
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8d8c762-dbfd-4268-bc1b-e7fb289da015.roa
File: f8d8c762-dbfd-4268-bc1b-e7fb289da015.roa (raw, json)
Hash identifier: xFgG+AofRe2rBkCkejzHqmn14B4SL3xfn3ooTfiPKVk=
Subject key identifier: 26:CA:E0:D2:BD:F5:39:17:35:3D:60:3B:AD:BE:38:15:A7:B1:A3:8B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 607484F4DD5B40277311AE002FCC917AF098EF61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8d8c762-dbfd-4268-bc1b-e7fb289da015.roa
Signing time: Sun 11 Oct 2026 00:20:11 +0000
ROA not before: Sun 11 Oct 2026 00:20:11 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 13.128.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:74:84:f4:dd:5b:40:27:73:11:ae:00:2f:cc:91:7a:f0:98:ef:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 11 00:20:11 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=d160def65cac428ed32cd0dfdfd66263c6b401f6eda2502f3ae55e63197bfb94, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:8d:dc:3c:e2:61:55:1b:ff:95:4f:21:41:
8f:2b:b8:68:b2:15:41:de:89:e1:ba:79:70:f5:30:
b4:4c:58:0f:25:6b:a2:49:9c:ce:62:43:06:d8:df:
90:71:17:f2:29:a8:5d:d2:2f:d2:cb:06:b4:15:28:
dc:93:2a:ca:2f:17:68:fc:9e:bd:60:ed:7a:50:84:
1a:46:64:68:b7:dc:8b:0e:88:05:f2:97:20:c3:0f:
bb:5f:7c:ee:d1:20:71:1c:09:ec:99:20:39:8b:35:
01:da:c0:35:7f:6b:85:06:96:d3:f7:e8:14:c2:4d:
8d:b8:1e:c9:f7:28:6f:ea:bb:af:cb:fa:b9:1e:bd:
8e:e1:ac:a5:77:9a:31:19:47:79:e6:68:c9:c5:cf:
a3:3d:ba:a5:26:50:4a:b4:8e:06:7b:ea:db:88:14:
95:f7:d5:4b:45:46:64:57:3f:7b:06:38:5f:73:e2:
16:44:ae:ed:54:d5:5c:b2:9b:e9:04:36:54:4c:d7:
e7:e4:46:28:22:39:4d:dd:10:a5:74:05:36:bb:8e:
55:48:3d:cd:7f:f8:a4:99:59:3d:ed:67:2a:6f:95:
21:b5:14:fb:cb:af:1e:61:86:38:2e:b9:65:c4:43:
76:ca:11:29:a2:37:2a:5b:e3:bd:ea:2d:dc:25:1c:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:CA:E0:D2:BD:F5:39:17:35:3D:60:3B:AD:BE:38:15:A7:B1:A3:8B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f8d8c762-dbfd-4268-bc1b-e7fb289da015.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.240.0/21
Signature Algorithm: sha256WithRSAEncryption
0a:54:b4:fc:0e:f0:e9:25:b9:c7:0e:26:5e:c6:42:7e:b3:29:
a1:20:e3:d4:47:30:f5:db:81:7c:1b:71:d4:20:74:8b:7f:dd:
a1:fc:9c:87:0b:d1:3f:0d:ef:62:be:4a:36:42:a5:99:54:a5:
bf:f0:e0:ca:cd:dc:37:45:30:52:44:6a:d4:24:2e:78:a6:4f:
1d:46:0b:3f:05:0b:eb:f4:eb:a7:9e:df:ad:27:17:53:ec:af:
08:bc:51:fe:2e:9c:ee:af:d0:74:e4:da:52:a0:f2:79:18:c7:
66:c0:14:42:d9:31:71:3b:89:f8:56:c7:d4:7c:a3:a5:52:78:
a9:ac:1b:ab:74:8b:ad:f2:e6:ec:1c:52:60:b2:52:8f:76:35:
bd:82:e5:97:ec:91:f3:af:24:85:4c:27:39:31:37:27:09:4e:
1a:c2:cc:09:1d:2c:6c:5a:fe:12:a6:40:34:bb:09:e2:f2:0e:
2b:92:a2:c5:74:8d:21:46:2b:e4:d3:11:a7:41:b4:d3:29:56:
25:44:00:38:3a:9e:93:50:fe:a6:03:72:ba:40:de:49:9b:85:
08:35:33:28:69:7d:72:da:00:9f:7b:0d:28:cc:da:c2:72:18:
90:78:47:8f:fe:bc:23:f6:84:e8:14:0d:33:fa:4a:8d:80:6f:
33:7e:97:31
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYHSE9N1bQCdzEa4AL8yRevCY72EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDExMDAyMDExWhcNMjcwMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkMTYwZGVmNjVjYWM0MjhlZDMyY2QwZGZkZmQ2NjI2M2M2
YjQwMWY2ZWRhMjUwMmYzYWU1NWU2MzE5N2JmYjk0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCz4Y3cPOJhVRv/lU8hQY8ruGiyFUHeieG6eXD1MLRMWA8l
a6JJnM5iQwbY35BxF/IpqF3SL9LLBrQVKNyTKsovF2j8nr1g7XpQhBpGZGi33IsO
iAXylyDDD7tffO7RIHEcCeyZIDmLNQHawDV/a4UGltP36BTCTY24Hsn3KG/qu6/L
+rkevY7hrKV3mjEZR3nmaMnFz6M9uqUmUEq0jgZ76tuIFJX31UtFRmRXP3sGOF9z
4hZEru1U1Vyym+kENlRM1+fkRigiOU3dEKV0BTa7jlVIPc1/+KSZWT3tZypvlSG1
FPvLrx5hhjguuWXEQ3bKESmiNypb473qLdwlHKh5AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUJsrg0r31ORc1PWA7rb44Faexo4swHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Y4ZDhjNzYyLWRiZmQtNDI2OC1iYzFiLWU3ZmIyODlkYTAxNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMNgPAwDQYJKoZIhvcNAQELBQADggEBAApUtPwO8OkluccOJl7GQn6zKaEg
49RHMPXbgXwbcdQgdIt/3aH8nIcL0T8N72K+SjZCpZlUpb/w4MrN3DdFMFJEatQk
LnimTx1GCz8FC+v066ee360nF1Psrwi8Uf4unO6v0HTk2lKg8nkYx2bAFELZMXE7
ifhWx9R8o6VSeKmsG6t0i63y5uwcUmCyUo92Nb2C5ZfskfOvJIVMJzkxNycJThrC
zAkdLGxa/hKmQDS7CeLyDiuSosV0jSFGK+TTEadBtNMpViVEADg6npNQ/qYDcrpA
3kmbhQg1MyhpfXLaAJ97DSjM2sJyGJB4R4/+vCP2hOgUDTP6So2AbzN+lzE=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:03:07 2026 by rpki-client