
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa
File: 062eaeae-ddf7-4703-bf27-2c878b44bc68.roa (raw, json)
Hash identifier: H1OZe0At3Cyu6ar8TrF9YI5A5FLEDSBCN9QWZfcyvLo=
Subject key identifier: 29:96:43:ED:C4:19:E0:FF:CD:E7:BE:19:51:55:D6:23:BA:15:AA:97
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 29D863A0BD69E17C58F4C4A3D415AC2691899EE7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa
Signing time: Mon 20 Jul 2026 00:40:14 +0000
ROA not before: Mon 20 Jul 2026 00:40:14 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.85.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:d8:63:a0:bd:69:e1:7c:58:f4:c4:a3:d4:15:ac:26:91:89:9e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 00:40:14 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=059c660ddf6ffd73173b4eaee268b70ba70b39508cca2c6df0995966f110a578, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ae:d7:fd:11:30:78:58:05:76:f0:e8:28:cb:
bc:0f:58:fe:76:af:30:1b:6d:b5:df:09:fa:fd:7a:
f5:79:b6:bb:5e:bd:07:b6:96:c3:6a:d9:08:00:ba:
33:72:2f:b7:c1:be:1c:87:5d:7d:f7:1d:f8:a3:45:
06:bd:76:00:21:09:03:d0:7d:39:f0:63:b8:0a:cd:
7c:f5:d2:30:8f:32:3f:10:ef:c4:1a:8b:f3:be:95:
64:69:b4:a6:35:ca:9d:c1:4f:10:37:aa:be:27:a9:
05:35:5e:2f:b2:9d:bf:7c:f0:3a:d6:f6:4d:3a:5d:
d6:cf:d2:f2:87:46:bc:5f:ae:a3:49:e7:d0:41:95:
b1:08:0a:9a:54:45:84:43:d5:5b:55:d8:e1:61:a9:
5c:35:2a:e0:0c:9d:db:46:aa:1d:a2:5c:3d:e2:10:
9a:34:84:d3:19:67:18:28:c6:e9:42:25:73:59:d7:
f3:c2:a0:b8:31:a3:8c:2a:3f:e5:84:fe:73:e2:6b:
b5:13:bb:d0:06:fa:28:47:74:70:07:93:30:0d:0c:
47:18:6c:66:db:de:fa:a9:59:ae:64:e5:18:94:fc:
61:62:2d:56:d8:4f:f5:65:92:5d:78:5e:a9:fb:47:
85:54:be:e0:d8:d4:33:aa:54:c4:53:70:cd:50:82:
99:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:43:ED:C4:19:E0:FF:CD:E7:BE:19:51:55:D6:23:BA:15:AA:97
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062eaeae-ddf7-4703-bf27-2c878b44bc68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.85.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b2:6d:cb:e3:6d:c6:ed:2a:46:47:3e:ae:d4:8b:3e:47:7d:6a:
c7:12:6e:af:30:45:32:e0:6f:d0:42:e9:84:16:27:c2:23:cd:
58:01:f9:4d:df:7b:cb:ba:f6:b0:b2:97:db:63:cc:00:d7:15:
87:7e:8f:99:92:3c:ca:7d:b5:93:d9:2a:59:90:55:13:9a:92:
d1:8d:2c:fb:4b:71:03:28:e0:98:af:a2:d9:76:7c:b3:be:99:
58:d2:7f:08:9f:7b:03:f8:42:0f:9a:05:f1:eb:84:ba:8b:49:
b3:bd:ea:14:33:0d:69:41:90:9e:f2:c6:ba:3f:d1:3d:5b:62:
28:2f:fc:5f:ed:cc:15:91:1d:ca:4d:95:0e:13:96:a1:5e:8e:
88:59:10:f3:47:2f:91:43:82:23:b2:95:99:af:68:b4:b7:0d:
52:41:0b:74:a9:a7:cd:55:35:b1:f3:fe:d1:af:65:e6:35:e1:
f6:66:87:d0:6e:32:2e:20:b3:4f:53:fa:9f:fb:f6:4e:eb:95:
5f:d7:c0:1c:67:f8:ab:33:4d:75:68:7b:1f:ea:da:66:88:f8:
62:9e:60:c4:e9:bc:98:a2:a5:4b:e2:8a:68:85:3d:e7:c8:0a:
ad:1f:04:43:fc:7e:91:43:21:5c:cf:5f:f4:95:d5:53:3d:fb:
8d:12:29:ce
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKdhjoL1p4XxY9MSj1BWsJpGJnucwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDA0MDE0WhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwNTljNjYwZGRmNmZmZDczMTczYjRlYWVlMjY4YjcwYmE3
MGIzOTUwOGNjYTJjNmRmMDk5NTk2NmYxMTBhNTc4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPrtf9ETB4WAV28Ogoy7wPWP52rzAbbbXfCfr9evV5trte
vQe2lsNq2QgAujNyL7fBvhyHXX33HfijRQa9dgAhCQPQfTnwY7gKzXz10jCPMj8Q
78Qai/O+lWRptKY1yp3BTxA3qr4nqQU1Xi+ynb988DrW9k06XdbP0vKHRrxfrqNJ
59BBlbEICppURYRD1VtV2OFhqVw1KuAMndtGqh2iXD3iEJo0hNMZZxgoxulCJXNZ
1/PCoLgxo4wqP+WE/nPia7UTu9AG+ihHdHAHkzANDEcYbGbb3vqpWa5k5RiU/GFi
LVbYT/Vlkl14Xqn7R4VUvuDY1DOqVMRTcM1Qgpn5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUKZZD7cQZ4P/N574ZUVXWI7oVqpcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA2MmVhZWFlLWRkZjctNDcwMy1iZjI3LTJjODc4YjQ0YmM2OC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAdjVYAwDQYJKoZIhvcNAQELBQADggEBALJty+Ntxu0qRkc+rtSLPkd9ascS
bq8wRTLgb9BC6YQWJ8IjzVgB+U3fe8u69rCyl9tjzADXFYd+j5mSPMp9tZPZKlmQ
VROaktGNLPtLcQMo4Jivotl2fLO+mVjSfwifewP4Qg+aBfHrhLqLSbO96hQzDWlB
kJ7yxro/0T1bYigv/F/tzBWRHcpNlQ4TlqFejohZEPNHL5FDgiOylZmvaLS3DVJB
C3Spp81VNbHz/tGvZeY14fZmh9BuMi4gs09T+p/79k7rlV/XwBxn+KszTXVoex/q
2maI+GKeYMTpvJiipUviimiFPefICq0fBEP8fpFDIVzPX/SV1VM9+40SKc4=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:46 2026 by rpki-client