
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59994030-fa77-46f8-8c5a-9301b2931210.roa
File: 59994030-fa77-46f8-8c5a-9301b2931210.roa (raw, json)
Hash identifier: p5J2OAdt+5gl76dV/YJxoKf+7vkz/Dn1XjBsoMJsVpE=
Subject key identifier: 90:64:16:E0:4F:DD:79:9D:D7:EC:47:0A:68:5D:0E:EC:BA:1C:77:0B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A1E0CAF5D32F6E72BD1FCB9CD88167E0B5F8444
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59994030-fa77-46f8-8c5a-9301b2931210.roa
Signing time: Tue 28 Jul 2026 00:10:46 +0000
ROA not before: Tue 28 Jul 2026 00:10:46 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 185.7.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:1e:0c:af:5d:32:f6:e7:2b:d1:fc:b9:cd:88:16:7e:0b:5f:84:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 28 00:10:46 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=52188c765267c1cc47a3a26d9b79815aef9814fc18da62e3a900d2a2cac78bc3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:60:49:77:1a:44:d9:70:ac:8a:1d:9f:65:bc:
85:ab:42:19:27:b6:7b:2b:28:d5:bc:82:fc:01:77:
26:9e:72:38:70:26:89:33:a8:b7:7c:f1:a0:8d:11:
69:2d:c2:0b:23:c0:7f:bc:e6:c4:6a:48:53:44:92:
2c:0d:4b:5f:d0:16:52:b9:7b:78:07:96:d3:2a:11:
3f:bb:62:8e:12:f1:98:b9:69:e5:47:e6:50:b9:be:
1e:38:17:cf:23:b2:b2:72:37:4d:d4:81:95:ec:44:
b8:95:6d:3a:e1:b3:64:ac:8f:2c:3f:22:38:1c:a3:
49:9e:57:23:dc:ae:8f:bf:dc:68:06:c9:43:58:8d:
4f:52:9d:50:fc:6b:87:3c:fe:5a:28:8b:ce:4f:75:
ae:5b:0e:e3:d4:66:e9:8b:21:84:59:43:b7:cd:e9:
b0:c4:87:34:28:3b:5d:5a:16:d8:a1:57:93:4e:ad:
a8:39:80:ef:e4:e2:93:6b:1d:fd:ff:7f:72:3b:8d:
15:a5:4d:24:54:35:8a:3b:91:d2:1a:fc:f5:e0:29:
f3:af:62:48:4e:7f:ee:48:e2:ee:9e:bb:4b:0a:80:
b1:6e:cb:99:7a:53:d6:81:b9:66:8d:30:0d:09:45:
6a:e4:25:ca:49:06:2d:be:95:b0:45:ac:28:b4:e8:
f7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:64:16:E0:4F:DD:79:9D:D7:EC:47:0A:68:5D:0E:EC:BA:1C:77:0B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/59994030-fa77-46f8-8c5a-9301b2931210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.14.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f6:fc:22:e6:a8:1e:45:88:99:90:8e:06:ea:84:43:16:8b:
f1:ad:dd:dc:7d:ef:06:cb:70:4d:0c:2f:85:dc:a7:65:f5:0e:
2d:91:a3:68:d2:95:d4:c9:b8:ee:93:99:f4:14:1d:69:18:2a:
b0:09:ce:a0:fe:01:e2:d7:99:07:a6:24:4a:f3:cd:dd:60:61:
d0:62:24:ab:5a:65:bd:03:81:2e:44:5d:c5:d6:10:16:14:21:
d3:e2:52:68:36:3b:e1:c3:6c:5c:b7:f5:e3:69:89:3d:bf:3b:
7b:6d:23:a3:62:d6:e3:05:69:bc:ae:15:7f:2c:c8:ba:96:ac:
0c:40:a5:9a:63:70:ab:4f:61:96:ba:3a:de:d0:d7:00:58:19:
de:3a:d8:9b:02:c6:de:8d:b2:d5:0e:f5:45:c3:11:7c:38:bd:
c8:b6:c7:77:75:31:5d:30:fd:ff:24:14:19:a5:5b:9e:7f:e3:
84:66:b6:25:e0:62:23:ab:0d:51:4b:56:e5:20:8b:a7:9f:4e:
5b:74:af:d9:68:65:f1:da:aa:30:77:17:f0:60:95:9f:1a:fc:
aa:6d:a9:1e:6e:1d:d6:18:ec:94:5f:45:60:3a:85:7b:23:65:
49:48:f0:be:a4:80:df:12:99:4f:94:c6:e8:f8:89:e8:5b:5c:
dd:e7:a2:4a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOh4Mr10y9ucr0fy5zYgWfgtfhEQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI4MDAxMDQ2WhcNMjYxMDI2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjE4OGM3NjUyNjdjMWNjNDdhM2EyNmQ5Yjc5ODE1YWVm
OTgxNGZjMThkYTYyZTNhOTAwZDJhMmNhYzc4YmMzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDGYEl3GkTZcKyKHZ9lvIWrQhkntnsrKNW8gvwBdyaecjhw
JokzqLd88aCNEWktwgsjwH+85sRqSFNEkiwNS1/QFlK5e3gHltMqET+7Yo4S8Zi5
aeVH5lC5vh44F88jsrJyN03UgZXsRLiVbTrhs2Ssjyw/Ijgco0meVyPcro+/3GgG
yUNYjU9SnVD8a4c8/looi85Pda5bDuPUZumLIYRZQ7fN6bDEhzQoO11aFtihV5NO
rag5gO/k4pNrHf3/f3I7jRWlTSRUNYo7kdIa/PXgKfOvYkhOf+5I4u6eu0sKgLFu
y5l6U9aBuWaNMA0JRWrkJcpJBi2+lbBFrCi06PdLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkGQW4E/deZ3X7EcKaF0O7LocdwswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU5OTk0MDMwLWZhNzctNDZmOC04YzVhLTkzMDFiMjkzMTIxMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAC5Bw4wDQYJKoZIhvcNAQELBQADggEBABf2/CLmqB5FiJmQjgbqhEMWi/Gt
3dx97wbLcE0ML4Xcp2X1Di2Ro2jSldTJuO6TmfQUHWkYKrAJzqD+AeLXmQemJErz
zd1gYdBiJKtaZb0DgS5EXcXWEBYUIdPiUmg2O+HDbFy39eNpiT2/O3ttI6Ni1uMF
abyuFX8syLqWrAxApZpjcKtPYZa6Ot7Q1wBYGd462JsCxt6NstUO9UXDEXw4vci2
x3d1MV0w/f8kFBmlW55/44RmtiXgYiOrDVFLVuUgi6efTlt0r9loZfHaqjB3F/Bg
lZ8a/KptqR5uHdYY7JRfRWA6hXsjZUlI8L6kgN8SmU+Uxuj4iehbXN3noko=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:46 2026 by rpki-client