
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf52e1c-9203-4a91-8208-60236e6444b1.roa
File: ccf52e1c-9203-4a91-8208-60236e6444b1.roa (raw, json)
Hash identifier: aOeuXY7DFD1Tz+9eBDb1C6GTO/ldpdHDzyk20oLc2C0=
Subject key identifier: 9C:43:A0:91:4F:6B:E2:A7:BF:85:56:72:4E:63:77:1B:A1:F4:F8:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34A3C7D2507347DBE3C4AA426814E514ADE3EBC6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf52e1c-9203-4a91-8208-60236e6444b1.roa
Signing time: Thu 09 Jul 2026 00:00:08 +0000
ROA not before: Thu 09 Jul 2026 00:00:08 +0000
ROA not after: Wed 07 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 32.184.0.0/14 maxlen: 14
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:a3:c7:d2:50:73:47:db:e3:c4:aa:42:68:14:e5:14:ad:e3:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 9 00:00:08 2026 GMT
Not After : Oct 7 23:59:59 2026 GMT
Subject: serialNumber=9dfa515ff861222dca4ae9112571427f17fd78231302c393317862d7bb93c142, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ed:a2:9c:d2:12:4b:5e:a3:f9:4a:e9:d0:ea:
ea:25:fc:a9:af:50:3a:bd:3c:70:d0:8a:d0:75:1b:
0c:b8:84:ce:ee:a1:00:aa:c3:c8:75:ba:cb:c2:b6:
f4:fe:06:10:92:fe:3b:04:63:71:63:35:72:5e:47:
f2:5e:a6:ab:1c:5b:fa:43:19:7e:2b:20:48:ec:7a:
73:72:4b:36:4f:86:60:1c:82:2d:90:e3:4d:d3:ad:
42:da:68:7c:ce:c0:c7:a7:d0:c3:1f:db:a0:f8:4d:
e9:77:03:1f:75:f7:28:d7:34:27:05:f1:1b:56:dd:
c0:c9:95:12:d9:d7:6a:d0:d4:66:93:fa:7a:ac:c8:
f7:d1:95:5c:af:45:c2:47:61:30:77:39:70:7c:c0:
7f:f9:06:6a:7d:2e:9a:69:71:e5:20:92:7c:51:84:
da:a8:5f:8e:27:56:97:fc:25:3a:67:42:c5:11:b8:
16:43:93:e6:d6:a7:0c:65:56:a5:66:61:e7:9b:e5:
d9:db:2f:47:66:cc:90:12:f5:57:68:49:46:cc:e0:
7b:17:db:e6:62:9a:51:a2:60:c7:75:7d:35:1f:ce:
e9:79:f5:53:93:7f:6b:34:2a:4c:52:4d:8b:46:e0:
1f:02:8f:9e:9e:71:2a:53:25:0e:94:04:20:64:c8:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:43:A0:91:4F:6B:E2:A7:BF:85:56:72:4E:63:77:1B:A1:F4:F8:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ccf52e1c-9203-4a91-8208-60236e6444b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.184.0.0/14
Signature Algorithm: sha256WithRSAEncryption
aa:c5:e1:9a:25:bb:95:1e:c9:c1:86:8e:82:92:d8:ff:ab:f4:
1a:42:8a:4c:e7:24:8a:0a:33:fe:8c:52:a0:3e:01:6c:02:26:
02:29:d2:0d:9d:ec:1f:45:de:19:93:c8:3c:28:d1:4c:54:4a:
33:b1:e9:09:7f:07:ea:53:36:60:d7:19:de:fb:9d:9f:dc:4c:
1f:e6:47:68:93:cb:da:68:63:98:4b:40:8e:1c:c5:b5:8c:6a:
05:0e:d3:99:12:7b:c4:9b:2b:8e:50:a9:96:81:93:08:71:a3:
8f:a1:9e:14:fb:a4:dd:79:9a:f9:18:86:5b:ae:c3:06:4b:7f:
f7:ab:39:b6:17:2f:a4:02:78:32:68:1f:06:36:5f:87:bc:32:
cd:ae:e0:35:ab:d2:8c:55:be:a7:3c:60:a2:12:9a:8e:f0:23:
b5:30:e7:27:fe:52:84:01:f2:e6:5c:b9:7f:bb:1c:f9:b6:6d:
f5:86:43:14:d0:2e:1e:91:bb:2f:87:2c:2d:f0:bf:01:36:c5:
c6:73:9f:96:d6:c8:42:8d:59:7c:53:f1:48:4b:72:3d:ca:15:
f9:4d:eb:44:6c:2b:f4:7b:d1:5d:d2:88:65:4c:89:8b:6f:ba:
03:42:8b:ae:32:a0:3c:ce:1e:bc:5d:9f:f8:1d:20:2c:ca:60:
7a:ba:bd:e5
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUNKPH0lBzR9vjxKpCaBTlFK3j68YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzA5MDAwMDA4WhcNMjYxMDA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5ZGZhNTE1ZmY4NjEyMjJkY2E0YWU5MTEyNTcxNDI3ZjE3
ZmQ3ODIzMTMwMmMzOTMzMTc4NjJkN2JiOTNjMTQyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDc7aKc0hJLXqP5SunQ6uol/KmvUDq9PHDQitB1Gwy4hM7u
oQCqw8h1usvCtvT+BhCS/jsEY3FjNXJeR/JepqscW/pDGX4rIEjsenNySzZPhmAc
gi2Q403TrULaaHzOwMen0MMf26D4Tel3Ax919yjXNCcF8RtW3cDJlRLZ12rQ1GaT
+nqsyPfRlVyvRcJHYTB3OXB8wH/5Bmp9LpppceUgknxRhNqoX44nVpf8JTpnQsUR
uBZDk+bWpwxlVqVmYeeb5dnbL0dmzJAS9VdoSUbM4HsX2+ZimlGiYMd1fTUfzul5
9VOTf2s0KkxSTYtG4B8Cj56ecSpTJQ6UBCBkyJm5AgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUnEOgkU9r4qe/hVZyTmN3G6H0+KEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2NjZjUyZTFjLTkyMDMtNGE5MS04MjA4LTYwMjM2ZTY0NDRiMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwIguDANBgkqhkiG9w0BAQsFAAOCAQEAqsXhmiW7lR7JwYaOgpLY/6v0GkKK
TOckigoz/oxSoD4BbAImAinSDZ3sH0XeGZPIPCjRTFRKM7HpCX8H6lM2YNcZ3vud
n9xMH+ZHaJPL2mhjmEtAjhzFtYxqBQ7TmRJ7xJsrjlCploGTCHGjj6GeFPuk3Xma
+RiGW67DBkt/96s5thcvpAJ4MmgfBjZfh7wyza7gNavSjFW+pzxgohKajvAjtTDn
J/5ShAHy5ly5f7sc+bZt9YZDFNAuHpG7L4csLfC/ATbFxnOfltbIQo1ZfFPxSEty
PcoV+U3rRGwr9HvRXdKIZUyJi2+6A0KLrjKgPM4evF2f+B0gLMpgerq95Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:45 2026 by rpki-client