
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa
File: 4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa (raw, json)
Hash identifier: bZyZBwbn3PrgsNahOX8y+r7oLV1xfPmX92DkwML93fw=
Subject key identifier: 56:31:AE:6D:1C:73:E0:26:B2:52:26:D8:5F:25:D7:8A:2C:A8:0B:4A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7A131A1B2FEE2A193D40BD7605E7261EAB5E2EE1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa
Signing time: Fri 15 May 2026 00:40:44 +0000
ROA not before: Fri 15 May 2026 00:40:44 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 161.178.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:13:1a:1b:2f:ee:2a:19:3d:40:bd:76:05:e7:26:1e:ab:5e:2e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 00:40:44 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=283d956b6ece84264af67585471c35a493f666fcf0fe50fa569dad17b885d09f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:41:0c:83:b2:5e:b7:7c:26:72:43:65:22:
4f:94:d6:5a:93:93:a6:48:b3:b0:f0:9f:1a:f2:82:
7b:31:34:be:44:26:f5:f1:aa:7f:d7:45:ce:01:7b:
e7:e2:43:c8:2d:4d:c4:08:31:ae:55:38:d0:b4:af:
cd:40:fb:e5:0e:af:d5:e3:57:57:4b:e7:85:0f:9b:
a7:fc:32:42:73:09:c5:20:b8:e1:a0:13:7f:0e:d6:
fa:49:e7:08:28:88:57:7c:1c:54:7a:11:14:e9:4e:
57:07:e8:ad:02:27:16:b3:5a:6a:42:1c:5b:a7:86:
77:5b:ec:8a:1d:4a:71:fe:ea:85:62:6a:e2:08:6a:
3b:9c:4c:00:e6:94:6a:0d:64:3e:d5:7a:ee:47:d8:
da:69:9b:94:00:54:e5:ad:cf:a5:36:82:6a:77:32:
80:35:f7:ba:5e:9e:13:9b:f0:57:32:94:c7:ad:bc:
1e:a2:ed:6d:10:c1:22:fd:77:f7:09:ca:c4:b7:bb:
fd:34:ae:e8:82:a3:9d:a2:32:45:0c:19:ff:8a:a3:
e5:3e:f5:eb:14:e8:36:d1:a2:0d:06:b3:f4:5d:4e:
c4:4f:4f:53:69:94:fb:c5:60:5a:0d:68:f7:0a:57:
a6:03:69:03:7c:fb:2c:77:75:71:46:ea:f9:76:6a:
c3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:AE:6D:1C:73:E0:26:B2:52:26:D8:5F:25:D7:8A:2C:A8:0B:4A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4f21d4e9-f7b8-42c4-aca7-72a838e78ac6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.178.0.0/19
Signature Algorithm: sha256WithRSAEncryption
af:dc:ee:45:a3:99:10:49:7a:a9:dc:c1:c2:46:57:e0:e6:1d:
4d:8a:48:d3:f7:36:50:72:ef:19:ab:02:ae:63:e7:a1:54:b9:
97:72:29:25:4c:ff:d5:eb:d2:64:a6:89:6a:85:e8:b7:1d:86:
5e:18:ff:d3:bf:a9:7a:04:f1:66:fd:e6:ea:f0:49:39:53:ca:
80:24:49:3d:48:a8:4a:f0:49:ef:2b:1c:eb:5c:ca:5b:d8:ad:
39:46:3c:19:40:6a:c8:bc:03:77:f6:d7:ba:93:ab:0f:3c:a1:
6d:e6:3a:45:09:0e:b4:88:cb:12:55:fc:b9:91:88:b5:93:de:
6c:fd:a2:01:0a:6e:d8:10:e4:2b:5b:50:e8:de:5a:38:c3:44:
e6:91:d6:b5:2e:54:10:53:e6:a2:9f:05:4c:39:e0:e9:20:ab:
00:c8:d5:a6:8f:fa:2d:ac:79:a3:eb:33:64:6b:ed:e2:dc:76:
6f:f7:26:b1:a9:7b:d7:19:e0:c1:02:5e:8c:66:1c:af:b5:e2:
fc:ba:be:4d:ff:c8:d9:9f:9b:0f:ab:a5:9d:c0:6b:b4:9f:62:
2e:37:75:00:5b:2e:ac:4e:68:ce:bc:31:10:5c:6b:07:83:15:
19:a2:81:22:09:20:bc:5b:0d:0b:6e:07:80:39:d6:af:48:65:
79:be:c5:98
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUehMaGy/uKhk9QL12BecmHqteLuEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDA0MDQ0WhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0AyODNkOTU2YjZlY2U4NDI2NGFmNjc1ODU0NzFjMzVhNDkz
ZjY2NmZjZjBmZTUwZmE1NjlkYWQxN2I4ODVkMDlmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCiTEEMg7Jet3wmckNlIk+U1lqTk6ZIs7DwnxrygnsxNL5E
JvXxqn/XRc4Be+fiQ8gtTcQIMa5VONC0r81A++UOr9XjV1dL54UPm6f8MkJzCcUg
uOGgE38O1vpJ5wgoiFd8HFR6ERTpTlcH6K0CJxazWmpCHFunhndb7IodSnH+6oVi
auIIajucTADmlGoNZD7Veu5H2Nppm5QAVOWtz6U2gmp3MoA197penhOb8FcylMet
vB6i7W0QwSL9d/cJysS3u/00ruiCo52iMkUMGf+Ko+U+9esU6DbRog0Gs/RdTsRP
T1NplPvFYFoNaPcKV6YDaQN8+yx3dXFG6vl2asNBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUVjGubRxz4CayUibYXyXXiiyoC0owHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRmMjFkNGU5LWY3YjgtNDJjNC1hY2E3LTcyYTgzOGU3OGFjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAWhsgAwDQYJKoZIhvcNAQELBQADggEBAK/c7kWjmRBJeqncwcJGV+DmHU2K
SNP3NlBy7xmrAq5j56FUuZdyKSVM/9Xr0mSmiWqF6Lcdhl4Y/9O/qXoE8Wb95urw
STlTyoAkST1IqErwSe8rHOtcylvYrTlGPBlAasi8A3f217qTqw88oW3mOkUJDrSI
yxJV/LmRiLWT3mz9ogEKbtgQ5CtbUOjeWjjDROaR1rUuVBBT5qKfBUw54OkgqwDI
1aaP+i2seaPrM2Rr7eLcdm/3JrGpe9cZ4MECXoxmHK+14vy6vk3/yNmfmw+rpZ3A
a7SfYi43dQBbLqxOaM68MRBcaweDFRmigSIJILxbDQtuB4A51q9IZXm+xZg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:12:06 2026 by rpki-client