
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa
File: 42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa (raw, json)
Hash identifier: niBNpxLGYVG+UAkUS0J1NIJHrU5c/RRQfI1OfQzhJmI=
Subject key identifier: C7:19:23:43:52:5C:16:AB:0A:34:64:4E:3C:15:E5:E0:65:7E:B1:41
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 253B33488E4E269E5EAF2D48C4C3F7C64CB194C1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa
Signing time: Fri 17 Jul 2026 00:01:23 +0000
ROA not before: Fri 17 Jul 2026 00:01:23 +0000
ROA not after: Thu 15 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.117.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:3b:33:48:8e:4e:26:9e:5e:af:2d:48:c4:c3:f7:c6:4c:b1:94:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 17 00:01:23 2026 GMT
Not After : Oct 15 23:59:59 2026 GMT
Subject: serialNumber=a35d13424992a70ce1362671851e4e4eced85c83f6fd88d09a77915c8fcca0e9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:67:0d:fd:2a:fb:32:3e:8a:5a:ce:2f:e2:9f:
40:d0:d1:35:e9:85:e9:7b:0f:d5:5c:fe:e1:88:da:
39:33:e2:42:25:28:0c:e0:e3:42:e7:3b:7c:56:e1:
6a:42:bb:9a:f9:f3:8c:47:3c:2a:45:e1:39:17:23:
c3:b8:00:59:4e:c6:a7:bd:26:ab:a6:e0:a1:42:33:
ad:c7:b8:e5:10:7a:6f:cd:94:01:da:20:73:4f:95:
3d:8c:37:a7:0e:ea:dd:d1:ca:0e:40:a9:19:11:bc:
d6:44:85:4c:52:49:07:72:1d:82:19:87:95:84:90:
bc:a4:24:b6:54:78:e4:ab:75:b4:d2:de:7d:64:eb:
38:bd:cd:4e:c2:57:a4:c1:9f:2e:cc:36:fa:74:b7:
fb:cc:f5:9f:97:56:e1:13:74:b3:d9:90:87:bc:f9:
94:52:97:a4:43:88:f5:ba:0d:67:6f:af:d4:01:4a:
40:8a:5c:2a:4e:bc:4b:37:9b:cb:85:99:0f:e6:9c:
0b:c9:58:d2:b9:ce:a7:9d:0e:de:e2:e3:ab:98:5e:
f8:99:d1:6e:97:0f:8f:ac:0a:7e:a3:f8:31:1b:cc:
8c:14:36:4a:0a:22:81:d3:54:46:c5:d3:21:78:50:
a2:63:92:ad:15:ab:3e:45:4f:ba:df:01:57:48:42:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:23:43:52:5C:16:AB:0A:34:64:4E:3C:15:E5:E0:65:7E:B1:41
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c5:c4:78:23:f8:ce:1b:d6:e8:a6:4d:7b:f1:5b:f3:aa:83:c2:
75:8c:4f:ab:bb:7f:67:aa:1f:d4:cf:6a:6f:ad:de:24:e0:f8:
91:9c:ee:8c:e0:85:b3:c0:1d:1c:18:9c:22:7f:b4:2e:1b:3a:
ac:bf:6d:62:32:49:06:7d:da:b4:09:7f:30:d0:24:f8:d6:18:
3b:7c:1e:8b:79:fd:98:f4:ca:7d:98:1e:9b:b6:04:18:b8:f9:
ae:42:3b:eb:cf:58:61:e9:0a:c9:37:3e:22:a2:19:95:ab:d5:
9b:50:cd:75:d8:03:a8:df:ce:0b:ef:a3:b0:83:a2:5b:0a:2a:
ac:c9:7c:a8:95:cb:a0:6f:11:be:0b:51:a6:76:41:d6:d2:c9:
55:35:ee:97:1f:1e:6f:ca:20:dd:6f:f5:9f:7a:f7:1f:f5:f9:
fc:f2:4d:10:82:66:78:44:7a:2f:de:50:2c:a6:2f:55:ff:76:
70:35:59:f8:2e:1c:e1:96:2b:86:a5:4f:28:ef:62:0b:ec:86:
ce:35:27:68:a6:3b:46:53:75:d6:0f:2a:12:e8:f1:2a:63:93:
29:10:73:4c:8c:c0:9f:0b:a8:d0:72:b5:05:a5:6e:94:58:cc:
d0:41:02:10:da:91:dc:41:ce:be:88:0e:52:85:30:63:03:ca:
cf:4f:51:98
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUJTszSI5OJp5ery1IxMP3xkyxlMEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAwMTIzWhcNMjYxMDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BhMzVkMTM0MjQ5OTJhNzBjZTEzNjI2NzE4NTFlNGU0ZWNl
ZDg1YzgzZjZmZDg4ZDA5YTc3OTE1YzhmY2NhMGU5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnZw39KvsyPopazi/in0DQ0TXphel7D9Vc/uGI2jkz4kIl
KAzg40LnO3xW4WpCu5r584xHPCpF4TkXI8O4AFlOxqe9Jqum4KFCM63HuOUQem/N
lAHaIHNPlT2MN6cO6t3Ryg5AqRkRvNZEhUxSSQdyHYIZh5WEkLykJLZUeOSrdbTS
3n1k6zi9zU7CV6TBny7MNvp0t/vM9Z+XVuETdLPZkIe8+ZRSl6RDiPW6DWdvr9QB
SkCKXCpOvEs3m8uFmQ/mnAvJWNK5zqedDt7i46uYXviZ0W6XD4+sCn6j+DEbzIwU
NkoKIoHTVEbF0yF4UKJjkq0Vqz5FT7rfAVdIQsdPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUxxkjQ1JcFqsKNGROPBXl4GV+sUEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQyYTJiYmQyLThjNWYtNGNiMy1hNTg3LTFjZmQ3YzI4MDc4Zi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQdTANBgkqhkiG9w0BAQsFAAOCAQEAxcR4I/jOG9bopk178VvzqoPCdYxP
q7t/Z6of1M9qb63eJOD4kZzujOCFs8AdHBicIn+0Lhs6rL9tYjJJBn3atAl/MNAk
+NYYO3wei3n9mPTKfZgem7YEGLj5rkI7689YYekKyTc+IqIZlavVm1DNddgDqN/O
C++jsIOiWwoqrMl8qJXLoG8RvgtRpnZB1tLJVTXulx8eb8og3W/1n3r3H/X5/PJN
EIJmeER6L95QLKYvVf92cDVZ+C4c4ZYrhqVPKO9iC+yGzjUnaKY7RlN11g8qEujx
KmOTKRBzTIzAnwuo0HK1BaVulFjM0EECENqR3EHOvogOUoUwYwPKz09RmA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:24 2026 by rpki-client