
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa
File: 616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa (raw, json)
Hash identifier: r8Zq0RuQKs/EO+wofL/Su7EQPhtUOYxAcB6zqJRkc2k=
Subject key identifier: 80:54:E9:47:91:F9:E7:DA:9E:57:3A:D2:38:81:60:EB:74:C1:A9:76
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F107EAA67B5B34493BE156ED78E47A5FB0B2E92
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa
Signing time: Mon 04 May 2026 01:00:44 +0000
ROA not before: Mon 04 May 2026 01:00:44 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f69:ec00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:10:7e:aa:67:b5:b3:44:93:be:15:6e:d7:8e:47:a5:fb:0b:2e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 01:00:44 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=59791f5e6dbd68b666ae5de7a9881eccc82b13a67eed4f633e093354b8771765, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:35:fa:21:12:d1:89:e1:e3:e9:39:3a:9a:cc:
54:79:dc:3f:99:4d:20:9a:0f:1c:9f:2e:40:a8:da:
ba:90:70:03:1e:c7:48:32:42:dd:fb:e3:a5:8c:f1:
44:d1:74:5e:02:ae:d7:28:7f:8e:eb:24:ed:f9:c7:
30:d0:df:4e:a8:3d:ad:b4:85:dd:36:ea:31:11:d7:
e3:00:07:1b:9d:da:d3:c7:b8:78:7a:e5:b0:c6:24:
82:85:ea:2a:54:f6:fa:86:92:d7:f1:b5:5f:9d:8e:
ed:99:cd:b1:af:64:49:bd:8b:4f:17:75:53:1a:a3:
4d:0c:0e:5c:a1:70:c7:11:e0:97:5b:27:df:56:13:
7c:8d:a2:34:c8:f3:88:73:d7:9b:0c:12:cf:03:14:
b0:1a:53:20:a9:d9:85:b0:ec:37:f8:92:1c:92:f9:
aa:00:f4:4f:f9:9b:9f:4d:e1:0c:d4:b3:60:48:cd:
6b:d4:99:94:a4:54:84:47:45:35:e4:a0:e7:04:97:
83:44:da:13:e5:45:5d:ad:24:0d:4a:19:be:15:ef:
c1:f6:70:27:81:aa:84:23:82:78:1e:61:7e:0a:69:
63:90:9f:6b:67:76:da:42:a0:22:80:df:d0:74:2b:
ca:89:07:f3:04:ae:bd:10:64:4d:b9:b0:0f:f2:8c:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:54:E9:47:91:F9:E7:DA:9E:57:3A:D2:38:81:60:EB:74:C1:A9:76
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/616b68e5-c6f1-4f20-954a-c46d16edaaf6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f69:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
83:3a:22:b6:fc:80:e4:fe:89:b7:5e:f6:0a:e6:ee:44:f9:cc:
d5:72:85:0b:c4:ac:b3:5a:c4:75:78:0f:7c:13:38:0c:66:e7:
83:14:86:62:49:25:dc:c5:0b:1b:a6:c4:83:c9:ab:f6:fd:d0:
9c:49:1e:f8:f9:94:72:79:80:44:6b:32:ed:69:91:64:17:e7:
d4:1a:8c:69:c2:3a:d9:74:c9:e6:86:bb:6a:c5:ec:fe:4c:57:
be:76:f6:17:f1:e9:35:09:90:30:2a:f2:64:a8:48:61:9d:56:
90:86:e1:5b:91:8a:5a:95:9b:1a:3f:17:dd:46:3f:8f:c8:95:
e9:9b:b0:75:b0:9b:8e:c9:ba:34:68:96:98:b2:05:67:a7:d0:
b5:21:98:93:73:3f:89:4f:89:63:66:57:01:1c:e0:e6:30:ad:
14:c5:07:39:39:0c:b5:da:1d:ca:be:04:c4:fe:1b:df:7a:24:
5e:16:28:52:7f:3c:f9:f8:2d:60:c0:2d:7d:57:ef:73:5e:78:
d7:f3:f6:82:8e:ae:23:79:55:26:da:dd:ae:ca:65:b7:d0:ce:
2c:1f:c2:40:e0:95:41:e4:a7:93:5a:79:4f:f5:7c:7a:cf:3d:
ef:2b:4a:a0:40:8e:37:65:53:53:cc:5d:8f:af:12:da:bb:f5:
e3:da:7c:6e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUDxB+qme1s0STvhVu145HpfsLLpIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDEwMDQ0WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A1OTc5MWY1ZTZkYmQ2OGI2NjZhZTVkZTdhOTg4MWVjY2M4
MmIxM2E2N2VlZDRmNjMzZTA5MzM1NGI4NzcxNzY1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCQNfohEtGJ4ePpOTqazFR53D+ZTSCaDxyfLkCo2rqQcAMe
x0gyQt3746WM8UTRdF4Crtcof47rJO35xzDQ306oPa20hd026jER1+MABxud2tPH
uHh65bDGJIKF6ipU9vqGktfxtV+dju2ZzbGvZEm9i08XdVMao00MDlyhcMcR4Jdb
J99WE3yNojTI84hz15sMEs8DFLAaUyCp2YWw7Df4khyS+aoA9E/5m59N4QzUs2BI
zWvUmZSkVIRHRTXkoOcEl4NE2hPlRV2tJA1KGb4V78H2cCeBqoQjgngeYX4KaWOQ
n2tndtpCoCKA39B0K8qJB/MErr0QZE25sA/yjNydAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUgFTpR5H559qeVzrSOIFg63TBqXYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzYxNmI2OGU1LWM2ZjEtNGYyMC05NTRhLWM0NmQxNmVkYWFmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB9p7DANBgkqhkiG9w0BAQsFAAOCAQEAgzoitvyA5P6Jt172CubuRPnM
1XKFC8Sss1rEdXgPfBM4DGbngxSGYkkl3MULG6bEg8mr9v3QnEke+PmUcnmARGsy
7WmRZBfn1BqMacI62XTJ5oa7asXs/kxXvnb2F/HpNQmQMCryZKhIYZ1WkIbhW5GK
WpWbGj8X3UY/j8iV6ZuwdbCbjsm6NGiWmLIFZ6fQtSGYk3M/iU+JY2ZXARzg5jCt
FMUHOTkMtdodyr4ExP4b33okXhYoUn88+fgtYMAtfVfvc1541/P2go6uI3lVJtrd
rsplt9DOLB/CQOCVQeSnk1p5T/V8es897ytKoECON2VTU8xdj68S2rv149p8bg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:50:19 2026 by rpki-client