
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
File: 60789a29-f516-47ec-9154-b2b610f7282e.roa (raw, json)
Hash identifier: sy/ZlHvSVwc9kaAmDWQ/EW2T08+46BrlqGN+oq25qUk=
Subject key identifier: 55:7D:20:09:A5:40:50:FF:86:C1:34:78:FB:63:8E:9D:54:4C:D5:C8
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 6C6A85C9D87B51D4E5679008C98523D9332B030D
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
Signing time: Mon 20 Jul 2026 00:00:06 +0000
ROA not before: Mon 20 Jul 2026 00:00:06 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 216.221.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:6a:85:c9:d8:7b:51:d4:e5:67:90:08:c9:85:23:d9:33:2b:03:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jul 20 00:00:06 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=c184e9f7a7770d8524819e09b2992a69422afe4b07b71325014a496718edca2a, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:88:3a:08:c5:57:b8:63:22:1c:af:80:c3:69:
6b:19:e1:dc:c0:62:94:d2:f0:37:98:0f:33:32:78:
ae:4f:c4:ea:6d:e0:aa:aa:3c:c9:88:0a:72:46:ce:
68:f7:7a:b7:79:6a:17:98:5e:65:9b:03:6e:9e:bf:
40:de:78:56:0f:79:09:db:e6:51:11:77:39:e1:97:
94:40:1d:af:99:9c:3b:a7:13:61:82:28:0d:72:1d:
5c:53:3f:3a:db:bd:c1:bb:e2:25:a6:ad:27:9c:d3:
7d:83:bd:bd:36:10:51:10:6b:1f:01:03:df:62:a7:
2b:13:49:38:8e:58:d0:83:08:f0:6c:fd:f4:63:5f:
43:c8:db:b6:ae:b9:57:40:cd:3a:c0:9b:80:03:e5:
0c:ea:22:ed:ae:ec:18:ff:ee:b3:ad:ca:21:c6:3d:
70:25:34:88:ef:17:52:2c:24:33:62:6a:71:da:71:
72:3c:ac:24:0a:69:f7:72:9f:6e:b7:5f:fd:28:40:
f1:3c:50:12:0f:4d:21:bf:0a:75:e8:a2:65:3d:b6:
8f:f6:2f:8a:ed:2a:91:14:c7:f8:5f:70:06:03:0e:
ef:1d:23:98:6e:0c:b9:5d:1c:db:60:ed:cd:67:94:
22:56:bd:62:6e:47:33:b3:18:f2:76:2e:c6:e0:3e:
c5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7D:20:09:A5:40:50:FF:86:C1:34:78:FB:63:8E:9D:54:4C:D5:C8
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.168.0/21
Signature Algorithm: sha256WithRSAEncryption
28:c2:17:4e:9d:fc:df:a6:65:f0:27:d6:ab:c4:55:3e:15:32:
8c:8f:4e:e0:a5:6b:19:05:01:76:33:f3:04:01:97:ad:73:ef:
4e:53:5f:fb:84:77:35:f4:9e:c9:6b:5d:85:0f:7b:e3:11:a2:
93:75:30:4f:c5:9c:4f:ba:28:f5:f1:d9:0c:5a:40:37:2f:c7:
15:1f:c5:27:54:05:41:77:73:97:9f:fa:5f:90:d9:48:6e:b8:
9d:00:88:24:90:6f:ab:26:b5:91:24:02:2d:c4:a0:71:f4:03:
fc:d2:3e:09:6d:93:1e:13:63:05:45:ec:d9:e1:9c:6c:e0:a4:
6e:c8:c6:86:eb:6b:ad:9a:6d:08:09:64:15:25:ce:30:ec:35:
03:62:53:57:b5:08:cb:f8:53:b6:26:c3:eb:13:a3:3e:89:10:
ba:2d:2d:b2:e7:f9:a8:83:98:52:fa:6b:9e:38:79:6e:7f:ac:
62:db:c0:68:58:2f:c6:ea:07:b0:34:82:20:09:fc:c7:90:6a:
12:71:be:1d:9a:dc:6e:02:87:db:a6:cc:a1:65:b6:66:31:60:
0f:26:ea:6b:a0:7a:f3:aa:fb:be:c3:81:d7:03:87:18:8b:41:
10:d2:24:0a:c8:10:e9:00:df:ac:e0:d2:ef:9f:0d:2c:d2:ea:
f7:16:02:5a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUbGqFydh7UdTlZ5AIyYUj2TMrAw0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNzIwMDAwMDA2WhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0BjMTg0ZTlmN2E3NzcwZDg1MjQ4MTllMDliMjk5MmE2OTQy
MmFmZTRiMDdiNzEzMjUwMTRhNDk2NzE4ZWRjYTJhMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC8iDoIxVe4YyIcr4DDaWsZ4dzAYpTS8DeYDzMyeK5PxOpt
4KqqPMmICnJGzmj3erd5aheYXmWbA26ev0DeeFYPeQnb5lERdznhl5RAHa+ZnDun
E2GCKA1yHVxTPzrbvcG74iWmrSec032Dvb02EFEQax8BA99ipysTSTiOWNCDCPBs
/fRjX0PI27auuVdAzTrAm4AD5QzqIu2u7Bj/7rOtyiHGPXAlNIjvF1IsJDNianHa
cXI8rCQKafdyn263X/0oQPE8UBIPTSG/CnXoomU9to/2L4rtKpEUx/hfcAYDDu8d
I5huDLldHNtg7c1nlCJWvWJuRzOzGPJ2LsbgPsUvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVX0gCaVAUP+GwTR4+2OOnVRM1cgwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzYwNzg5YTI5LWY1MTYtNDdlYy05MTU0LWIyYjYxMGY3MjgyZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAPY3agwDQYJKoZIhvcNAQELBQADggEBACjCF06d/N+mZfAn1qvEVT4VMoyP
TuClaxkFAXYz8wQBl61z705TX/uEdzX0nslrXYUPe+MRopN1ME/FnE+6KPXx2Qxa
QDcvxxUfxSdUBUF3c5ef+l+Q2UhuuJ0AiCSQb6smtZEkAi3EoHH0A/zSPgltkx4T
YwVF7NnhnGzgpG7Ixobra62abQgJZBUlzjDsNQNiU1e1CMv4U7Ymw+sToz6JELot
LbLn+aiDmFL6a544eW5/rGLbwGhYL8bqB7A0giAJ/MeQahJxvh2a3G4Ch9umzKFl
tmYxYA8m6mugevOq+77DgdcDhxiLQRDSJArIEOkA36zg0u+fDSzS6vcWAlo=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:20 2026 by rpki-client