
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f2081a-14c8-4f5c-97c8-64cd2743fabd.roa
File: a2f2081a-14c8-4f5c-97c8-64cd2743fabd.roa (raw, json)
Hash identifier: wb2LvtkoSxevSQr2UxwxXv4RDjU62Qzj8VRqKrbsGGY=
Subject key identifier: 93:9D:C2:01:77:DC:FD:AE:39:10:6A:C2:8D:58:9E:E3:F5:97:D6:D8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7BCE193D094711678872BB2054C404CA98B1EC84
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f2081a-14c8-4f5c-97c8-64cd2743fabd.roa
Signing time: Fri 15 May 2026 01:10:50 +0000
ROA not before: Fri 15 May 2026 01:10:50 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.71.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ce:19:3d:09:47:11:67:88:72:bb:20:54:c4:04:ca:98:b1:ec:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 15 01:10:50 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=600a0c1bfb6faeb3ec89aac73d6270de609fc3d9e24ca737da3126a83c483152, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:b2:98:07:f4:36:0c:a3:01:b5:f7:cc:ad:
34:63:21:2f:eb:31:0a:0e:9e:ad:f4:8c:f0:0f:53:
9c:f6:3e:1d:da:c5:e1:df:b7:04:c2:a0:09:57:c0:
ec:f5:66:96:e1:94:8c:08:3d:00:74:cb:d7:d6:d8:
b4:23:23:e0:34:76:cc:04:f6:a2:97:6b:21:24:3d:
de:16:d6:08:e3:6a:1d:f6:21:6e:b0:24:9e:73:2f:
cc:de:20:c6:6d:d4:ea:83:96:fc:6e:63:59:77:8d:
03:d4:3f:ac:2a:50:9f:08:65:3e:22:7f:b4:cf:c5:
8b:4f:a5:2e:e3:45:ec:45:04:28:93:91:ff:d0:73:
9e:17:74:16:ab:e5:11:cd:40:4a:83:d7:b8:0b:a2:
9d:f5:7b:84:16:fa:dd:e5:2b:6a:a8:71:8f:70:64:
59:0b:0a:83:76:76:1f:9a:15:8e:85:3b:07:c5:b2:
21:5f:ba:56:40:c4:77:bd:e2:09:40:c7:11:9f:05:
59:e3:03:df:e9:01:aa:af:ab:c6:85:e1:4e:01:66:
12:40:d0:ab:ab:0b:59:1d:f3:9e:ba:7a:ad:ba:31:
68:d4:5a:e1:2e:ef:0a:8e:ab:16:3a:e2:e9:e7:19:
ee:ad:28:29:d5:06:c7:18:93:88:eb:80:7d:d0:a8:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9D:C2:01:77:DC:FD:AE:39:10:6A:C2:8D:58:9E:E3:F5:97:D6:D8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a2f2081a-14c8-4f5c-97c8-64cd2743fabd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.71.96.0/19
Signature Algorithm: sha256WithRSAEncryption
d5:4e:8e:94:16:62:0a:b7:54:da:ce:d4:78:0a:a9:73:97:6a:
a4:b6:21:25:9d:0a:c9:19:d4:bc:db:c0:1e:63:07:17:05:92:
e5:c1:b4:65:18:58:42:9d:29:8f:f8:f7:f0:89:a8:3a:a6:cd:
51:04:c8:b9:dc:f9:6d:84:3c:67:48:06:8c:12:57:96:09:9d:
4c:b6:95:aa:09:6e:a5:80:52:51:5a:a0:5c:9f:fd:41:de:cd:
fc:09:84:d2:2a:d6:16:d4:92:79:0f:da:2c:28:7f:f3:84:82:
ca:65:59:30:80:4f:d8:d3:4e:1e:27:2c:8d:cf:dc:4f:1d:9f:
37:76:da:0b:84:17:14:7b:e9:93:1f:52:b8:fb:c0:3d:0d:31:
ec:28:74:cb:32:f0:2f:66:c6:cd:d0:e6:05:33:e1:c5:85:ba:
ff:6e:ff:29:a4:96:4e:37:12:16:ca:8c:b5:c3:99:d1:44:25:
e0:5b:6b:60:fd:b1:ad:4a:1e:0b:4f:14:3a:85:4e:46:8b:21:
84:32:10:a2:42:b4:38:43:8c:af:15:2d:36:eb:fb:e2:a8:ef:
4b:0f:cb:96:68:17:96:4e:7e:81:c2:e5:23:5a:47:ac:c2:73:
8e:f0:f4:c1:27:6e:27:b3:a5:48:84:ef:0f:0b:53:6a:9a:ba:
b5:9c:5f:e2
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUe84ZPQlHEWeIcrsgVMQEypix7IQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTE1MDExMDUwWhcNMjYwODEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2MDBhMGMxYmZiNmZhZWIzZWM4OWFhYzczZDYyNzBkZTYw
OWZjM2Q5ZTI0Y2E3MzdkYTMxMjZhODNjNDgzMTUyMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCge7KYB/Q2DKMBtffMrTRjIS/rMQoOnq30jPAPU5z2Ph3a
xeHftwTCoAlXwOz1ZpbhlIwIPQB0y9fW2LQjI+A0dswE9qKXayEkPd4W1gjjah32
IW6wJJ5zL8zeIMZt1OqDlvxuY1l3jQPUP6wqUJ8IZT4if7TPxYtPpS7jRexFBCiT
kf/Qc54XdBar5RHNQEqD17gLop31e4QW+t3lK2qocY9wZFkLCoN2dh+aFY6FOwfF
siFfulZAxHe94glAxxGfBVnjA9/pAaqvq8aF4U4BZhJA0KurC1kd8566eq26MWjU
WuEu7wqOqxY64unnGe6tKCnVBscYk4jrgH3QqCOPAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk53CAXfc/a45EGrCjVie4/WX1tgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EyZjIwODFhLTE0YzgtNGY1Yy05N2M4LTY0Y2QyNzQzZmFiZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUQR2AwDQYJKoZIhvcNAQELBQADggEBANVOjpQWYgq3VNrO1HgKqXOXaqS2
ISWdCskZ1LzbwB5jBxcFkuXBtGUYWEKdKY/49/CJqDqmzVEEyLnc+W2EPGdIBowS
V5YJnUy2laoJbqWAUlFaoFyf/UHezfwJhNIq1hbUknkP2iwof/OEgsplWTCAT9jT
Th4nLI3P3E8dnzd22guEFxR76ZMfUrj7wD0NMewodMsy8C9mxs3Q5gUz4cWFuv9u
/ymklk43EhbKjLXDmdFEJeBba2D9sa1KHgtPFDqFTkaLIYQyEKJCtDhDjK8VLTbr
++Ko70sPy5ZoF5ZOfoHC5SNaR6zCc47w9MEnbiezpUiE7w8LU2qaurWcX+I=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:50 2026 by rpki-client