
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa
File: dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa (raw, json)
Hash identifier: oWLgwz9/H+QaAJG0B1M3hSnpRi1OaqsODFeiE69PORg=
Subject key identifier: 86:35:D0:08:24:0F:9B:4C:11:A5:F8:C4:AA:2D:63:8C:C7:B8:EF:85
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 716467B6F180F80E1408A951A0399FCD250EEEE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa
Signing time: Tue 05 May 2026 00:30:49 +0000
ROA not before: Tue 05 May 2026 00:30:49 +0000
ROA not after: Mon 03 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 56.131.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:64:67:b6:f1:80:f8:0e:14:08:a9:51:a0:39:9f:cd:25:0e:ee:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 5 00:30:49 2026 GMT
Not After : Aug 3 23:59:59 2026 GMT
Subject: serialNumber=c31eae6f0252385d082aa03606e1c27c9a8c30ab188c7a7179c8eabeeedfb73f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:07:7a:d8:d8:cf:04:83:2d:32:88:25:db:4d:
80:24:e7:d2:97:cf:01:5a:c5:95:1e:ab:91:79:fb:
b2:d6:d0:f2:56:03:a9:fd:85:8d:3c:6e:c3:72:d3:
20:4a:fc:64:37:ed:c4:4d:52:a1:86:7f:89:a0:2d:
68:16:54:fb:f7:6c:85:ce:73:64:34:d5:4c:4f:bb:
1b:6e:26:57:8c:21:8f:ba:88:c8:e2:01:80:6c:80:
1e:e7:80:ef:93:bc:70:99:46:b8:8d:3c:30:38:4e:
12:1c:87:e0:e9:57:69:da:22:4b:f0:66:89:95:71:
90:ef:95:8b:5a:99:d8:ec:84:bc:8d:43:92:42:99:
85:8d:46:e8:31:5f:7c:c5:10:2e:7c:8f:41:65:a4:
3d:d2:a6:2d:5e:2a:a7:4a:51:f9:37:98:cf:5c:21:
ca:16:e4:71:ae:45:3d:67:74:1e:c8:07:87:cd:91:
d8:fd:f3:bc:78:d0:75:87:a2:44:8a:f6:13:bd:55:
28:2f:71:c0:fc:ec:62:94:a4:88:a8:0f:f4:f3:5c:
c9:c4:b1:11:e5:98:6f:fb:dd:9e:30:28:55:70:34:
ef:93:55:1d:e6:31:96:06:34:39:d6:7e:a8:4a:58:
ae:5f:4a:7d:1d:6d:80:bc:e1:c8:82:1b:0e:80:5d:
f2:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:35:D0:08:24:0F:9B:4C:11:A5:F8:C4:AA:2D:63:8C:C7:B8:EF:85
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/dbf95d8a-4d2a-464c-9f53-186ec00ccc20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.131.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:82:90:2d:06:fe:fa:19:a5:94:0d:e7:d0:76:37:6f:b7:52:
6a:33:2b:a5:c4:1c:0f:05:68:7f:2b:cb:be:77:11:ed:b6:4e:
f7:6f:d5:30:17:fb:c5:fc:94:01:42:70:44:59:9f:56:1b:a6:
5c:c6:72:a5:16:44:5a:00:c9:53:e1:45:ca:ac:7c:44:d7:34:
c6:21:1e:89:3b:19:bf:d4:e5:9f:00:bd:f9:d7:02:7a:e1:aa:
bb:8a:ed:ed:01:0e:99:2c:ae:c5:10:d1:2d:c1:56:9b:c9:85:
36:46:bd:ca:af:47:c1:2c:58:14:d9:34:68:64:6f:ad:f2:a0:
46:99:76:f8:a0:fb:a2:4a:da:79:c6:6c:da:7b:85:47:25:86:
c4:fe:4c:af:86:ed:53:25:5f:e0:03:66:68:6b:8d:8e:54:17:
07:ba:00:bb:57:b0:c6:c1:7a:b9:32:a1:44:2d:68:ab:3e:c5:
c6:11:14:9f:5a:20:a7:53:fe:54:b6:ed:00:ee:78:10:7e:e3:
58:58:2e:28:00:7a:af:e4:e9:0b:1c:fb:58:a7:fc:40:87:f4:
25:10:56:6c:48:ec:05:7b:15:56:5d:f7:b5:8b:72:46:bb:9a:
b7:c4:c7:09:cc:5a:8c:a9:cc:80:17:7d:a8:f4:eb:fb:1a:6f:
0e:13:61:ea
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcWRntvGA+A4UCKlRoDmfzSUO7uQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAzMDQ5WhcNMjYwODAzMjM1OTU5
WjB6MUkwRwYDVQQFE0BjMzFlYWU2ZjAyNTIzODVkMDgyYWEwMzYwNmUxYzI3Yzlh
OGMzMGFiMTg4YzdhNzE3OWM4ZWFiZWVlZGZiNzNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjB3rY2M8Egy0yiCXbTYAk59KXzwFaxZUeq5F5+7LW0PJW
A6n9hY08bsNy0yBK/GQ37cRNUqGGf4mgLWgWVPv3bIXOc2Q01UxPuxtuJleMIY+6
iMjiAYBsgB7ngO+TvHCZRriNPDA4ThIch+DpV2naIkvwZomVcZDvlYtamdjshLyN
Q5JCmYWNRugxX3zFEC58j0FlpD3Spi1eKqdKUfk3mM9cIcoW5HGuRT1ndB7IB4fN
kdj987x40HWHokSK9hO9VSgvccD87GKUpIioD/TzXMnEsRHlmG/73Z4wKFVwNO+T
VR3mMZYGNDnWfqhKWK5fSn0dbYC84ciCGw6AXfJZAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUhjXQCCQPm0wRpfjEqi1jjMe474UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2RiZjk1ZDhhLTRkMmEtNDY0Yy05ZjUzLTE4NmVjMDBjY2MyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4gzANBgkqhkiG9w0BAQsFAAOCAQEAuYKQLQb++hmllA3n0HY3b7dSajMr
pcQcDwVofyvLvncR7bZO92/VMBf7xfyUAUJwRFmfVhumXMZypRZEWgDJU+FFyqx8
RNc0xiEeiTsZv9TlnwC9+dcCeuGqu4rt7QEOmSyuxRDRLcFWm8mFNka9yq9HwSxY
FNk0aGRvrfKgRpl2+KD7okraecZs2nuFRyWGxP5Mr4btUyVf4ANmaGuNjlQXB7oA
u1ewxsF6uTKhRC1oqz7FxhEUn1ogp1P+VLbtAO54EH7jWFguKAB6r+TpCxz7WKf8
QIf0JRBWbEjsBXsVVl33tYtyRruat8THCcxajKnMgBd9qPTr+xpvDhNh6g==
-----END CERTIFICATE-----
Generated at Tue May 12 23:17:26 2026 by rpki-client