
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f656bc-7873-4ad2-a6b8-910a84458fdd.roa
File: 51f656bc-7873-4ad2-a6b8-910a84458fdd.roa (raw, json)
Hash identifier: BHfjgD1QbjnuBYSJvAMU8saAk16oHIIq8Hr33a/Ukxk=
Subject key identifier: 21:8D:3C:7E:25:63:CE:3D:EB:B7:DC:22:2A:11:3D:E8:6C:57:05:05
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71AE8675043910AF19843D0DA584CC29B1EBC096
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f656bc-7873-4ad2-a6b8-910a84458fdd.roa
Signing time: Fri 08 May 2026 00:32:01 +0000
ROA not before: Fri 08 May 2026 00:32:01 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 94.38.0.0/15 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ae:86:75:04:39:10:af:19:84:3d:0d:a5:84:cc:29:b1:eb:c0:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 8 00:32:01 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=9e5e55c9269c09a52b0344813050636595bd94d38c0885e250b046b52df2408b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:07:7a:5f:ab:2b:b7:06:75:4b:0f:b2:1c:
8e:c3:8c:f9:9f:af:95:35:c4:54:ca:fb:77:ce:1e:
43:cf:7f:82:42:6c:49:4f:b4:d9:27:30:3b:45:1b:
ad:d4:ef:83:b9:f2:75:52:16:9b:a4:3f:0f:30:11:
52:ff:6f:0e:9f:73:c3:e0:71:a6:31:61:d5:1d:04:
be:41:2c:c0:9a:fe:24:37:7c:3e:bc:c2:f7:cd:53:
f5:cd:8b:d6:17:2f:56:d0:0a:36:a5:ab:51:a3:9f:
1d:a1:08:fc:2a:5e:18:1c:2b:c7:33:84:d1:20:15:
56:57:c6:1e:2f:a2:8b:ac:70:bb:da:af:a8:31:e6:
66:7d:71:c3:b3:e0:06:ff:c0:9f:72:4e:6e:74:05:
e7:cf:48:84:bc:75:32:15:72:21:1a:96:31:c7:f3:
ce:9f:48:3a:16:a0:38:c7:ac:22:6b:19:3e:58:87:
aa:df:35:60:e5:0e:5a:4c:35:49:15:ea:a7:b2:97:
41:be:71:aa:70:93:ff:58:36:36:32:3b:be:12:30:
8e:51:7b:a2:18:14:ac:8b:08:6f:40:7a:de:6b:53:
70:5e:9c:ed:d5:7e:7f:10:35:b6:ba:18:c1:34:d3:
b4:b5:17:b3:07:d9:66:f9:b0:21:eb:1b:67:fc:51:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8D:3C:7E:25:63:CE:3D:EB:B7:DC:22:2A:11:3D:E8:6C:57:05:05
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/51f656bc-7873-4ad2-a6b8-910a84458fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.38.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b6:c4:90:1e:b1:7f:f4:5d:0c:3e:6e:3b:c1:59:02:38:ca:de:
0f:71:8d:27:8e:50:1d:31:e4:a8:75:b3:02:f6:31:12:78:96:
29:5c:ed:43:98:a8:e0:7d:ae:5a:4e:37:34:3a:58:f0:91:1d:
b6:82:4b:1e:d3:e8:58:b7:65:60:60:74:43:a9:78:46:31:a0:
bd:1d:8d:59:8b:10:5a:d1:72:24:b1:70:fa:01:6e:4b:7b:83:
51:9b:5a:bd:9d:cf:f3:de:ac:db:45:22:80:a7:1c:cf:f7:19:
1c:88:57:b4:bc:15:59:e5:d2:59:7a:3d:52:17:db:7b:3e:81:
20:91:b0:59:91:52:0b:0f:e1:dd:5d:de:84:e4:43:fa:b5:99:
4e:9d:ed:43:c4:31:b4:72:0c:0c:b1:32:2d:a7:00:da:21:82:
c0:26:97:68:20:b5:68:85:1d:8a:44:ab:e5:96:89:ea:70:a8:
a3:af:4e:7e:1e:dd:a2:1f:45:2e:f9:cc:5c:04:b1:5e:e1:f2:
59:98:10:ba:7c:98:0e:09:93:aa:c0:96:75:2b:78:fb:ed:5c:
45:ca:63:8c:a6:67:26:b3:9f:b6:73:04:6e:6e:27:0e:80:1c:
e4:5b:4a:86:75:43:b3:d2:1f:50:a1:19:84:76:93:c9:77:cd:
bf:07:1f:8e
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUca6GdQQ5EK8ZhD0NpYTMKbHrwJYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA4MDAzMjAxWhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZTVlNTVjOTI2OWMwOWE1MmIwMzQ0ODEzMDUwNjM2NTk1
YmQ5NGQzOGMwODg1ZTI1MGIwNDZiNTJkZjI0MDhiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1JAd6X6srtwZ1Sw+yHI7DjPmfr5U1xFTK+3fOHkPPf4JC
bElPtNknMDtFG63U74O58nVSFpukPw8wEVL/bw6fc8PgcaYxYdUdBL5BLMCa/iQ3
fD68wvfNU/XNi9YXL1bQCjalq1Gjnx2hCPwqXhgcK8czhNEgFVZXxh4voouscLva
r6gx5mZ9ccOz4Ab/wJ9yTm50BefPSIS8dTIVciEaljHH886fSDoWoDjHrCJrGT5Y
h6rfNWDlDlpMNUkV6qeyl0G+capwk/9YNjYyO74SMI5Re6IYFKyLCG9Aet5rU3Be
nO3Vfn8QNba6GME007S1F7MH2Wb5sCHrG2f8USyvAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUIY08fiVjzj3rt9wiKhE96GxXBQUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUxZjY1NmJjLTc4NzMtNGFkMi1hNmI4LTkxMGE4NDQ1OGZkZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwFeJjANBgkqhkiG9w0BAQsFAAOCAQEAtsSQHrF/9F0MPm47wVkCOMreD3GN
J45QHTHkqHWzAvYxEniWKVztQ5io4H2uWk43NDpY8JEdtoJLHtPoWLdlYGB0Q6l4
RjGgvR2NWYsQWtFyJLFw+gFuS3uDUZtavZ3P896s20UigKccz/cZHIhXtLwVWeXS
WXo9Uhfbez6BIJGwWZFSCw/h3V3ehORD+rWZTp3tQ8QxtHIMDLEyLacA2iGCwCaX
aCC1aIUdikSr5ZaJ6nCoo69Ofh7doh9FLvnMXASxXuHyWZgQunyYDgmTqsCWdSt4
++1cRcpjjKZnJrOftnMEbm4nDoAc5FtKhnVDs9IfUKEZhHaTyXfNvwcfjg==
-----END CERTIFICATE-----
Generated at Wed May 13 01:43:46 2026 by rpki-client