
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff345320-77cb-41e8-8a2f-c920cdec043f.roa
File: ff345320-77cb-41e8-8a2f-c920cdec043f.roa (raw, json)
Hash identifier: hG7g6r87w/V4l9iwYw8jUA7lqa4fRCMhp9vHbMxq/E4=
Subject key identifier: AA:75:F3:E4:1A:F7:15:F0:91:BB:68:1C:89:6C:10:7D:CE:64:F4:38
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 110BCB2B80CC02861AAE0069A13A991841D6E2BF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff345320-77cb-41e8-8a2f-c920cdec043f.roa
Signing time: Wed 20 May 2026 00:21:10 +0000
ROA not before: Wed 20 May 2026 00:21:10 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1fed:40c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:0b:cb:2b:80:cc:02:86:1a:ae:00:69:a1:3a:99:18:41:d6:e2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 20 00:21:10 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=f03a9991deb46e4cc304234e9399c0cce3e0a6b5795f75b6142ef6ce779c0500, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d8:b4:b1:26:ae:29:aa:3d:12:e0:23:a7:08:
83:b4:e2:fe:6b:5c:52:15:61:6a:bf:fb:ca:6d:f3:
0a:6b:4e:5e:69:fe:2a:ae:50:ec:8d:31:3f:45:e5:
7e:74:f1:81:b8:57:f1:0f:61:2c:d1:d5:b9:f0:ad:
39:c4:a4:08:40:d8:3f:9c:35:66:cc:25:8a:6e:aa:
bc:37:87:ee:a6:33:be:c8:de:61:6d:07:3f:90:86:
1d:3d:f0:17:5e:87:54:f1:b2:61:5d:2e:da:c4:0d:
97:01:04:f1:f3:83:9a:ed:aa:55:99:40:89:81:71:
87:2d:10:1f:93:9b:4b:ff:2b:19:55:b7:58:12:0a:
51:e2:e6:4f:ac:30:43:5c:cd:96:aa:de:3a:82:01:
24:6f:99:ca:a5:cb:08:5b:c0:ce:d1:b6:b1:3b:ee:
d8:bc:ab:da:d2:9b:fb:2c:cf:dc:e2:06:51:af:3b:
c0:8e:b3:56:93:1f:ba:33:c2:4e:f9:13:fb:a6:90:
f4:e8:7c:ce:c0:f0:9a:75:78:ac:e2:c1:fb:ce:88:
84:fc:d9:b4:47:fb:99:50:ed:17:54:6d:d1:3a:9c:
30:a0:db:ed:05:b6:fa:c2:71:a9:70:d2:a1:eb:3e:
a3:0f:66:60:67:74:dc:d5:ff:9c:ab:09:67:cc:fe:
d5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:75:F3:E4:1A:F7:15:F0:91:BB:68:1C:89:6C:10:7D:CE:64:F4:38
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ff345320-77cb-41e8-8a2f-c920cdec043f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fed:40c0::/48
Signature Algorithm: sha256WithRSAEncryption
61:7e:47:de:45:4e:1a:bd:09:24:cc:19:c8:b0:00:5e:fa:19:
f9:51:a0:3f:90:11:2b:88:b1:f7:62:c7:46:04:12:09:dc:fb:
13:59:e2:99:fa:5c:1b:f4:eb:af:fe:23:61:34:6d:a0:c0:a0:
ce:e1:58:5d:68:d6:40:e5:16:36:07:7b:e0:92:45:65:b4:29:
72:54:e7:83:9b:4c:dd:0e:f7:af:db:aa:17:b8:99:8b:e6:fd:
ab:55:9e:d9:81:76:2f:d1:8d:eb:51:86:3e:21:f4:2f:4e:61:
22:5d:46:25:7f:4c:d5:45:d6:7f:da:2c:36:1c:ac:76:bc:9c:
a8:e1:f9:17:b8:71:99:fd:28:82:a2:dd:81:77:1a:f5:dc:c2:
22:13:d3:c6:1b:47:48:99:03:90:66:5e:ae:ee:56:b3:83:40:
be:cb:22:4d:f4:84:07:09:f1:97:bc:62:06:b1:38:a6:b8:f7:
e3:91:68:25:ec:b9:83:27:21:a5:0a:c8:f2:e8:da:6f:a8:18:
dc:87:c7:e8:c4:44:25:2d:02:f4:c4:ca:1b:75:1c:c0:53:53:
37:c7:59:72:d8:21:23:73:92:e2:0e:dd:8e:e2:39:1b:87:80:
86:6b:57:7a:e8:1e:a9:40:5c:ec:5e:df:43:de:1a:4b:86:11:
b0:fd:34:51
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEQvLK4DMAoYargBpoTqZGEHW4r8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTIwMDAyMTEwWhcNMjYwODE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BmMDNhOTk5MWRlYjQ2ZTRjYzMwNDIzNGU5Mzk5YzBjY2Uz
ZTBhNmI1Nzk1Zjc1YjYxNDJlZjZjZTc3OWMwNTAwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCR2LSxJq4pqj0S4COnCIO04v5rXFIVYWq/+8pt8wprTl5p
/iquUOyNMT9F5X508YG4V/EPYSzR1bnwrTnEpAhA2D+cNWbMJYpuqrw3h+6mM77I
3mFtBz+Qhh098Bdeh1TxsmFdLtrEDZcBBPHzg5rtqlWZQImBcYctEB+Tm0v/KxlV
t1gSClHi5k+sMENczZaq3jqCASRvmcqlywhbwM7RtrE77ti8q9rSm/ssz9ziBlGv
O8COs1aTH7ozwk75E/umkPTofM7A8Jp1eKziwfvOiIT82bRH+5lQ7RdUbdE6nDCg
2+0FtvrCcalw0qHrPqMPZmBndNzV/5yrCWfM/tXZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqnXz5Br3FfCRu2gciWwQfc5k9DgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZmMzQ1MzIwLTc3Y2ItNDFlOC04YTJmLWM5MjBjZGVjMDQzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/tQMAwDQYJKoZIhvcNAQELBQADggEBAGF+R95FThq9CSTMGciwAF76
GflRoD+QESuIsfdix0YEEgnc+xNZ4pn6XBv066/+I2E0baDAoM7hWF1o1kDlFjYH
e+CSRWW0KXJU54ObTN0O96/bqhe4mYvm/atVntmBdi/RjetRhj4h9C9OYSJdRiV/
TNVF1n/aLDYcrHa8nKjh+Re4cZn9KIKi3YF3GvXcwiIT08YbR0iZA5BmXq7uVrOD
QL7LIk30hAcJ8Ze8YgaxOKa49+ORaCXsuYMnIaUKyPLo2m+oGNyHx+jERCUtAvTE
yht1HMBTUzfHWXLYISNzkuIO3Y7iORuHgIZrV3roHqlAXOxe30PeGkuGEbD9NFE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:29:12 2026 by rpki-client