
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5307b426-3578-4099-8905-82473e6dd0a6.roa
File: 5307b426-3578-4099-8905-82473e6dd0a6.roa (raw, json)
Hash identifier: SproKqazz1kynlyGp1v7y9IKS3MXWAil5er3KeLjZ5A=
Subject key identifier: 92:D2:2B:EA:FC:BE:59:54:AD:E8:7D:CA:BF:7E:A7:8F:D0:C7:96:93
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65716E39DCB634B59609D39389ADE4E82BCE13B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5307b426-3578-4099-8905-82473e6dd0a6.roa
Signing time: Thu 23 Jul 2026 00:11:48 +0000
ROA not before: Thu 23 Jul 2026 00:11:48 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 206.72.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:71:6e:39:dc:b6:34:b5:96:09:d3:93:89:ad:e4:e8:2b:ce:13:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 23 00:11:48 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=59f001d734f14491650be021147e3f844894523fb626bc0da217a15dff08a4a7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:21:6f:ba:04:20:e8:48:e4:4b:f8:ea:3f:
ba:d6:16:dd:97:d0:05:ca:6f:b3:ee:d8:c2:70:39:
38:ad:a8:8b:49:c9:ee:73:02:0c:37:3d:84:19:b5:
3d:d2:4d:1c:79:33:b8:7a:44:23:e7:d4:ef:06:de:
99:a0:3f:3d:48:14:79:d6:b5:b6:39:8f:4c:cd:6b:
f3:09:cc:0c:01:34:a4:be:f4:d4:cc:46:af:51:40:
f5:9c:da:6c:b6:bb:c2:46:b0:a1:96:1e:54:ff:b4:
27:40:73:56:ae:c1:b2:93:62:17:9f:f1:7c:c8:65:
69:d9:90:2e:d7:64:5f:2d:b7:2b:e8:cf:dc:30:a2:
8d:dd:22:7f:8f:f0:a8:d3:56:43:4e:d8:79:4b:0e:
d8:7b:a2:6a:15:14:a4:b3:be:af:91:dd:47:a6:6c:
50:1d:4a:ed:16:17:ed:89:bd:42:73:57:ba:11:48:
bf:03:e8:a2:84:49:c9:25:4f:43:41:9d:95:5c:29:
1c:f5:6d:bf:11:ef:58:1f:f5:f7:6e:6f:92:79:59:
4b:06:f3:b0:33:04:f2:ec:b0:77:cf:73:d8:b8:83:
28:01:3b:d3:55:ff:c6:63:d3:b6:81:8b:2d:25:a7:
28:9a:57:ec:70:bb:c0:f9:fe:12:6c:dc:dc:3c:3f:
95:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D2:2B:EA:FC:BE:59:54:AD:E8:7D:CA:BF:7E:A7:8F:D0:C7:96:93
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5307b426-3578-4099-8905-82473e6dd0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.72.209.0/24
Signature Algorithm: sha256WithRSAEncryption
82:21:27:cd:eb:55:de:90:08:5f:99:60:49:e9:92:93:da:ee:
60:d7:8f:23:25:27:b3:6c:22:57:b9:02:13:d1:d9:bd:9a:a6:
1b:a1:2b:0a:6b:04:51:ea:aa:67:90:d1:3f:0e:88:7c:a4:5d:
b3:6a:a1:73:32:ed:ea:b1:f1:35:73:3a:c8:73:b2:8f:e8:60:
6f:1f:c1:be:90:91:8d:8e:84:0f:9e:4c:45:4e:e1:b2:3b:da:
d8:7c:ee:7e:9b:a4:76:b7:7f:54:84:ba:2a:16:0f:b1:20:9f:
55:bf:8b:dc:5b:e1:80:07:44:3e:1b:ef:f6:51:a6:85:2d:1a:
87:87:48:40:41:39:af:83:b9:47:5d:f2:de:90:91:b5:58:f8:
17:7d:59:ae:ae:df:97:50:8b:d0:68:2f:6e:f8:8e:d9:98:e8:
9a:21:14:ba:d2:d1:9e:c5:c1:ae:45:0b:5c:2f:fd:51:f8:e2:
5d:29:f0:8a:03:f1:8c:60:00:91:0f:d3:7f:d5:ce:90:bc:de:
55:87:f2:3e:a7:74:75:bd:da:51:68:4f:58:31:ad:21:f3:01:
68:59:c3:86:1b:33:65:86:59:bd:23:04:54:d5:a8:d8:d8:d8:
47:77:d0:1c:15:ad:6a:6c:08:8b:99:49:5f:3d:6c:2a:e7:bf:
11:90:76:78
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZXFuOdy2NLWWCdOTia3k6CvOE7cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAxMTQ4WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1OWYwMDFkNzM0ZjE0NDkxNjUwYmUwMjExNDdlM2Y4NDQ4
OTQ1MjNmYjYyNmJjMGRhMjE3YTE1ZGZmMDhhNGE3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCs0iFvugQg6EjkS/jqP7rWFt2X0AXKb7Pu2MJwOTitqItJ
ye5zAgw3PYQZtT3STRx5M7h6RCPn1O8G3pmgPz1IFHnWtbY5j0zNa/MJzAwBNKS+
9NTMRq9RQPWc2my2u8JGsKGWHlT/tCdAc1auwbKTYhef8XzIZWnZkC7XZF8ttyvo
z9wwoo3dIn+P8KjTVkNO2HlLDth7omoVFKSzvq+R3UembFAdSu0WF+2JvUJzV7oR
SL8D6KKEScklT0NBnZVcKRz1bb8R71gf9fdub5J5WUsG87AzBPLssHfPc9i4gygB
O9NV/8Zj07aBiy0lpyiaV+xwu8D5/hJs3Nw8P5WXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUktIr6vy+WVSt6H3Kv36nj9DHlpMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzUzMDdiNDI2LTM1NzgtNDA5OS04OTA1LTgyNDczZTZkZDBhNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBADOSNEwDQYJKoZIhvcNAQELBQADggEBAIIhJ83rVd6QCF+ZYEnpkpPa7mDX
jyMlJ7NsIle5AhPR2b2aphuhKwprBFHqqmeQ0T8OiHykXbNqoXMy7eqx8TVzOshz
so/oYG8fwb6QkY2OhA+eTEVO4bI72th87n6bpHa3f1SEuioWD7Egn1W/i9xb4YAH
RD4b7/ZRpoUtGoeHSEBBOa+DuUdd8t6QkbVY+Bd9Wa6u35dQi9BoL274jtmY6Joh
FLrS0Z7Fwa5FC1wv/VH44l0p8IoD8YxgAJEP03/VzpC83lWH8j6ndHW92lFoT1gx
rSHzAWhZw4YbM2WGWb0jBFTVqNjY2Ed30BwVrWpsCIuZSV89bCrnvxGQdng=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:34:24 2026 by rpki-client