
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8cbf73-6ed7-4808-a785-b63456c50879.roa
File: 9f8cbf73-6ed7-4808-a785-b63456c50879.roa (raw, json)
Hash identifier: rdHlWPFci3CwUfy7rHhq1G0jodPgQtdgQSiNJlWf8f4=
Subject key identifier: EF:A9:45:37:58:92:05:6E:75:94:C5:DC:22:08:27:A7:34:4C:E3:D6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0F0CCDDB75E9140649066CA26E3A52D52448342B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8cbf73-6ed7-4808-a785-b63456c50879.roa
Signing time: Thu 16 Jul 2026 00:10:10 +0000
ROA not before: Thu 16 Jul 2026 00:10:10 +0000
ROA not after: Wed 14 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 67.34.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:0c:cd:db:75:e9:14:06:49:06:6c:a2:6e:3a:52:d5:24:48:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 16 00:10:10 2026 GMT
Not After : Oct 14 23:59:59 2026 GMT
Subject: serialNumber=0a9c3b02b3ce038d408c23b8706ecf6a7bb444aba43b44828b83eb6948d865cc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:99:e6:d1:48:3d:78:08:ec:bd:2b:e2:47:
7f:8a:80:37:cb:7f:a5:74:eb:f8:23:6d:68:84:11:
e8:49:b9:99:dc:49:28:2a:53:8b:07:f2:1c:f8:7f:
44:74:c2:5b:4d:77:93:41:b6:7c:e5:80:60:51:d6:
19:ff:a0:64:7b:e6:7a:de:40:43:e7:00:4c:34:c1:
25:f8:18:5b:fe:06:72:6f:70:20:d9:d5:3d:1e:0d:
b4:b8:9c:4d:29:86:04:4a:52:a0:31:95:17:1f:18:
31:ed:80:1a:51:24:bd:ee:b4:f8:2c:28:96:5b:b2:
e2:53:1b:4b:bb:a7:b6:9a:2a:18:2a:1f:a5:15:80:
f6:f3:0e:76:a1:37:38:f6:60:b2:44:89:ee:e8:3a:
6e:ab:ff:77:fa:dc:45:ce:b9:a7:cb:51:e4:d3:39:
41:9c:f0:f0:d2:3b:da:e4:3b:2c:ea:8e:ea:e0:c2:
92:e7:15:ff:b0:77:fa:3e:f7:48:f2:e6:6a:39:0c:
50:63:05:3d:51:a6:90:a0:4d:f8:fe:cd:84:3d:2d:
1a:4f:91:4d:19:cd:f3:c2:81:49:97:0a:eb:be:7a:
28:38:d8:4e:bd:34:c5:31:fa:17:78:03:cc:38:da:
1e:61:e1:a2:8f:f6:6a:a6:87:6d:11:7d:8e:3f:ba:
08:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A9:45:37:58:92:05:6E:75:94:C5:DC:22:08:27:A7:34:4C:E3:D6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f8cbf73-6ed7-4808-a785-b63456c50879.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
67.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4b:bf:55:e3:b6:db:02:d6:cd:5d:91:19:e6:2a:b2:2a:31:85:
62:4d:84:56:29:3e:6a:bf:e8:d1:c6:04:4d:86:4d:86:bf:44:
50:0d:7c:f6:8d:cd:36:37:24:0f:92:ea:60:3b:d2:00:ae:6f:
4a:4e:7a:a6:dd:56:ac:e5:85:68:14:0f:b4:9e:05:ba:89:87:
c3:f6:9e:a8:84:b5:c6:f5:e2:39:4f:57:ec:5c:84:d1:c4:b4:
bf:95:2b:81:80:2f:b4:6a:23:c8:19:23:1e:8c:4f:e6:55:40:
9c:2b:66:7a:c5:8b:c6:7c:18:1c:1b:3f:61:22:5b:6e:7c:33:
bc:1f:22:f1:51:0d:db:f5:40:7a:11:b5:36:2f:1b:ab:ef:f2:
52:88:21:1b:9b:a6:b5:6d:c2:8e:31:a7:1b:21:7a:ad:d7:62:
e6:e2:79:73:21:dd:8a:cf:c8:57:2b:d4:c9:76:51:0f:18:12:
35:99:cc:f0:8c:57:a7:de:84:60:3f:06:11:b2:12:74:90:93:
e6:b9:b1:4c:56:ce:dc:be:50:c4:19:45:11:fe:df:dc:ca:69:
96:d6:eb:3e:51:b7:2a:6d:68:6d:01:fc:98:0c:c4:d5:00:cc:
e0:a5:5f:a3:d1:67:f0:48:fd:50:7c:f8:4a:a0:f9:5d:ba:f8:
37:83:c7:0f
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUDwzN23XpFAZJBmyibjpS1SRINCswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE2MDAxMDEwWhcNMjYxMDE0MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYTljM2IwMmIzY2UwMzhkNDA4YzIzYjg3MDZlY2Y2YTdi
YjQ0NGFiYTQzYjQ0ODI4YjgzZWI2OTQ4ZDg2NWNjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpO5nm0Ug9eAjsvSviR3+KgDfLf6V06/gjbWiEEehJuZnc
SSgqU4sH8hz4f0R0wltNd5NBtnzlgGBR1hn/oGR75nreQEPnAEw0wSX4GFv+BnJv
cCDZ1T0eDbS4nE0phgRKUqAxlRcfGDHtgBpRJL3utPgsKJZbsuJTG0u7p7aaKhgq
H6UVgPbzDnahNzj2YLJEie7oOm6r/3f63EXOuafLUeTTOUGc8PDSO9rkOyzqjurg
wpLnFf+wd/o+90jy5mo5DFBjBT1RppCgTfj+zYQ9LRpPkU0ZzfPCgUmXCuu+eig4
2E69NMUx+hd4A8w42h5h4aKP9mqmh20RfY4/ugi9AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU76lFN1iSBW51lMXcIggnpzRM49YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzlmOGNiZjczLTZlZDctNDgwOC1hNzg1LWI2MzQ1NmM1MDg3OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBDIjANBgkqhkiG9w0BAQsFAAOCAQEAS79V47bbAtbNXZEZ5iqyKjGFYk2E
Vik+ar/o0cYETYZNhr9EUA189o3NNjckD5LqYDvSAK5vSk56pt1WrOWFaBQPtJ4F
uomHw/aeqIS1xvXiOU9X7FyE0cS0v5UrgYAvtGojyBkjHoxP5lVAnCtmesWLxnwY
HBs/YSJbbnwzvB8i8VEN2/VAehG1Ni8bq+/yUoghG5umtW3CjjGnGyF6rddi5uJ5
cyHdis/IVyvUyXZRDxgSNZnM8IxXp96EYD8GEbISdJCT5rmxTFbO3L5QxBlFEf7f
3MppltbrPlG3Km1obQH8mAzE1QDM4KVfo9Fn8Ej9UHz4SqD5Xbr4N4PHDw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:31 2026 by rpki-client