
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58feff9-88a6-4564-8529-2be1d91940ab.roa
File: a58feff9-88a6-4564-8529-2be1d91940ab.roa (raw, json)
Hash identifier: 474EUXX9DdOMWVLjBySwrpQbq1YVtDlp7bvRsiOAnYw=
Subject key identifier: D0:0C:95:93:A9:A4:72:B4:B8:B7:FE:58:39:4B:B2:A7:C1:FB:63:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11DE16058C65A3C53D9094CCC38171A34E723919
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58feff9-88a6-4564-8529-2be1d91940ab.roa
Signing time: Tue 21 Jul 2026 00:30:12 +0000
ROA not before: Tue 21 Jul 2026 00:30:12 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff3:c080::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:de:16:05:8c:65:a3:c5:3d:90:94:cc:c3:81:71:a3:4e:72:39:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 21 00:30:12 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=e610965907b11d995d53ee0aca8ebb7237188dc7c801ec77179c51f0f67c63f2, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b3:4b:3f:b8:cd:c2:90:58:b1:1b:19:21:2a:
04:77:6f:cd:b0:f4:ae:48:66:e1:17:1a:a8:36:42:
21:88:0e:9c:09:db:ac:18:c9:63:e7:9a:91:1b:c7:
20:cb:a6:70:c0:68:85:bd:38:a9:9f:15:56:3a:78:
06:b6:f1:86:66:94:f3:f5:38:7b:8a:88:4e:e6:44:
b1:b3:2d:44:9c:2c:b0:71:8b:ea:a0:16:65:4e:14:
92:8d:50:2a:25:d4:e5:de:b0:00:8e:b4:06:11:fd:
d8:c3:1c:ac:5b:31:ce:91:f9:24:07:dd:18:22:c2:
62:61:86:c0:cc:6a:76:19:cc:a6:93:1e:ee:ec:e1:
b2:8f:81:ba:34:34:1d:7b:44:4b:c6:bb:43:87:34:
b5:da:64:b2:cb:27:7f:ed:11:95:03:67:03:ce:16:
d4:02:13:23:b9:a0:39:6a:40:c6:93:e2:40:9a:b8:
fe:a5:14:54:df:b2:5f:a1:ec:b9:2c:e6:85:d0:ce:
5b:a1:cf:3a:c1:f0:f1:3c:a6:20:83:4e:cc:6b:76:
d2:f9:a8:b8:49:75:a6:99:29:0e:f3:a4:e9:89:86:
17:e7:4d:e6:e9:7c:d5:90:f2:4f:7a:a7:07:e6:df:
b8:4f:07:ee:cf:c9:29:63:ef:1a:84:41:d5:a3:1c:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0C:95:93:A9:A4:72:B4:B8:B7:FE:58:39:4B:B2:A7:C1:FB:63:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a58feff9-88a6-4564-8529-2be1d91940ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:c080::/46
Signature Algorithm: sha256WithRSAEncryption
5d:a4:11:ed:cb:aa:eb:e8:45:0a:13:42:ae:76:a7:01:42:88:
00:78:1f:49:88:3b:c3:2d:69:71:1e:5d:fe:42:32:89:a7:72:
3b:5c:b8:9c:20:61:6b:e3:a1:1e:72:93:5a:36:1d:b0:68:dd:
e3:79:99:f9:3a:cb:60:95:e2:32:ce:7b:38:36:0e:9c:a1:7f:
c1:9a:f9:db:ac:43:35:9e:11:a5:74:17:ea:98:45:f3:c4:eb:
5d:b7:99:35:56:60:49:55:4c:1d:c2:10:99:8f:ea:e0:e4:17:
fd:2c:bf:88:e0:dd:57:ef:59:f9:d6:b9:61:71:d8:7b:a7:d0:
9a:b6:20:81:c1:0d:63:83:66:44:93:cf:17:4d:bd:e5:f7:65:
89:5d:37:b6:bb:52:cd:02:15:f0:55:8b:bd:9c:47:e5:ed:dd:
4e:90:f6:de:8c:07:e2:6e:36:95:a2:5f:a9:fe:5f:46:f6:1d:
49:26:8d:8a:ea:57:ae:c7:e4:ed:d2:8b:91:04:12:a4:3c:79:
c7:96:73:8d:31:ba:6d:d6:25:dc:b2:b0:e6:2c:ff:de:d7:07:
19:87:d1:ad:0f:16:bb:50:6d:e6:5c:b7:ea:1d:5a:24:3c:09:
0a:77:cb:02:7a:83:dd:68:7c:ef:7d:f1:44:89:2f:ac:71:3d:
22:85:d8:0e
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUEd4WBYxlo8U9kJTMw4Fxo05yORkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIxMDAzMDEyWhcNMjYxMDE5MjM1OTU5
WjB6MUkwRwYDVQQFE0BlNjEwOTY1OTA3YjExZDk5NWQ1M2VlMGFjYThlYmI3MjM3
MTg4ZGM3YzgwMWVjNzcxNzljNTFmMGY2N2M2M2YyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC3s0s/uM3CkFixGxkhKgR3b82w9K5IZuEXGqg2QiGIDpwJ
26wYyWPnmpEbxyDLpnDAaIW9OKmfFVY6eAa28YZmlPP1OHuKiE7mRLGzLUScLLBx
i+qgFmVOFJKNUCol1OXesACOtAYR/djDHKxbMc6R+SQH3RgiwmJhhsDManYZzKaT
Hu7s4bKPgbo0NB17REvGu0OHNLXaZLLLJ3/tEZUDZwPOFtQCEyO5oDlqQMaT4kCa
uP6lFFTfsl+h7Lks5oXQzluhzzrB8PE8piCDTsxrdtL5qLhJdaaZKQ7zpOmJhhfn
TebpfNWQ8k96pwfm37hPB+7PySlj7xqEQdWjHNaNAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU0AyVk6mkcrS4t/5YOUuyp8H7YwwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E1OGZlZmY5LTg4YTYtNDU2NC04NTI5LTJiZTFkOTE5NDBhYi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAB/zwIAwDQYJKoZIhvcNAQELBQADggEBAF2kEe3LquvoRQoTQq52pwFC
iAB4H0mIO8MtaXEeXf5CMomncjtcuJwgYWvjoR5yk1o2HbBo3eN5mfk6y2CV4jLO
ezg2Dpyhf8Ga+dusQzWeEaV0F+qYRfPE6123mTVWYElVTB3CEJmP6uDkF/0sv4jg
3VfvWfnWuWFx2Hun0Jq2IIHBDWODZkSTzxdNveX3ZYldN7a7Us0CFfBVi72cR+Xt
3U6Q9t6MB+JuNpWiX6n+X0b2HUkmjYrqV67H5O3Si5EEEqQ8eceWc40xum3WJdyy
sOYs/97XBxmH0a0PFrtQbeZct+odWiQ8CQp3ywJ6g91ofO998USJL6xxPSKF2A4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:44:36 2026 by rpki-client