
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bd5ccb3-aab3-458f-9fbd-8d6741fc66ce.roa
File: 6bd5ccb3-aab3-458f-9fbd-8d6741fc66ce.roa (raw, json)
Hash identifier: KoEQvYYv6GqTSrXcSGA15CZV4/i/vi/10e3EC8W4wSo=
Subject key identifier: BF:72:4C:F9:76:18:2D:09:D2:16:38:4F:FD:D2:DB:4B:0C:F0:77:0D
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 2C299CDDF87C0145E882F1E02C46746B49484069
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bd5ccb3-aab3-458f-9fbd-8d6741fc66ce.roa
Signing time: Sun 17 May 2026 01:40:46 +0000
ROA not before: Sun 17 May 2026 01:40:46 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.52.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:29:9c:dd:f8:7c:01:45:e8:82:f1:e0:2c:46:74:6b:49:48:40:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 17 01:40:46 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=3acbb0c12a7caca166b0e3a75ac55b51ad61009664eb3ad30b4da6a4e86d2427, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3e:8d:d0:14:f4:71:76:5f:81:d3:02:dd:4b:
77:d3:5f:76:74:f0:2b:c7:b9:20:fa:be:35:6e:92:
3b:57:f0:a4:9f:a1:9d:0e:fc:03:25:b2:9f:bf:93:
4d:91:8e:3d:d8:fe:f7:8e:d1:25:c4:54:2b:a9:7e:
27:b8:02:48:e7:a0:0d:10:50:08:6a:0c:56:0e:6f:
9f:44:c5:d3:ac:09:58:df:7d:0c:ec:8f:d2:2b:c7:
d8:34:da:85:7d:cd:05:f3:8c:41:30:2b:08:39:8c:
ef:27:ae:c7:24:73:bd:c5:b5:ad:d3:26:34:2a:5d:
10:e3:45:db:ab:4b:8d:f8:7a:f4:83:84:de:de:77:
c5:a5:9a:3f:6c:e1:e4:ae:07:94:2c:10:39:8d:fa:
f8:e2:21:3c:70:5a:22:d1:05:bf:f5:d5:cf:d6:84:
6d:3a:13:0c:c5:79:7b:29:bf:e5:7c:a4:f6:e7:06:
d9:9e:6d:58:55:d9:2d:72:cc:37:31:0b:59:39:44:
18:2d:c0:00:2f:11:08:f0:c6:da:26:7b:1b:0a:f1:
fe:f5:1b:9d:cf:27:8e:cc:49:6c:75:74:39:73:c9:
84:04:cd:ad:20:18:30:6c:f2:92:cf:09:71:3e:a7:
f0:71:45:40:34:f4:99:49:b4:79:be:b3:cc:d8:0e:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:72:4C:F9:76:18:2D:09:D2:16:38:4F:FD:D2:DB:4B:0C:F0:77:0D
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6bd5ccb3-aab3-458f-9fbd-8d6741fc66ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.52.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:15:b3:55:ce:bc:9e:8d:59:6a:73:30:a9:48:5d:b3:3e:cd:
01:39:33:c4:e9:4b:00:84:9a:15:7c:7f:12:81:cd:64:b8:d3:
d7:77:7e:58:82:6b:d7:7b:1b:06:d7:71:71:ab:de:25:3a:00:
d5:45:68:2b:7c:59:9f:37:3a:0f:30:f0:47:10:6c:72:24:4b:
a7:06:76:19:4d:05:1c:52:eb:3d:6e:e4:b7:1c:f7:14:29:cf:
37:b8:09:aa:a9:a0:51:02:fc:c5:bd:15:b5:c9:1b:c3:8c:2d:
35:84:b1:d8:76:ff:9f:2c:c7:62:d1:ad:07:7b:64:53:4b:63:
f0:ea:14:f1:57:24:96:62:20:9e:df:15:72:43:71:4d:c7:12:
cc:69:c0:eb:1a:87:03:0c:12:e7:0a:b9:e9:00:24:66:31:37:
85:e3:20:cb:d2:f3:0d:d6:1a:87:05:a7:ae:24:4e:ea:5a:06:
4d:71:c7:a4:2b:22:d3:2f:0f:47:fc:b8:99:cc:16:3d:a2:44:
6f:62:48:3f:6e:c5:16:1f:c8:23:90:db:f1:2e:5e:01:e7:2c:
31:b0:02:f6:76:54:dc:b1:59:78:6c:bc:ad:06:6d:c1:de:35:
87:e7:c4:c9:b2:5a:6e:30:fb:46:5f:bd:20:ed:b6:11:a6:d0:
0e:8e:61:2f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIULCmc3fh8AUXogvHgLEZ0a0lIQGkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwNTE3MDE0MDQ2WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYWNiYjBjMTJhN2NhY2ExNjZiMGUzYTc1YWM1NWI1MWFk
NjEwMDk2NjRlYjNhZDMwYjRkYTZhNGU4NmQyNDI3MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDMPo3QFPRxdl+B0wLdS3fTX3Z08CvHuSD6vjVukjtX8KSf
oZ0O/AMlsp+/k02Rjj3Y/veO0SXEVCupfie4AkjnoA0QUAhqDFYOb59ExdOsCVjf
fQzsj9Irx9g02oV9zQXzjEEwKwg5jO8nrsckc73Fta3TJjQqXRDjRdurS434evSD
hN7ed8Wlmj9s4eSuB5QsEDmN+vjiITxwWiLRBb/11c/WhG06EwzFeXspv+V8pPbn
BtmebVhV2S1yzDcxC1k5RBgtwAAvEQjwxtomexsK8f71G53PJ47MSWx1dDlzyYQE
za0gGDBs8pLPCXE+p/BxRUA09JlJtHm+s8zYDkLjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUv3JM+XYYLQnSFjhP/dLbSwzwdw0wHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzZiZDVjY2IzLWFhYjMtNDU4Zi05ZmJkLThkNjc0MWZjNjZjZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwASNDANBgkqhkiG9w0BAQsFAAOCAQEAoxWzVc68no1ZanMwqUhdsz7NATkz
xOlLAISaFXx/EoHNZLjT13d+WIJr13sbBtdxcaveJToA1UVoK3xZnzc6DzDwRxBs
ciRLpwZ2GU0FHFLrPW7ktxz3FCnPN7gJqqmgUQL8xb0Vtckbw4wtNYSx2Hb/nyzH
YtGtB3tkU0tj8OoU8VcklmIgnt8VckNxTccSzGnA6xqHAwwS5wq56QAkZjE3heMg
y9LzDdYahwWnriRO6loGTXHHpCsi0y8PR/y4mcwWPaJEb2JIP27FFh/II5Db8S5e
AecsMbAC9nZU3LFZeGy8rQZtwd41h+fEybJabjD7Rl+9IO22EabQDo5hLw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:29:35 2026 by rpki-client