
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa
File: ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa (raw, json)
Hash identifier: bYqJx/W0bWT4dSH9dXYgn43tetRRuhp10IqWdjEnzv8=
Subject key identifier: 22:D5:60:5A:A5:6B:9A:C5:62:37:A5:3D:61:0E:64:CA:3B:D7:10:75
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 40D7BDBCE36152562EF3652DEAC225C14305B502
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa
Signing time: Fri 15 May 2026 01:30:16 +0000
ROA not before: Fri 15 May 2026 01:30:16 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:8150::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:d7:bd:bc:e3:61:52:56:2e:f3:65:2d:ea:c2:25:c1:43:05:b5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 01:30:16 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=5f54a66fd220dc96045a515b450663e42f75f400829e80fd2fa083f88c64d027, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b0:d6:cb:10:2b:fe:bc:77:75:22:df:b2:3f:
3d:f4:7a:02:4e:ce:00:93:38:ba:1a:c5:98:16:36:
6e:f8:10:cb:06:01:5d:19:9d:a1:f3:aa:d4:f7:14:
74:44:8e:b9:d1:2c:c1:8e:cd:2e:44:aa:e8:d5:8e:
e1:d9:b3:43:51:34:92:c7:76:0f:72:15:cb:63:bf:
5f:20:69:86:79:89:79:42:ca:08:31:8f:37:38:26:
2e:4f:a1:3d:a1:65:cc:0b:86:61:cc:34:bf:5d:3e:
5d:c4:00:b7:83:d1:db:cf:86:ed:8b:da:c3:ec:d7:
03:cd:48:0e:6e:12:28:2e:b1:41:59:0f:66:b0:9f:
ce:03:4b:f9:f5:7a:77:48:07:08:75:75:10:c9:cb:
cb:c7:10:bc:64:20:3d:d8:93:e1:92:fb:2e:8e:13:
80:08:cb:d3:0a:2a:b2:a3:0c:65:26:59:78:fa:2c:
03:2e:cc:4f:20:53:b7:71:6f:a2:9b:73:d2:10:52:
63:28:4d:10:e6:38:9d:87:1f:47:46:d0:7f:3c:9a:
b4:a0:07:a8:62:b9:b1:f8:7a:b1:55:29:22:b5:23:
99:04:c5:5b:a4:07:47:a0:dd:14:a3:82:50:08:0f:
2e:4e:7c:f8:4e:79:79:b2:41:de:8e:eb:b2:9a:b0:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D5:60:5A:A5:6B:9A:C5:62:37:A5:3D:61:0E:64:CA:3B:D7:10:75
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ffc6e8ee-33dc-4ec2-9024-2d5d15c826b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:8150::/48
Signature Algorithm: sha256WithRSAEncryption
97:fc:0f:66:21:60:96:9c:81:62:d9:d4:36:06:eb:3c:52:e1:
c0:c4:28:1f:85:1f:45:92:0f:24:f5:77:14:6a:4e:6c:10:31:
e9:69:97:79:9d:d2:f0:93:46:85:e2:2d:90:37:ef:80:78:5d:
3d:0b:5d:5c:be:d4:25:31:20:09:9a:c7:f8:c4:a2:8e:5a:46:
fe:82:fc:00:25:2f:91:9f:52:a7:73:ed:1e:1c:46:29:37:3c:
7a:87:b2:45:a3:23:dd:28:c1:74:4a:0a:0e:10:70:77:75:53:
64:e2:4b:77:c0:2a:9c:12:af:6d:8a:4c:03:a7:dd:5e:1e:c0:
49:2d:05:32:75:d6:7f:13:44:6a:d4:ef:90:b8:7c:87:08:29:
92:db:37:49:da:74:73:96:25:bf:eb:6d:53:2a:7a:24:85:4c:
eb:e2:96:a8:6e:cf:80:44:fa:94:fb:f8:0d:3f:30:5f:5a:28:
e3:14:9b:e4:3a:57:61:69:1a:bb:00:cf:96:73:72:45:b3:9f:
c0:9c:e2:55:c2:83:ad:80:20:39:47:99:7c:89:46:64:cb:d5:
77:23:04:9d:3b:87:5c:4d:6c:3b:0c:3a:db:b5:3c:c5:13:42:
a8:2f:a2:ee:1d:78:04:da:df:86:51:13:9b:a9:bd:23:8d:ac:
7e:90:9e:cc
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQNe9vONhUlYu82Ut6sIlwUMFtQIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDEzMDE2WhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1ZjU0YTY2ZmQyMjBkYzk2MDQ1YTUxNWI0NTA2NjNlNDJm
NzVmNDAwODI5ZTgwZmQyZmEwODNmODhjNjRkMDI3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4sNbLECv+vHd1It+yPz30egJOzgCTOLoaxZgWNm74EMsG
AV0ZnaHzqtT3FHREjrnRLMGOzS5EqujVjuHZs0NRNJLHdg9yFctjv18gaYZ5iXlC
yggxjzc4Ji5PoT2hZcwLhmHMNL9dPl3EALeD0dvPhu2L2sPs1wPNSA5uEigusUFZ
D2awn84DS/n1endIBwh1dRDJy8vHELxkID3Yk+GS+y6OE4AIy9MKKrKjDGUmWXj6
LAMuzE8gU7dxb6Kbc9IQUmMoTRDmOJ2HH0dG0H88mrSgB6hiubH4erFVKSK1I5kE
xVukB0eg3RSjglAIDy5OfPhOeXmyQd6O67KasIqPAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUItVgWqVrmsViN6U9YQ5kyjvXEHUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2ZmYzZlOGVlLTMzZGMtNGVjMi05MDI0LTJkNWQxNWM4MjZiOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB//gVAwDQYJKoZIhvcNAQELBQADggEBAJf8D2YhYJacgWLZ1DYG6zxS
4cDEKB+FH0WSDyT1dxRqTmwQMelpl3md0vCTRoXiLZA374B4XT0LXVy+1CUxIAma
x/jEoo5aRv6C/AAlL5GfUqdz7R4cRik3PHqHskWjI90owXRKCg4QcHd1U2TiS3fA
KpwSr22KTAOn3V4ewEktBTJ11n8TRGrU75C4fIcIKZLbN0nadHOWJb/rbVMqeiSF
TOvilqhuz4BE+pT7+A0/MF9aKOMUm+Q6V2FpGrsAz5ZzckWzn8Cc4lXCg62AIDlH
mXyJRmTL1XcjBJ07h1xNbDsMOtu1PMUTQqgvou4deATa34ZRE5upvSONrH6Qnsw=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:53 2026 by rpki-client