
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af08ff69-fda0-4866-ab7d-98df40c42aa9.roa
File: af08ff69-fda0-4866-ab7d-98df40c42aa9.roa (raw, json)
Hash identifier: VBYLSWwlNojtGxpG7tYXGwjRbbrdcsYCMkCA8Eq5IjQ=
Subject key identifier: AC:9F:09:B4:C0:79:8C:C4:AF:1A:FB:05:2B:9A:BE:3E:B0:D9:26:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E5CDE4FB743427FF4295AE48002A8E6C2BFC4B6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af08ff69-fda0-4866-ab7d-98df40c42aa9.roa
Signing time: Fri 24 Jul 2026 00:10:32 +0000
ROA not before: Fri 24 Jul 2026 00:10:32 +0000
ROA not after: Thu 22 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fb9:3400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5c:de:4f:b7:43:42:7f:f4:29:5a:e4:80:02:a8:e6:c2:bf:c4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 24 00:10:32 2026 GMT
Not After : Oct 22 23:59:59 2026 GMT
Subject: serialNumber=6fcb54942db39abf3634f712dcd7919b5c4cd1960ec423420eb734e639a4d3db, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c0:44:a8:fa:6d:58:79:6d:48:42:0f:45:64:
0e:7b:fa:b5:3c:83:59:24:99:8b:5f:cb:51:4b:94:
93:76:e3:52:d0:be:de:22:66:96:27:9f:ef:ad:bf:
75:69:c5:d8:31:79:66:ab:e5:94:07:e2:32:4a:1e:
78:7c:d7:f6:a9:88:14:4d:a6:48:24:96:70:c9:fd:
5f:a0:f1:81:ae:55:a1:82:fc:15:2a:14:87:ad:29:
82:ee:31:8e:e7:52:2c:d5:44:0e:e9:18:5b:3f:61:
00:08:bb:67:e7:d0:42:a1:18:f3:dd:d0:96:b8:b3:
bd:b7:83:70:5c:07:b9:5f:12:62:4b:e2:54:5d:13:
18:80:cc:e5:01:30:d0:22:91:fb:d6:69:a8:41:0c:
be:39:de:58:02:dd:b0:38:c3:85:11:77:29:e2:00:
8f:00:2f:89:ad:52:33:04:37:fb:1e:4c:5d:7c:69:
94:25:3a:49:e7:ab:ad:80:21:79:62:05:ed:40:cf:
56:e8:d8:d9:a4:31:a3:ab:9c:ee:b5:37:14:06:d0:
60:37:89:ab:02:3a:4d:1e:8a:bf:6c:49:02:9c:a2:
15:e1:25:e7:c0:b4:68:13:c0:6e:af:29:cc:23:14:
fe:ec:9e:cc:43:31:04:40:ba:0f:61:6e:be:87:56:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9F:09:B4:C0:79:8C:C4:AF:1A:FB:05:2B:9A:BE:3E:B0:D9:26:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/af08ff69-fda0-4866-ab7d-98df40c42aa9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fb9:3400::/40
Signature Algorithm: sha256WithRSAEncryption
90:75:25:17:a2:3c:61:70:ad:a0:8c:87:43:f6:3c:75:09:47:
23:02:e6:12:3d:f2:df:1e:92:96:98:08:b0:76:17:e0:d3:eb:
4a:77:99:03:dd:ff:31:0b:41:50:50:89:89:f5:cf:a4:65:1c:
97:40:d3:99:6b:ef:dc:c2:83:4c:2c:63:eb:5a:b2:14:14:cc:
71:7e:fa:14:a2:94:26:a6:b7:09:7e:78:e8:c4:b9:b5:cf:2b:
78:3f:d8:98:5b:fe:3c:67:5b:ee:ca:97:f4:7d:cc:85:9f:33:
1f:29:76:ed:24:89:da:76:7f:22:31:a6:c0:12:1a:4a:3b:e2:
7a:cf:71:02:41:b4:45:43:ab:3f:43:1a:5b:88:d1:d9:1e:0d:
c1:cb:67:b1:ca:27:fb:bb:c4:1f:86:bd:96:0d:b3:1e:0f:4a:
96:35:75:53:d9:45:2a:6f:c3:c8:e7:4d:9d:51:1d:f1:02:5e:
4c:b6:9e:7a:bc:21:57:03:8f:fc:57:24:d6:92:09:43:4f:de:
21:b4:66:27:8f:ec:b5:89:9e:b1:bc:0a:64:ee:1b:d9:2c:0a:
03:f1:4d:38:4a:18:6f:2b:94:90:b7:b6:da:1e:06:b0:26:c9:
09:04:47:b9:43:b2:44:d0:9a:41:51:f4:f7:a7:b7:75:4a:f9:
7f:aa:5d:5e
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUTlzeT7dDQn/0KVrkgAKo5sK/xLYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI0MDAxMDMyWhcNMjYxMDIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A2ZmNiNTQ5NDJkYjM5YWJmMzYzNGY3MTJkY2Q3OTE5YjVj
NGNkMTk2MGVjNDIzNDIwZWI3MzRlNjM5YTRkM2RiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCEwESo+m1YeW1IQg9FZA57+rU8g1kkmYtfy1FLlJN241LQ
vt4iZpYnn++tv3VpxdgxeWar5ZQH4jJKHnh81/apiBRNpkgklnDJ/V+g8YGuVaGC
/BUqFIetKYLuMY7nUizVRA7pGFs/YQAIu2fn0EKhGPPd0Ja4s723g3BcB7lfEmJL
4lRdExiAzOUBMNAikfvWaahBDL453lgC3bA4w4URdyniAI8AL4mtUjMEN/seTF18
aZQlOknnq62AIXliBe1Az1bo2NmkMaOrnO61NxQG0GA3iasCOk0eir9sSQKcohXh
JefAtGgTwG6vKcwjFP7snsxDMQRAug9hbr6HVjWRAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUrJ8JtMB5jMSvGvsFK5q+PrDZJjwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FmMDhmZjY5LWZkYTAtNDg2Ni1hYjdkLTk4ZGY0MGM0MmFhOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB+5NDANBgkqhkiG9w0BAQsFAAOCAQEAkHUlF6I8YXCtoIyHQ/Y8dQlH
IwLmEj3y3x6SlpgIsHYX4NPrSneZA93/MQtBUFCJifXPpGUcl0DTmWvv3MKDTCxj
61qyFBTMcX76FKKUJqa3CX546MS5tc8reD/YmFv+PGdb7sqX9H3MhZ8zHyl27SSJ
2nZ/IjGmwBIaSjvies9xAkG0RUOrP0MaW4jR2R4Nwctnscon+7vEH4a9lg2zHg9K
ljV1U9lFKm/DyOdNnVEd8QJeTLaeerwhVwOP/Fck1pIJQ0/eIbRmJ4/stYmesbwK
ZO4b2SwKA/FNOEoYbyuUkLe22h4GsCbJCQRHuUOyRNCaQVH096e3dUr5f6pdXg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:37:41 2026 by rpki-client