
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00bc79cf-a629-49f6-9113-cdb8600f7418.roa
File: 00bc79cf-a629-49f6-9113-cdb8600f7418.roa (raw, json)
Hash identifier: nW4Ev22OA+8HQZs/TNwQtI3i4QPOEcAmSKxComWM09Y=
Subject key identifier: 96:25:52:FF:C3:6E:79:06:D0:B3:04:C1:4B:06:94:96:FE:5A:8C:4F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3FD86101948EE31A0E6E32185171C4367A741DD7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00bc79cf-a629-49f6-9113-cdb8600f7418.roa
Signing time: Tue 05 May 2026 00:20:10 +0000
ROA not before: Tue 05 May 2026 00:20:10 +0000
ROA not after: Mon 03 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 184.72.88.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d8:61:01:94:8e:e3:1a:0e:6e:32:18:51:71:c4:36:7a:74:1d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 5 00:20:10 2026 GMT
Not After : Aug 3 23:59:59 2026 GMT
Subject: serialNumber=88f97b4f73f3be6ba3ea3a226dd11a0795405c7ceda1e61899b67f6098173d63, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:15:f5:ab:b1:f9:9d:e8:e6:2d:d3:8f:08:f8:
62:e0:57:25:54:a1:55:1a:00:05:33:48:06:40:46:
ca:4c:53:1a:51:aa:9e:e4:b5:19:3c:db:e3:ec:16:
c9:66:19:7e:84:ea:a0:cc:16:3d:f1:3e:20:18:64:
9d:74:22:f8:ad:a0:f2:dd:86:8f:2b:dc:c5:31:04:
ca:8b:4d:6a:84:25:37:54:fd:f9:f6:0e:78:cf:29:
80:fe:2a:4a:56:b5:56:3c:4e:26:9c:43:8c:b1:95:
fd:e9:79:82:f8:c4:a6:8d:3d:13:79:9e:08:3b:c8:
7c:91:b6:f3:9b:75:ef:06:c4:a7:34:db:89:78:a7:
e5:9d:8d:1d:da:5f:e8:cc:ba:5a:07:79:ba:87:28:
2d:bd:cb:86:9b:ab:c6:66:70:38:07:9a:66:be:b8:
a7:c3:ca:f0:dd:6a:31:02:35:41:8b:98:32:38:d4:
ab:6e:44:42:e2:d8:86:2b:9d:38:c1:27:20:28:f4:
ea:a0:1e:57:c3:a7:f9:63:3a:10:99:09:37:14:e8:
63:60:56:90:a2:77:30:df:bd:15:f0:70:ae:7b:9c:
53:0a:c1:20:fd:32:24:92:f5:db:a5:5d:64:c8:50:
2e:d1:5c:3f:bf:af:e0:36:55:1d:bb:6b:16:e8:30:
94:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:25:52:FF:C3:6E:79:06:D0:B3:04:C1:4B:06:94:96:FE:5A:8C:4F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/00bc79cf-a629-49f6-9113-cdb8600f7418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.88.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:8c:1f:4f:d9:93:8d:48:b0:5e:16:a6:28:3d:3a:a6:5c:cf:
37:59:d4:66:b8:5b:2f:90:84:e2:25:ba:b0:19:2d:9c:74:e2:
c3:c7:18:d1:99:67:1d:36:76:ba:75:06:7c:74:4f:f3:e1:ff:
15:26:9f:b2:43:e0:45:70:d0:9a:e2:10:c5:7f:a5:89:e0:ae:
68:ae:23:04:dc:97:35:b7:51:2a:95:b7:80:b4:27:7d:c3:3b:
75:b5:0c:e5:d9:b6:37:68:14:9c:5b:0a:fa:e5:8b:e4:64:2e:
c7:91:b7:58:34:66:ea:5e:2a:74:6e:d1:81:cf:bf:6f:2e:93:
92:82:6d:d2:4e:48:3b:1f:ee:bd:e3:d9:67:27:c5:81:ff:b7:
53:41:38:4c:9e:7a:5d:d1:fe:d2:77:59:55:70:01:ca:db:eb:
ef:ff:e2:4d:4b:b7:33:20:59:bd:25:de:cd:d4:8e:65:fa:dd:
f6:27:67:f7:92:0f:a2:48:a5:06:58:88:1d:d7:eb:61:1f:f6:
41:b4:01:37:57:21:41:2f:e6:eb:08:0d:82:dc:c3:fe:dc:b0:
c0:e5:32:12:e6:51:86:95:b7:81:62:3b:46:5b:17:a8:c4:05:
fc:88:21:5c:9e:64:31:52:ca:0e:a0:89:38:ed:5c:b7:35:31:
4d:9d:ae:5e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUP9hhAZSO4xoObjIYUXHENnp0HdcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAyMDEwWhcNMjYwODAzMjM1OTU5
WjB6MUkwRwYDVQQFE0A4OGY5N2I0ZjczZjNiZTZiYTNlYTNhMjI2ZGQxMWEwNzk1
NDA1YzdjZWRhMWU2MTg5OWI2N2Y2MDk4MTczZDYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCNFfWrsfmd6OYt048I+GLgVyVUoVUaAAUzSAZARspMUxpR
qp7ktRk82+PsFslmGX6E6qDMFj3xPiAYZJ10IvitoPLdho8r3MUxBMqLTWqEJTdU
/fn2DnjPKYD+KkpWtVY8TiacQ4yxlf3peYL4xKaNPRN5ngg7yHyRtvObde8GxKc0
24l4p+WdjR3aX+jMuloHebqHKC29y4abq8ZmcDgHmma+uKfDyvDdajECNUGLmDI4
1KtuRELi2IYrnTjBJyAo9OqgHlfDp/ljOhCZCTcU6GNgVpCidzDfvRXwcK57nFMK
wSD9MiSS9dulXWTIUC7RXD+/r+A2VR27axboMJTpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUliVS/8NueQbQswTBSwaUlv5ajE8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzAwYmM3OWNmLWE2MjktNDlmNi05MTEzLWNkYjg2MDBmNzQxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAK4SFgwDQYJKoZIhvcNAQELBQADggEBANSMH0/Zk41IsF4Wpig9OqZczzdZ
1Ga4Wy+QhOIlurAZLZx04sPHGNGZZx02drp1Bnx0T/Ph/xUmn7JD4EVw0JriEMV/
pYngrmiuIwTclzW3USqVt4C0J33DO3W1DOXZtjdoFJxbCvrli+RkLseRt1g0Zupe
KnRu0YHPv28uk5KCbdJOSDsf7r3j2WcnxYH/t1NBOEyeel3R/tJ3WVVwAcrb6+//
4k1LtzMgWb0l3s3UjmX63fYnZ/eSD6JIpQZYiB3X62Ef9kG0ATdXIUEv5usIDYLc
w/7csMDlMhLmUYaVt4FiO0ZbF6jEBfyIIVyeZDFSyg6giTjtXLc1MU2drl4=
-----END CERTIFICATE-----
Generated at Wed May 13 01:23:35 2026 by rpki-client