
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa
File: 4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa (raw, json)
Hash identifier: cuUjZwRcTd8AfLLBb7Eg4JAAEGQPdyActZVfuwDAZ6g=
Subject key identifier: E6:99:00:C0:AE:26:A3:3C:E2:AB:3D:50:32:F4:12:B5:12:F9:5D:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5CB2B3D1E1F23CB5929BB316226785DCC2E7A72A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa
Signing time: Tue 21 Jul 2026 01:11:20 +0000
ROA not before: Tue 21 Jul 2026 01:11:20 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fea:3480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b2:b3:d1:e1:f2:3c:b5:92:9b:b3:16:22:67:85:dc:c2:e7:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 21 01:11:20 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=cc48e2502018b84d6063f2eaa65726b95ceb3205430f627101932d75a1556f9d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ab:23:2d:d0:50:e8:5f:26:67:26:c3:30:15:
59:2f:78:7a:9c:49:23:f8:80:ec:11:4b:aa:d3:df:
a8:0d:64:09:4a:3e:6d:6f:65:a1:c7:66:72:1a:c1:
eb:df:93:04:5d:ab:27:bf:f3:8e:c0:00:d7:f9:85:
1f:e9:a5:e5:52:8c:c8:0c:0f:86:5d:31:90:5a:d7:
c8:61:31:c3:1f:16:34:0e:6d:8c:84:55:e3:f6:99:
ff:9d:c6:94:b5:82:ca:30:42:15:7f:ac:07:82:9b:
41:a9:a9:3a:6c:70:a8:22:74:f4:48:12:2d:99:65:
c3:c5:86:1b:13:33:70:11:68:8f:ad:fa:5f:d3:fe:
8b:26:0c:e6:93:b3:77:fd:6b:36:69:cd:35:c6:4c:
99:58:67:f4:2f:95:29:7e:9d:c7:73:70:93:c3:5f:
12:f1:3f:1b:5a:44:01:fd:67:27:24:3d:30:06:b8:
f3:96:40:c2:dc:5e:4a:73:65:2a:cc:fd:dd:80:9b:
65:6c:21:59:7f:fb:3a:69:d8:d0:ab:f2:55:dc:0d:
e4:87:16:88:d2:05:8c:95:70:6d:fb:66:f0:e0:54:
20:16:10:d0:07:5c:21:44:fc:db:67:d3:b3:4b:10:
40:1b:4a:aa:52:83:a6:de:9d:07:64:30:a8:a8:8f:
45:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:00:C0:AE:26:A3:3C:E2:AB:3D:50:32:F4:12:B5:12:F9:5D:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4864cae4-4d7e-49cd-a1b7-7f688c226d94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fea:3480::/48
Signature Algorithm: sha256WithRSAEncryption
0d:cb:53:d8:fb:03:ad:7f:17:bb:b3:14:0a:cc:d1:44:8b:64:
d5:72:bd:d0:65:84:54:97:81:42:35:2b:bc:b8:ba:ed:9a:92:
69:c3:3b:ec:1a:9b:49:8b:10:f6:e0:02:c3:a7:6b:c1:85:45:
fe:e4:a6:40:70:22:04:42:5e:05:22:d7:f0:a9:7a:a8:96:4e:
d5:44:3b:b0:27:a7:e3:ce:d3:0e:14:06:ab:53:13:3a:d5:18:
59:2d:ad:ae:08:92:13:b7:a8:f7:c3:70:eb:2d:f9:8d:e0:c9:
06:74:03:2d:7c:43:fa:5e:a7:a0:8a:f0:1d:b9:61:07:9a:7d:
51:00:e0:d9:1c:dd:34:58:eb:ee:a9:f1:59:90:59:54:01:0a:
93:46:66:eb:1e:c8:95:eb:43:3d:57:f1:1c:39:06:07:43:23:
5a:aa:67:76:1b:96:e6:18:11:18:e4:02:44:c1:bd:aa:ce:3d:
87:0a:cb:fc:dc:73:1b:72:67:8c:23:7e:1b:57:a2:3d:b1:9f:
81:ea:10:9a:06:a5:94:e5:7f:f3:88:0d:c7:02:ba:2d:10:48:
42:78:86:2e:2e:d1:df:ae:aa:c0:3e:48:cd:7c:93:f4:06:12:
9b:64:5f:15:81:bb:c8:9b:5f:1f:ae:ac:9c:c0:7d:ca:5a:86:
cb:a3:46:2c
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUXLKz0eHyPLWSm7MWImeF3MLnpyowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDExMTIwWhcNMjYxMDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BjYzQ4ZTI1MDIwMThiODRkNjA2M2YyZWFhNjU3MjZiOTVj
ZWIzMjA1NDMwZjYyNzEwMTkzMmQ3NWExNTU2ZjlkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoqyMt0FDoXyZnJsMwFVkveHqcSSP4gOwRS6rT36gNZAlK
Pm1vZaHHZnIawevfkwRdqye/847AANf5hR/ppeVSjMgMD4ZdMZBa18hhMcMfFjQO
bYyEVeP2mf+dxpS1gsowQhV/rAeCm0GpqTpscKgidPRIEi2ZZcPFhhsTM3ARaI+t
+l/T/osmDOaTs3f9azZpzTXGTJlYZ/QvlSl+ncdzcJPDXxLxPxtaRAH9ZyckPTAG
uPOWQMLcXkpzZSrM/d2Am2VsIVl/+zpp2NCr8lXcDeSHFojSBYyVcG37ZvDgVCAW
ENAHXCFE/Ntn07NLEEAbSqpSg6benQdkMKioj0X3AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU5pkAwK4mozziqz1QMvQStRL5XUowHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ4NjRjYWU0LTRkN2UtNDljZC1hMWI3LTdmNjg4YzIyNmQ5NC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAB/qNIAwDQYJKoZIhvcNAQELBQADggEBAA3LU9j7A61/F7uzFArM0USL
ZNVyvdBlhFSXgUI1K7y4uu2akmnDO+wam0mLEPbgAsOna8GFRf7kpkBwIgRCXgUi
1/CpeqiWTtVEO7Anp+PO0w4UBqtTEzrVGFktra4IkhO3qPfDcOst+Y3gyQZ0Ay18
Q/pep6CK8B25YQeafVEA4Nkc3TRY6+6p8VmQWVQBCpNGZuseyJXrQz1X8Rw5BgdD
I1qqZ3YbluYYERjkAkTBvarOPYcKy/zccxtyZ4wjfhtXoj2xn4HqEJoGpZTlf/OI
DccCui0QSEJ4hi4u0d+uqsA+SM18k/QGEptkXxWBu8ibXx+urJzAfcpahsujRiw=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:32:22 2026 by rpki-client