
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa
File: c4d7033d-2443-415e-b118-06f9d052957f.roa (raw, json)
Hash identifier: u5/dmDfkVDGwzG5lcNNqkMs0XzA1bY9oKhkxr9Hn358=
Subject key identifier: 9B:90:3A:71:BB:8C:32:12:1B:D7:56:0B:87:46:DE:DB:F5:9F:10:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E409C9D42DB727E4B3B6AAB63FA819D2C0A5F83
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa
Signing time: Fri 01 May 2026 00:11:17 +0000
ROA not before: Fri 01 May 2026 00:11:17 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff8:2000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:40:9c:9d:42:db:72:7e:4b:3b:6a:ab:63:fa:81:9d:2c:0a:5f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 1 00:11:17 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=a2c489db0950ccb114b64bb67a06dd8ebf885ed0ceba1efbbaa5e023a8f7632f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:33:63:88:b6:fa:51:36:c5:cd:22:b6:f1:90:
b3:49:ac:30:60:d9:79:76:95:d1:68:3e:5a:35:32:
d0:e6:de:29:80:d7:db:e3:b4:06:ff:f9:6f:60:cc:
08:f5:2a:f3:bf:92:37:b9:74:a7:79:a7:bc:93:a6:
94:d6:9f:79:bf:cf:3b:61:da:7b:7f:fa:3e:fa:5e:
86:e7:d2:d6:e0:6d:c6:c2:14:43:6e:12:44:0a:08:
65:47:d6:78:57:63:59:d0:80:ef:7f:3b:38:1e:bf:
2f:97:bb:41:cc:d4:e6:3e:5c:2d:87:78:b9:e0:7a:
88:b8:ec:cb:f0:bb:34:bd:53:61:f4:45:51:99:c5:
df:7d:2f:28:a7:2c:f1:53:22:7f:cb:31:3d:b4:30:
85:d4:3c:9a:8c:50:6e:76:1b:01:e9:e1:7f:9a:0a:
21:4b:9e:5d:2c:2e:38:1d:13:e9:89:0c:77:60:8f:
44:8b:d0:ee:33:26:46:81:d0:2b:c9:7b:1e:db:6f:
94:4c:44:84:79:1e:0f:ae:ef:50:3d:34:bd:84:2a:
02:85:e1:19:be:08:cb:eb:7a:b3:a6:7d:73:86:29:
05:e5:f3:d6:84:c9:ba:7c:9f:34:f7:3f:58:c8:23:
4f:63:a8:be:de:da:74:87:eb:11:4f:1c:a8:ab:da:
1b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:90:3A:71:BB:8C:32:12:1B:D7:56:0B:87:46:DE:DB:F5:9F:10:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4d7033d-2443-415e-b118-06f9d052957f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff8:2000::/40
Signature Algorithm: sha256WithRSAEncryption
93:b9:1c:e6:b2:f1:e1:b2:34:45:b1:43:f5:f5:39:83:8f:16:
5c:8d:0d:07:57:40:d5:bb:dc:71:af:2c:e4:38:2a:36:c2:7c:
97:39:21:cd:59:af:07:a1:28:55:1b:37:44:be:90:de:2b:dd:
36:02:66:c1:83:ee:11:0d:65:3a:b6:90:b9:d7:5b:ae:bc:eb:
06:5e:cc:5a:fe:8c:fe:2b:cc:a8:6e:50:95:ff:d3:16:ef:2e:
2a:a2:58:8a:de:91:7d:51:e6:1f:84:fb:2c:67:11:90:a8:1d:
6a:d7:b7:b1:75:c8:ae:b0:f7:38:33:97:31:70:77:ad:52:9c:
8d:c6:1e:a0:5f:90:32:3b:07:13:67:62:ee:4b:82:22:2f:5a:
a3:18:d9:03:b0:42:41:d7:8b:7f:8f:07:08:97:c7:28:26:e7:
dd:8d:9a:f4:06:7a:31:3e:0a:04:e0:0e:8d:2f:c8:50:4a:e7:
9d:46:1b:05:4a:56:a4:91:ae:2d:06:e7:fe:90:8c:1f:cf:32:
06:0c:4f:c7:b3:a5:13:85:f6:ad:50:39:2e:1d:7e:55:3c:be:
e5:5d:94:28:3c:4c:97:92:e8:49:92:6a:26:6e:ea:8e:19:b3:
2c:11:b2:5a:ef:bd:eb:56:bf:bc:8e:52:ec:f4:a2:ce:f6:7b:
14:b4:0e:58
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUXkCcnULbcn5LO2qrY/qBnSwKX4MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTAxMDAxMTE3WhcNMjYwNzMwMjM1OTU5
WjB6MUkwRwYDVQQFE0BhMmM0ODlkYjA5NTBjY2IxMTRiNjRiYjY3YTA2ZGQ4ZWJm
ODg1ZWQwY2ViYTFlZmJiYWE1ZTAyM2E4Zjc2MzJmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC1M2OItvpRNsXNIrbxkLNJrDBg2Xl2ldFoPlo1MtDm3imA
19vjtAb/+W9gzAj1KvO/kje5dKd5p7yTppTWn3m/zzth2nt/+j76Xobn0tbgbcbC
FENuEkQKCGVH1nhXY1nQgO9/Ozgevy+Xu0HM1OY+XC2HeLngeoi47MvwuzS9U2H0
RVGZxd99LyinLPFTIn/LMT20MIXUPJqMUG52GwHp4X+aCiFLnl0sLjgdE+mJDHdg
j0SL0O4zJkaB0CvJex7bb5RMRIR5Hg+u71A9NL2EKgKF4Rm+CMvrerOmfXOGKQXl
89aEybp8nzT3P1jII09jqL7e2nSH6xFPHKir2hunAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUm5A6cbuMMhIb11YLh0be2/WfECQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M0ZDcwMzNkLTI0NDMtNDE1ZS1iMTE4LTA2ZjlkMDUyOTU3Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAB/4IDANBgkqhkiG9w0BAQsFAAOCAQEAk7kc5rLx4bI0RbFD9fU5g48W
XI0NB1dA1bvcca8s5DgqNsJ8lzkhzVmvB6EoVRs3RL6Q3ivdNgJmwYPuEQ1lOraQ
uddbrrzrBl7MWv6M/ivMqG5Qlf/TFu8uKqJYit6RfVHmH4T7LGcRkKgdate3sXXI
rrD3ODOXMXB3rVKcjcYeoF+QMjsHE2di7kuCIi9aoxjZA7BCQdeLf48HCJfHKCbn
3Y2a9AZ6MT4KBOAOjS/IUErnnUYbBUpWpJGuLQbn/pCMH88yBgxPx7OlE4X2rVA5
Lh1+VTy+5V2UKDxMl5LoSZJqJm7qjhmzLBGyWu+961a/vI5S7PSizvZ7FLQOWA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:26:15 2026 by rpki-client