
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
File: 7f655dc6-89d0-4748-9c62-d3bc957b920c.roa (raw, json)
Hash identifier: htOXHMpiEaW7tpxNDDhGhIZqLMNa/WNXIcsPNdRI6g0=
Subject key identifier: 8E:2A:F0:3F:4D:B8:93:51:95:1D:52:B3:8F:E8:3A:33:F5:E3:E0:A2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54C2CF88E6CF580496F75D016294E40ACA945E2A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
Signing time: Thu 23 Jul 2026 00:20:10 +0000
ROA not before: Thu 23 Jul 2026 00:20:10 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 44.223.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c2:cf:88:e6:cf:58:04:96:f7:5d:01:62:94:e4:0a:ca:94:5e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 23 00:20:10 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=3c6506fba6e0a23654c9941b5f20622758702dae63f84803fd6c1aa4d61e8c63, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1d:fb:f9:36:28:c5:f2:3e:bb:8b:24:62:e8:
f1:c5:b2:39:e2:cb:56:ad:e7:1e:18:c2:c8:5e:d2:
1d:22:d4:53:f4:19:4d:fd:8a:0c:5f:32:c7:30:3f:
e0:16:e4:55:f6:b9:e5:32:33:44:5c:25:13:38:e4:
5b:50:e7:ad:8b:ec:6f:73:93:0e:06:84:3a:f2:ee:
18:75:d9:66:f9:06:53:b6:94:d6:36:34:72:24:e2:
02:7b:5c:97:4a:7e:82:a8:f8:d7:e2:97:9d:c4:2a:
41:0c:30:54:39:13:c4:28:60:de:03:2c:de:2f:2e:
35:42:9c:13:70:42:bb:30:b8:21:bb:ce:1a:6d:54:
1e:39:60:2f:8a:e6:78:6b:5a:bc:ce:8e:b8:d2:ca:
6b:54:05:19:17:3c:92:76:c3:9a:8f:83:a7:9c:d4:
2b:19:bf:fe:40:65:52:b0:7d:dc:d0:08:c1:e5:f0:
40:d8:1b:e7:bb:84:02:49:f2:c8:c2:89:43:c6:c3:
37:39:4f:13:80:a1:0b:cc:c0:47:91:0f:d1:c9:35:
44:ff:e1:80:36:c9:9b:f6:ff:35:0a:c8:b9:0b:c2:
2b:ed:f7:14:37:ad:ee:85:2d:33:7a:bb:59:f9:b3:
69:29:a0:d7:f1:2e:a3:a8:c2:12:b1:ea:23:13:b3:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:F0:3F:4D:B8:93:51:95:1D:52:B3:8F:E8:3A:33:F5:E3:E0:A2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.223.121.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d4:4b:c8:5d:3a:70:5c:4a:fe:14:73:d6:ee:a9:74:c4:87:
96:b5:24:ae:3a:19:75:30:78:e7:ba:c8:55:2c:b3:a7:a2:93:
a9:7c:f8:00:f2:09:c0:01:08:01:31:b6:3f:1d:54:95:98:62:
42:05:52:8d:c1:12:fc:76:5a:eb:47:68:ec:eb:71:86:f1:64:
18:a9:95:43:cf:79:a0:57:9f:ef:7c:4b:d2:67:cd:c5:b3:b0:
48:f3:86:7c:0f:81:87:fb:8a:6c:1b:72:4f:82:fb:3e:c8:08:
99:51:bb:4a:9a:3c:7e:b3:b1:f2:d8:03:5d:52:94:88:61:1f:
e2:82:5a:2e:4c:40:4f:f1:69:31:82:14:cd:27:7f:f6:6c:38:
6d:a8:29:bc:0b:99:d8:cf:97:b8:57:57:46:54:0f:55:d4:9e:
4a:20:e6:14:96:87:ab:2a:43:01:6d:fe:6e:31:a1:4f:aa:98:
26:3e:5c:96:8c:86:39:03:40:4e:a6:e2:44:59:57:40:2b:41:
af:35:b2:93:78:cc:16:6b:0d:31:aa:26:1a:66:65:18:97:21:
13:6d:74:6f:ff:c0:5a:3f:f4:66:18:a8:06:48:41:27:53:4b:
34:e6:1a:c4:66:c6:e9:3c:c5:93:0f:0f:0f:97:f0:98:d6:93:
d4:2f:e0:01
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVMLPiObPWASW910BYpTkCsqUXiowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzIzMDAyMDEwWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzY1MDZmYmE2ZTBhMjM2NTRjOTk0MWI1ZjIwNjIyNzU4
NzAyZGFlNjNmODQ4MDNmZDZjMWFhNGQ2MWU4YzYzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtHfv5NijF8j67iyRi6PHFsjniy1at5x4Ywshe0h0i1FP0
GU39igxfMscwP+AW5FX2ueUyM0RcJRM45FtQ562L7G9zkw4GhDry7hh12Wb5BlO2
lNY2NHIk4gJ7XJdKfoKo+Nfil53EKkEMMFQ5E8QoYN4DLN4vLjVCnBNwQrswuCG7
zhptVB45YC+K5nhrWrzOjrjSymtUBRkXPJJ2w5qPg6ec1CsZv/5AZVKwfdzQCMHl
8EDYG+e7hAJJ8sjCiUPGwzc5TxOAoQvMwEeRD9HJNUT/4YA2yZv2/zUKyLkLwivt
9xQ3re6FLTN6u1n5s2kpoNfxLqOowhKx6iMTsxgvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjirwP024k1GVHVKzj+g6M/Xj4KIwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdmNjU1ZGM2LTg5ZDAtNDc0OC05YzYyLWQzYmM5NTdiOTIwYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAs33kwDQYJKoZIhvcNAQELBQADggEBAHfUS8hdOnBcSv4Uc9buqXTEh5a1
JK46GXUweOe6yFUss6eik6l8+ADyCcABCAExtj8dVJWYYkIFUo3BEvx2WutHaOzr
cYbxZBiplUPPeaBXn+98S9JnzcWzsEjzhnwPgYf7imwbck+C+z7ICJlRu0qaPH6z
sfLYA11SlIhhH+KCWi5MQE/xaTGCFM0nf/ZsOG2oKbwLmdjPl7hXV0ZUD1XUnkog
5hSWh6sqQwFt/m4xoU+qmCY+XJaMhjkDQE6m4kRZV0ArQa81spN4zBZrDTGqJhpm
ZRiXIRNtdG//wFo/9GYYqAZIQSdTSzTmGsRmxuk8xZMPDw+X8JjWk9Qv4AE=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:35 2026 by rpki-client