
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa
File: b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa (raw, json)
Hash identifier: wYI5MfMcfSqWGBfcD+GL4+A7ossCUl7uMMiw3nGtONk=
Subject key identifier: CE:94:6E:51:D0:47:10:01:E1:FE:75:65:D3:B1:8E:F6:A9:B0:FD:7C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 61433C7132A57805C7B434794480B20181698E62
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa
Signing time: Fri 17 Jul 2026 00:10:44 +0000
ROA not before: Fri 17 Jul 2026 00:10:44 +0000
ROA not after: Thu 15 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 194.21.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:43:3c:71:32:a5:78:05:c7:b4:34:79:44:80:b2:01:81:69:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 17 00:10:44 2026 GMT
Not After : Oct 15 23:59:59 2026 GMT
Subject: serialNumber=92e5906359bab8b4bf5f28e662a6d590cc9e90fcf9aa9937ecf314c395784a7d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:62:cb:14:84:30:29:4a:08:8f:a4:e6:f6:4c:
db:ac:aa:32:d8:b5:fe:6e:13:33:15:88:ad:41:3d:
3b:e5:5a:7b:90:73:99:90:ea:34:93:86:94:71:83:
51:b6:07:ae:7c:15:5a:c0:90:43:4e:fb:51:66:d1:
20:0c:ea:f0:36:92:f6:59:ce:21:29:4e:cf:52:2c:
d0:f1:4e:1f:37:5d:3b:03:aa:d3:c0:16:3f:f3:52:
4c:db:7b:2b:36:09:75:ab:39:d5:1a:85:11:da:e8:
d5:ca:30:7b:d7:b1:c1:8d:de:c8:c6:dc:05:9e:91:
f6:32:75:f8:f3:3f:53:66:cb:79:61:8d:c1:ad:d2:
da:bb:69:ce:95:41:d7:25:78:6f:6e:47:b9:9a:bf:
27:6e:48:5b:dd:f6:44:64:a5:b4:68:64:f3:be:cc:
73:70:7c:ab:82:e4:0e:43:a0:e7:56:f4:84:72:89:
bf:15:3c:00:6f:23:cf:b3:0c:77:85:2d:5c:ba:5c:
b1:bb:2c:b9:b5:3b:21:af:61:53:a1:94:f9:72:2b:
3d:4e:ab:1c:e7:57:ee:ca:ff:54:84:56:4c:cf:6d:
3b:7b:a5:f1:22:f0:16:50:33:3c:a5:12:df:b5:cb:
d1:d3:d8:b5:5a:30:7b:52:51:5e:17:f6:08:a6:70:
8e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:94:6E:51:D0:47:10:01:E1:FE:75:65:D3:B1:8E:F6:A9:B0:FD:7C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b06c0b8e-5bc2-4cbf-9f00-f5e8c5647a57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.21.192.0/18
Signature Algorithm: sha256WithRSAEncryption
56:10:ba:61:10:7c:ae:5a:b1:b3:e7:87:44:8e:1e:91:fe:c5:
b0:e1:12:11:d5:78:65:7a:88:c4:51:dd:6d:81:c9:49:e0:92:
35:ec:5a:79:e9:b3:e1:8f:13:9e:14:27:a6:e3:a0:63:b4:0e:
2d:ee:c8:45:55:2a:25:67:2f:ae:42:44:20:f7:a8:2a:08:bc:
c7:8c:44:b2:4f:9e:cd:d0:77:c6:f4:47:c5:80:47:c0:77:8a:
93:24:f6:75:96:96:85:f4:0f:0f:ae:36:36:b4:1e:6c:1f:67:
05:8f:e9:58:d6:cd:c7:38:27:a6:21:f9:d6:9f:a0:c6:b0:4d:
fe:15:0f:e1:10:86:e6:c5:2d:e6:11:e0:53:a5:4f:71:de:91:
b2:d7:8c:fb:b9:ed:dd:23:bd:42:b6:df:f4:f6:c3:16:05:42:
c2:61:89:08:f7:60:05:58:91:ff:cd:d5:ab:a2:25:58:02:f5:
e9:42:a7:8c:a4:fd:47:cf:bb:0f:3f:69:98:2a:e4:b3:9d:69:
d7:72:b6:e8:1e:5e:f6:58:48:5b:3e:f2:b4:13:ea:d0:79:7a:
6a:53:23:2b:fa:ee:06:d2:dc:f6:3d:c4:32:d7:07:ec:02:37:
c7:d3:53:5d:d9:04:5b:8f:cb:4c:68:ae:38:f0:42:cf:29:df:
35:bc:1d:cd
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYUM8cTKleAXHtDR5RICyAYFpjmIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE3MDAxMDQ0WhcNMjYxMDE1MjM1OTU5
WjB6MUkwRwYDVQQFE0A5MmU1OTA2MzU5YmFiOGI0YmY1ZjI4ZTY2MmE2ZDU5MGNj
OWU5MGZjZjlhYTk5MzdlY2YzMTRjMzk1Nzg0YTdkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDmYssUhDApSgiPpOb2TNusqjLYtf5uEzMViK1BPTvlWnuQ
c5mQ6jSThpRxg1G2B658FVrAkENO+1Fm0SAM6vA2kvZZziEpTs9SLNDxTh83XTsD
qtPAFj/zUkzbeys2CXWrOdUahRHa6NXKMHvXscGN3sjG3AWekfYydfjzP1Nmy3lh
jcGt0tq7ac6VQdcleG9uR7mavyduSFvd9kRkpbRoZPO+zHNwfKuC5A5DoOdW9IRy
ib8VPABvI8+zDHeFLVy6XLG7LLm1OyGvYVOhlPlyKz1OqxznV+7K/1SEVkzPbTt7
pfEi8BZQMzylEt+1y9HT2LVaMHtSUV4X9gimcI61AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUzpRuUdBHEAHh/nVl07GO9qmw/XwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2IwNmMwYjhlLTViYzItNGNiZi05ZjAwLWY1ZThjNTY0N2E1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAbCFcAwDQYJKoZIhvcNAQELBQADggEBAFYQumEQfK5asbPnh0SOHpH+xbDh
EhHVeGV6iMRR3W2ByUngkjXsWnnps+GPE54UJ6bjoGO0Di3uyEVVKiVnL65CRCD3
qCoIvMeMRLJPns3Qd8b0R8WAR8B3ipMk9nWWloX0Dw+uNja0HmwfZwWP6VjWzcc4
J6Yh+dafoMawTf4VD+EQhubFLeYR4FOlT3HekbLXjPu57d0jvUK23/T2wxYFQsJh
iQj3YAVYkf/N1auiJVgC9elCp4yk/UfPuw8/aZgq5LOdaddytugeXvZYSFs+8rQT
6tB5empTIyv67gbS3PY9xDLXB+wCN8fTU13ZBFuPy0xorjjwQs8p3zW8Hc0=
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:18 2026 by rpki-client