
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
File: 7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa (raw, json)
Hash identifier: yDTDDsr+tJZ+8l0nnyWaw85kv3jurADYF9S8ldFRzY8=
Subject key identifier: 09:CA:4E:CB:0C:97:F6:FA:BC:A9:A7:A8:FB:57:D4:80:DB:B3:78:17
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 15BB67BFF8026AA4AC3FF556C1C670E299528F25
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
Signing time: Mon 20 Jul 2026 01:00:32 +0000
ROA not before: Mon 20 Jul 2026 01:00:32 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 64.252.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bb:67:bf:f8:02:6a:a4:ac:3f:f5:56:c1:c6:70:e2:99:52:8f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 20 01:00:32 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=ed65542ea4e618928c01c749a55e260dd875d453c241ca03c87c91cb34823bfb, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:35:3e:1b:fd:0b:d2:53:57:42:1b:12:bb:48:
8d:f9:7a:6e:c8:82:25:a0:27:b0:c4:70:21:32:84:
40:c3:62:37:59:fd:cd:f0:a1:1f:db:67:fa:62:96:
27:c1:a7:34:ea:17:aa:89:78:dd:33:03:7b:a8:10:
95:d3:03:f1:bf:55:f6:51:3a:89:e0:e3:0b:f7:26:
fb:96:b7:f2:20:94:84:13:ff:86:e8:4a:b1:ac:af:
26:a2:07:e5:9f:cb:e6:b4:34:d6:8e:d5:d0:80:58:
a7:b8:13:c5:b9:cd:79:b2:f3:89:05:68:e4:e0:58:
a3:6b:12:10:02:bd:f6:b1:aa:2d:c7:ab:c4:fe:5e:
2a:05:5d:f9:fd:24:ab:24:34:47:c8:50:8a:30:db:
54:8f:80:1e:e7:d9:47:21:8e:29:9a:d9:26:77:6f:
2e:08:89:52:59:77:9b:cd:6f:61:d3:48:70:d3:9b:
ee:3e:b3:06:d0:11:90:3e:04:23:f0:0d:87:2d:ac:
92:02:67:a2:40:53:78:8e:5d:57:33:bc:f8:db:c1:
0c:39:1c:d3:ce:f7:7c:b4:cc:8c:3c:6a:16:37:21:
4e:92:90:7f:f6:02:c6:cd:22:b4:83:61:14:b8:b7:
c5:16:50:68:fa:51:32:d5:2e:ad:42:15:b4:73:b3:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CA:4E:CB:0C:97:F6:FA:BC:A9:A7:A8:FB:57:D4:80:DB:B3:78:17
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7b069f6b-ff0d-464f-bf92-c075d7f91fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.252.86.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ad:98:44:10:ba:38:cb:58:1f:4c:e3:06:be:8a:78:35:f5:
4b:37:71:68:60:19:2f:fd:9d:d8:e1:1f:a1:71:1b:65:81:55:
c5:7a:30:44:ac:fb:84:6d:a6:68:8d:c6:9d:c0:77:e3:92:7d:
43:64:92:94:34:16:2c:92:82:a7:7f:ce:ab:0b:9f:a9:c3:27:
03:60:6e:5b:66:74:68:d9:1e:ae:3c:2d:c2:7f:a6:d3:d3:fb:
98:dc:f8:e9:1f:f5:6c:14:e5:9a:65:67:d1:62:27:9e:47:e6:
bf:57:9d:34:5f:04:fb:6a:ee:e6:8d:d0:cc:29:73:b1:e2:ed:
15:f5:91:28:b0:9f:52:b3:26:f9:db:a1:5e:14:66:8c:64:b7:
2b:6e:c4:cf:66:0e:8d:ef:98:7a:5f:0c:f4:01:6a:57:4e:e1:
9d:a5:5e:90:36:56:70:a9:21:5b:68:e7:59:e1:e0:eb:7c:53:
22:a6:01:39:49:f8:33:69:ca:98:31:ce:a7:a4:23:a8:d5:d7:
0e:36:98:8b:74:05:d0:c1:ca:5b:4f:b5:7a:8f:ef:d3:e0:ca:
0a:bb:38:12:d7:43:3c:3d:11:65:d4:76:4a:b9:d7:22:31:e1:
8b:7f:e8:99:91:c9:7a:2f:ad:db:89:48:2f:05:cd:9f:ee:7d:
d7:3d:37:eb
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFbtnv/gCaqSsP/VWwcZw4plSjyUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIwMDEwMDMyWhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BlZDY1NTQyZWE0ZTYxODkyOGMwMWM3NDlhNTVlMjYwZGQ4
NzVkNDUzYzI0MWNhMDNjODdjOTFjYjM0ODIzYmZiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD5NT4b/QvSU1dCGxK7SI35em7IgiWgJ7DEcCEyhEDDYjdZ
/c3woR/bZ/pilifBpzTqF6qJeN0zA3uoEJXTA/G/VfZROong4wv3JvuWt/IglIQT
/4boSrGsryaiB+Wfy+a0NNaO1dCAWKe4E8W5zXmy84kFaOTgWKNrEhACvfaxqi3H
q8T+XioFXfn9JKskNEfIUIow21SPgB7n2Uchjima2SZ3by4IiVJZd5vNb2HTSHDT
m+4+swbQEZA+BCPwDYctrJICZ6JAU3iOXVczvPjbwQw5HNPO93y0zIw8ahY3IU6S
kH/2AsbNIrSDYRS4t8UWUGj6UTLVLq1CFbRzs02HAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUCcpOywyX9vq8qaeo+1fUgNuzeBcwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdiMDY5ZjZiLWZmMGQtNDY0Zi1iZjkyLWMwNzVkN2Y5MWZiMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABA/FYwDQYJKoZIhvcNAQELBQADggEBADetmEQQujjLWB9M4wa+ing19Us3
cWhgGS/9ndjhH6FxG2WBVcV6MESs+4RtpmiNxp3Ad+OSfUNkkpQ0FiySgqd/zqsL
n6nDJwNgbltmdGjZHq48LcJ/ptPT+5jc+Okf9WwU5ZplZ9FiJ55H5r9XnTRfBPtq
7uaN0Mwpc7Hi7RX1kSiwn1KzJvnboV4UZoxktytuxM9mDo3vmHpfDPQBaldO4Z2l
XpA2VnCpIVto51nh4Ot8UyKmATlJ+DNpypgxzqekI6jV1w42mIt0BdDByltPtXqP
79Pgygq7OBLXQzw9EWXUdkq51yIx4Yt/6JmRyXovrduJSC8FzZ/ufdc9N+s=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:49:24 2026 by rpki-client