
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08623feb-504a-425e-89a9-0576770055a3.roa
File: 08623feb-504a-425e-89a9-0576770055a3.roa (raw, json)
Hash identifier: ci6d+XPAKuxgPnJ1WyEVXMgjFwgZNarnoHOuJ7vKjV8=
Subject key identifier: 08:EF:E5:B3:3E:DD:D8:CC:45:36:CE:B5:72:9D:0D:53:80:BF:02:FB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 71EC593C863C3B27608DC40A5AF8D6E43E4737EA
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08623feb-504a-425e-89a9-0576770055a3.roa
Signing time: Tue 06 Oct 2026 00:31:48 +0000
ROA not before: Tue 06 Oct 2026 00:31:48 +0000
ROA not after: Mon 04 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 56.186.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ec:59:3c:86:3c:3b:27:60:8d:c4:0a:5a:f8:d6:e4:3e:47:37:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 6 00:31:48 2026 GMT
Not After : Jan 4 23:59:59 2027 GMT
Subject: serialNumber=f887ec0761a54647685ff691b7170a5294a4827bd32d855a8bd81cddf73e894b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:91:aa:a8:6b:db:86:77:4b:38:bf:ab:a3:
25:9d:89:a1:31:6c:aa:7c:c9:84:3f:28:2c:7d:95:
c6:07:82:db:bf:c7:9b:b8:3a:b3:53:3b:c7:d6:ee:
78:b8:e6:9a:58:33:1c:96:02:ad:4f:44:1a:80:ae:
21:4c:7d:f9:9b:7e:5a:9d:02:a5:17:ee:17:d1:74:
55:49:8d:7d:09:f8:d3:f1:41:f0:34:e9:39:a5:6f:
47:28:34:c1:af:73:01:26:45:8a:0d:3d:61:bb:c6:
00:98:30:0a:4a:f9:97:2a:1c:65:8d:ff:6a:2d:2d:
96:4f:72:89:26:d5:2f:07:d7:34:bc:17:b7:41:2d:
db:b9:a7:83:ef:b6:94:6e:88:34:ba:18:79:00:eb:
21:ee:83:4c:6e:e3:98:b8:89:18:4b:dd:59:bc:e6:
a6:39:18:10:bd:27:af:44:69:95:22:f1:85:b6:f4:
89:c3:27:8a:a6:fc:a2:ff:90:3b:4e:34:9a:7e:e8:
79:af:fa:83:85:b0:13:ca:a7:06:9a:7a:99:9a:91:
f5:a8:51:6d:72:6b:33:fc:0b:da:b8:9d:13:d2:9f:
ce:ad:57:bd:d3:56:92:02:b3:b7:8f:df:0a:c4:d5:
f4:fb:ef:7d:68:23:71:42:c7:d9:1d:2b:2b:9c:dd:
68:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EF:E5:B3:3E:DD:D8:CC:45:36:CE:B5:72:9D:0D:53:80:BF:02:FB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/08623feb-504a-425e-89a9-0576770055a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.186.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:85:c2:06:85:9c:31:80:09:ba:9a:c8:c9:ac:40:e6:08:3f:
1d:b6:39:b3:5c:30:7c:26:65:e1:df:0f:e6:7a:11:d9:1c:dd:
0b:f9:80:e7:4b:f2:62:0a:99:14:bb:78:10:c4:44:df:fb:6f:
82:98:3a:46:65:09:dc:10:d7:1d:51:f5:c7:00:29:4d:0b:5c:
71:6e:8c:15:bd:b6:9e:71:fc:8d:d5:be:f9:90:97:43:9f:ad:
9d:23:d4:d0:ff:80:19:71:f5:52:ef:53:7a:e2:ba:a8:8d:1c:
00:a6:ab:26:a5:d7:5d:c5:9e:1e:bb:37:c7:b3:cc:4e:65:c3:
93:b7:2b:d7:f8:34:59:e7:4c:52:9d:1c:c9:cd:99:47:3a:bb:
0c:5c:e5:74:d0:0f:a0:78:95:95:2e:09:40:76:bc:97:6b:33:
53:d6:68:6f:9f:d2:26:17:ba:dd:44:34:b4:98:6d:d4:f0:18:
77:bc:a4:f8:98:05:36:fa:b2:af:6f:40:fb:79:28:cf:12:aa:
e3:22:bd:2f:62:c4:a1:e1:d3:c7:50:a3:c9:04:e3:08:86:32:
e0:f6:0a:13:40:a1:e9:66:59:70:c4:96:3c:27:66:ec:66:04:
36:5d:ef:be:39:85:ae:36:63:bf:f5:16:be:6c:64:7c:12:3e:
dc:12:8b:30
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUcexZPIY8OydgjcQKWvjW5D5HN+owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDA2MDAzMTQ4WhcNMjcwMTA0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmODg3ZWMwNzYxYTU0NjQ3Njg1ZmY2OTFiNzE3MGE1Mjk0
YTQ4MjdiZDMyZDg1NWE4YmQ4MWNkZGY3M2U4OTRiMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDeVJGqqGvbhndLOL+royWdiaExbKp8yYQ/KCx9lcYHgtu/
x5u4OrNTO8fW7ni45ppYMxyWAq1PRBqAriFMffmbflqdAqUX7hfRdFVJjX0J+NPx
QfA06Tmlb0coNMGvcwEmRYoNPWG7xgCYMApK+ZcqHGWN/2otLZZPcokm1S8H1zS8
F7dBLdu5p4PvtpRuiDS6GHkA6yHug0xu45i4iRhL3Vm85qY5GBC9J69EaZUi8YW2
9InDJ4qm/KL/kDtONJp+6Hmv+oOFsBPKpwaaepmakfWoUW1yazP8C9q4nRPSn86t
V73TVpICs7eP3wrE1fT7731oI3FCx9kdKyuc3WjdAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUCO/lsz7d2MxFNs61cp0NU4C/AvswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzA4NjIzZmViLTUwNGEtNDI1ZS04OWE5LTA1NzY3NzAwNTVhMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA4ujANBgkqhkiG9w0BAQsFAAOCAQEAiYXCBoWcMYAJuprIyaxA5gg/HbY5
s1wwfCZl4d8P5noR2RzdC/mA50vyYgqZFLt4EMRE3/tvgpg6RmUJ3BDXHVH1xwAp
TQtccW6MFb22nnH8jdW++ZCXQ5+tnSPU0P+AGXH1Uu9TeuK6qI0cAKarJqXXXcWe
Hrs3x7PMTmXDk7cr1/g0WedMUp0cyc2ZRzq7DFzldNAPoHiVlS4JQHa8l2szU9Zo
b5/SJhe63UQ0tJht1PAYd7yk+JgFNvqyr29A+3kozxKq4yK9L2LEoeHTx1CjyQTj
CIYy4PYKE0Ch6WZZcMSWPCdm7GYENl3vvjmFrjZjv/UWvmxkfBI+3BKLMA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:47:20 2026 by rpki-client