
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa
File: 1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa (raw, json)
Hash identifier: 2igQbiMyC5/uxNqEq+XthTdwPbUWzetZpaijpQEfgfQ=
Subject key identifier: 84:E2:A4:CA:DE:92:90:99:E8:1D:7C:B0:45:A5:06:19:05:FD:C3:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4326D2475552B1BBDC20F67DE5C06D39A5365AF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa
Signing time: Sat 18 Jul 2026 00:21:01 +0000
ROA not before: Sat 18 Jul 2026 00:21:01 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f22::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:26:d2:47:55:52:b1:bb:dc:20:f6:7d:e5:c0:6d:39:a5:36:5a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:21:01 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=47daf036b415f589ada7a5d875cbf3815505bfce57a79b5571cfc4c39bd2d194, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:16:00:9d:c4:ce:4c:1e:7b:3f:21:6b:22:87:
8d:ce:8c:f7:30:da:20:1f:72:e1:ea:33:1d:ac:1b:
c9:a0:f7:72:9c:c7:4a:72:fe:fd:57:22:7f:66:b6:
ff:7c:18:af:73:8b:a6:57:f2:33:35:42:d0:e7:10:
3a:02:be:e2:d6:88:ab:63:36:77:ec:30:62:95:11:
c0:a6:ed:d6:ad:00:02:e0:dd:95:5a:9c:da:be:2b:
b6:b5:49:49:2c:a6:7a:6c:40:8c:f4:03:ca:ea:da:
ac:7a:30:ff:9b:3f:59:bd:0c:d7:31:68:e2:2e:b6:
6d:fc:ed:75:d3:5e:c0:20:be:03:32:b6:d4:93:10:
50:bf:fc:84:81:5b:3a:46:73:3f:d7:74:17:76:2a:
c4:0e:af:2b:6e:e6:3b:b9:28:47:0c:60:19:ed:51:
a1:98:36:d4:ea:3d:1b:ac:7b:d3:f0:cc:f7:3e:7f:
b3:29:29:a6:13:21:c7:5d:a9:88:b1:53:ef:6b:dc:
1a:59:48:09:2c:1c:d0:9e:0d:5f:aa:a3:df:39:33:
9d:6b:7e:28:27:88:a6:cd:3b:a4:0a:60:6c:c3:c6:
29:0a:f0:63:a8:df:95:c8:28:45:8e:1e:85:a7:4c:
d6:6f:3a:da:80:37:34:f3:eb:cc:f1:45:8f:cb:e8:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E2:A4:CA:DE:92:90:99:E8:1D:7C:B0:45:A5:06:19:05:FD:C3:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b9bf796-27cb-4e4b-a7b2-346f0c3276a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f22::/36
Signature Algorithm: sha256WithRSAEncryption
61:93:d9:14:cb:f7:34:e6:81:c6:78:54:09:56:0d:7d:7d:5a:
3d:51:55:9b:fe:8b:8f:41:50:a5:39:f9:c8:88:51:25:eb:b5:
93:b1:a5:68:ad:bb:55:2d:d2:c2:e7:77:98:ae:eb:46:d5:29:
36:23:72:2a:b4:32:57:ba:8b:e5:2f:aa:5b:b0:0e:62:a3:48:
a4:24:cc:ba:69:a5:b3:7f:15:b0:4b:08:1d:f0:c8:4d:79:c3:
75:fa:90:7f:f1:df:1e:a3:7d:cf:08:39:67:fb:78:2f:04:6e:
29:f6:8c:c0:51:a4:e9:c7:f7:a7:2b:c8:be:f9:ea:9d:88:e9:
14:8b:86:77:c4:cf:62:f6:98:c1:91:6b:1d:0f:60:86:c4:40:
e6:60:03:04:22:4d:28:08:fe:fe:d1:6d:94:25:13:b8:fd:72:
71:26:09:53:83:8f:00:07:60:c8:25:77:99:e2:3a:9e:d5:93:
99:76:ec:e5:e2:21:6c:46:ed:9a:38:17:ce:5b:6d:fa:10:5d:
22:6b:5d:90:85:2a:41:e2:37:7a:8f:eb:1e:56:6a:a1:f4:26:
32:35:52:63:82:4e:76:6f:b8:88:fc:00:f9:86:8c:a8:16:87:
a6:cc:b2:c7:d1:23:84:1d:ad:d2:bf:ad:3c:bd:08:30:3d:96:
0a:04:60:5d
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUQybSR1VSsbvcIPZ95cBtOaU2WvcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAyMTAxWhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A0N2RhZjAzNmI0MTVmNTg5YWRhN2E1ZDg3NWNiZjM4MTU1
MDViZmNlNTdhNzliNTU3MWNmYzRjMzliZDJkMTk0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtFgCdxM5MHns/IWsih43OjPcw2iAfcuHqMx2sG8mg93Kc
x0py/v1XIn9mtv98GK9zi6ZX8jM1QtDnEDoCvuLWiKtjNnfsMGKVEcCm7datAALg
3ZVanNq+K7a1SUkspnpsQIz0A8rq2qx6MP+bP1m9DNcxaOIutm387XXTXsAgvgMy
ttSTEFC//ISBWzpGcz/XdBd2KsQOrytu5ju5KEcMYBntUaGYNtTqPRuse9PwzPc+
f7MpKaYTIcddqYixU+9r3BpZSAksHNCeDV+qo985M51rfigniKbNO6QKYGzDxikK
8GOo35XIKEWOHoWnTNZvOtqANzTz68zxRY/L6OQxAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUhOKkyt6SkJnoHXywRaUGGQX9wwgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiOWJmNzk2LTI3Y2ItNGU0Yi1hN2IyLTM0NmYwYzMyNzZhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgQmAB8iADANBgkqhkiG9w0BAQsFAAOCAQEAYZPZFMv3NOaBxnhUCVYNfX1a
PVFVm/6Lj0FQpTn5yIhRJeu1k7GlaK27VS3Swud3mK7rRtUpNiNyKrQyV7qL5S+q
W7AOYqNIpCTMummls38VsEsIHfDITXnDdfqQf/HfHqN9zwg5Z/t4LwRuKfaMwFGk
6cf3pyvIvvnqnYjpFIuGd8TPYvaYwZFrHQ9ghsRA5mADBCJNKAj+/tFtlCUTuP1y
cSYJU4OPAAdgyCV3meI6ntWTmXbs5eIhbEbtmjgXzltt+hBdImtdkIUqQeI3eo/r
HlZqofQmMjVSY4JOdm+4iPwA+YaMqBaHpsyyx9EjhB2t0r+tPL0IMD2WCgRgXQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:30:24 2026 by rpki-client