f1:d7:d7:d4:
95:8f:da:16:34:07:b1:75:ed:15:9e:e3:f4:a9:cf:
bd:91:db:b2:94:51:d1:b9:b0:bf:5d:1b:79:61:41:
e4:31:e6:7a:bd:a6:28:56:3d:28:eb:c1:f6:45:15:
20:49:53:b4:4a:c6:18:7b:ec:4e:fd:0d:79:a6:de:
ac:59:63:ae:56:bb:72:cb:3b:43:03:f2:a1:0c:31:
89:7f:4c:a5:69:95:06:da:18:fc:5a:97:fc:9f:ea:
2d:07:6f:12:c9:d4:d0:00:fd:ed:ab:4d:2e:08:f5:
b1:c1:b6:dc:3e:bd:ac:1d:2e:4a:eb:22:73:66:4f:
f9:98:cb:3c:f8:dc:a9:cb:be:ef:f6:68:3b:ea:e8:
71:9c:33:3d:b8:6e:45:b0:37:86:49:d3:4f:ea:55:
8e:ab:65:dc:83:66:99:33:fb:4a:64:1e:7f:58:97:
df:d4:a3:9e:3d:b9:88:d0:d0:77:8c:3a:7d:e4:4e:
90:15:51:60:1d:3d:56:86:17:c5:fe:91:97:dc:d2:
1a:59:61:3e:62:8a:21:f8:42:e6:1c:19:ef:cf:76:
f3:80:fd:21:cd:2f:64:df:bb:da:c3:a9:90:f9:a4:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:15:85:B4:ED:08:74:99:9F:18:43:97:1C:50:C2:B5:20:E7:74:70
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f6194b27-8378-4959-8e87-076083a0e654.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.179.0.0/17
Signature Algorithm: sha256WithRSAEncryption
37:94:c3:44:73:a8:88:3e:39:8d:bd:c9:3c:e8:1f:ad:54:b2:
1f:e4:33:ad:22:c1:b1:84:88:ea:fd:49:47:fa:3a:54:a9:6a:
a3:75:65:80:f3:c6:98:22:f1:b5:23:ec:85:a2:81:c9:0b:6f:
44:df:bd:73:58:3d:c5:e0:c0:77:b0:5c:5e:e5:5c:88:5e:43:
49:7e:e7:74:70:48:56:6a:e0:c6:9f:0a:b2:9a:ea:e4:cd:d4:
79:76:8a:5c:cf:2f:1f:c3:f7:d3:a0:31:a1:b7:60:86:25:30:
5d:a5:d8:b3:23:87:5e:e7:62:1b:61:23:93:ce:70:a6:53:e1:
fc:cd:77:28:5c:e6:aa:51:6d:18:67:7d:fc:7d:f0:14:83:38:
8e:17:0d:37:35:22:ef:43:8e:61:8e:bd:43:55:13:e4:13:f7:
61:2c:52:9f:8a:33:84:67:66:04:a2:86:5f:71:ad:04:64:d3:
cc:2c:46:58:c7:9f:0e:2c:cd:48:44:37:be:0a:a7:4a:52:2f:
94:8a:bc:07:38:c8:87:a0:29:2d:d3:6e:63:9f:0f:6f:7e:68:
b5:ad:8d:3b:c2:f7:ac:b0:42:e5:d1:df:29:73:dd:a7:6a:7b:
f7:73:fa:d4:0d:ac:71:a9:51:7f:87:a8:e9:49:1d:0a:9e:13:
ea:31:82:5d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbSyZ5Mp4NInNXMC5Vlw1KHU1xckwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE1MDAyMDQ1WhcNMjYwNTE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZjExYTBkZjVkZWVhYTYxNzI5ZTRlMDRkNWM4ZDBjYTdm
ZTMzNWJkYzcwZmU0MjhmYTcwMWY1N2ZlOTE3NDY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDi94z1oASIBAJzlfmwm1b7LkrQ4j2SYCmJ8dfX1JWP2hY0
B7F17RWe4/Spz72R27KUUdG5sL9dG3lhQeQx5nq9pihWPSjrwfZFFSBJU7RKxhh7
7E79DXmm3qxZY65Wu3LLO0MD8qEMMYl/TKVplQbaGPxal/yf6i0HbxLJ1NAA/e2r
TS4I9bHBttw+vawdLkrrInNmT/mYyzz43KnLvu/2aDvq6HGcMz24bkWwN4ZJ00/q
VY6rZdyDZpkz+0pkHn9Yl9/Uo549uYjQ0HeMOn3kTpAVUWAdPVaGF8X+kZfc0hpZ
YT5iiiH4QuYcGe/PdvOA/SHNL2Tfu9rDqZD5pHALAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkRWFtO0IdJmfGEOXHFDCtSDndHAwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y2MTk0YjI3LTgzNzgtNDk1OS04ZTg3LTA3NjA4M2EwZTY1NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdrswAwDQYJKoZIhvcNAQELBQADggEBADeUw0RzqIg+OY29yTzoH61Ush/k
M60iwbGEiOr9SUf6OlSpaqN1ZYDzxpgi8bUj7IWigckLb0TfvXNYPcXgwHewXF7l
XIheQ0l+53RwSFZq4MafCrKa6uTN1Hl2ilzPLx/D99OgMaG3YIYlMF2l2LMjh17n
YhthI5POcKZT4fzNdyhc5qpRbRhnffx98BSDOI4XDTc1Iu9DjmGOvUNVE+QT92Es
Up+KM4RnZgSihl9xrQRk08wsRljHnw4szUhEN74Kp0pSL5SKvAc4yIegKS3TbmOf
D29+aLWtjTvC96ywQuXR3ylz3adqe/dz+tQNrHGpUX+HqOlJHQqeE+oxgl0=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:23:47 2026 by rpki-client