
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b58e36b-9b6c-4825-bf3d-8bdfef9a7b51.roa
File: 0b58e36b-9b6c-4825-bf3d-8bdfef9a7b51.roa (raw, json)
Hash identifier: rS2lMfPajmsH5pR2Fr47/+s4VonDhlKS2Rs0W1VKLqg=
Subject key identifier: D1:87:EC:5C:47:50:96:FC:7E:7B:AA:A1:94:9F:18:60:6C:7D:8F:6C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C45EB8E6F45249781C6A6B6D2964771907AEB6B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b58e36b-9b6c-4825-bf3d-8bdfef9a7b51.roa
Signing time: Wed 02 Sep 2026 14:33:26 +0000
ROA not before: Wed 02 Sep 2026 14:33:26 +0000
ROA not after: Tue 01 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.252.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:45:eb:8e:6f:45:24:97:81:c6:a6:b6:d2:96:47:71:90:7a:eb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Sep 2 14:33:26 2026 GMT
Not After : Dec 1 23:59:59 2026 GMT
Subject: serialNumber=44c78fe94016d3053199c31e1236e91fdf6d7976d2b1962c9bdbbc0e99214d04, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:bf:11:a3:51:dc:02:0c:5a:dd:55:74:9b:
ef:19:52:b6:f4:67:c0:6a:cf:76:7b:1d:ee:a4:e7:
af:9b:55:10:55:6e:35:90:d7:32:72:9c:dc:a5:41:
62:e6:3e:18:21:9f:94:0d:e7:be:f7:f0:ce:b3:76:
73:80:cb:f0:3d:db:26:b4:d8:ab:38:d7:a0:12:ec:
4d:3c:5a:55:b2:f4:13:c9:01:3c:32:bf:cd:85:fa:
1e:e1:ca:dc:2c:a5:32:e1:93:f7:10:ab:89:2e:02:
5f:c3:15:59:f6:e3:4a:ea:93:79:d9:2b:e4:91:90:
d9:8d:ea:e4:bd:63:dc:15:cf:1e:cd:0b:e4:4d:bf:
91:65:9d:43:67:e7:4b:64:cf:b0:5a:e7:39:8a:19:
99:23:9e:85:8c:ef:db:ec:5b:60:95:d8:25:ca:fa:
d7:58:65:cb:d8:90:d2:df:bf:81:dc:5e:a9:e0:9b:
b0:5c:b1:f0:07:b0:89:f1:b1:cf:9f:3c:ee:41:be:
34:92:ff:b6:c2:b9:e2:1f:a4:3e:25:d7:63:65:49:
de:c1:43:6e:4c:db:af:8a:b4:af:f9:5d:77:08:13:
53:06:ad:45:54:06:10:5b:cf:b9:0e:ab:e8:b8:ae:
a6:04:f8:c2:f6:e7:2e:de:d5:68:d0:66:08:54:97:
28:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:EC:5C:47:50:96:FC:7E:7B:AA:A1:94:9F:18:60:6C:7D:8F:6C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0b58e36b-9b6c-4825-bf3d-8bdfef9a7b51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.252.216.0/23
Signature Algorithm: sha256WithRSAEncryption
79:dd:dc:37:d8:c1:76:c3:53:6b:fd:a4:f7:4b:a4:52:86:cf:
87:c8:22:99:39:25:06:4f:aa:f9:0e:b5:59:68:5a:7c:42:bf:
d3:7f:17:2f:bf:48:42:f9:69:4d:ce:06:6f:a2:c3:55:40:d2:
06:ab:c3:dc:9a:27:43:04:0d:5b:74:bf:0a:e9:84:b5:c1:fa:
6d:ba:61:16:09:37:4d:36:6f:17:6c:26:b3:83:7c:6f:1f:2f:
96:7f:35:61:87:f5:f2:8c:65:9b:fc:60:0e:bd:a4:65:cf:a9:
4c:cd:dd:22:54:53:28:b7:23:a7:ee:2c:8c:ee:86:03:b2:a8:
24:fa:94:2d:29:82:5f:f9:8d:5b:84:78:60:50:d2:9e:19:91:
22:4b:c4:e3:69:43:83:1b:d2:41:56:70:20:19:53:83:ff:22:
02:95:39:cc:4e:f6:28:a1:09:45:cc:df:a4:e1:bc:53:f5:d0:
77:c0:b6:15:37:d0:bd:75:b7:78:19:8d:04:21:37:4c:c3:c3:
31:2f:51:88:73:44:e3:8e:ac:c7:1f:c9:95:b6:72:b1:7d:f7:
20:23:ff:83:83:b5:91:e9:10:4e:d7:ea:a2:2c:7b:e8:97:df:
b6:d5:75:ce:fb:ce:b3:d5:9e:19:55:28:3d:72:2f:83:22:6f:
24:6d:7c:08
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUfEXrjm9FJJeBxqa20pZHcZB662swDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwOTAyMTQzMzI2WhcNMjYxMjAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A0NGM3OGZlOTQwMTZkMzA1MzE5OWMzMWUxMjM2ZTkxZmRm
NmQ3OTc2ZDJiMTk2MmM5YmRiYmMwZTk5MjE0ZDA0MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsq78Ro1HcAgxa3VV0m+8ZUrb0Z8Bqz3Z7He6k56+bVRBV
bjWQ1zJynNylQWLmPhghn5QN57738M6zdnOAy/A92ya02Ks416AS7E08WlWy9BPJ
ATwyv82F+h7hytwspTLhk/cQq4kuAl/DFVn240rqk3nZK+SRkNmN6uS9Y9wVzx7N
C+RNv5FlnUNn50tkz7Ba5zmKGZkjnoWM79vsW2CV2CXK+tdYZcvYkNLfv4HcXqng
m7BcsfAHsInxsc+fPO5BvjSS/7bCueIfpD4l12NlSd7BQ25M26+KtK/5XXcIE1MG
rUVUBhBbz7kOq+i4rqYE+ML25y7e1WjQZghUlyiVAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0YfsXEdQlvx+e6qhlJ8YYGx9j2wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzBiNThlMzZiLTliNmMtNDgyNS1iZjNkLThiZGZlZjlhN2I1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEP/NgwDQYJKoZIhvcNAQELBQADggEBAHnd3DfYwXbDU2v9pPdLpFKGz4fI
Ipk5JQZPqvkOtVloWnxCv9N/Fy+/SEL5aU3OBm+iw1VA0garw9yaJ0MEDVt0vwrp
hLXB+m26YRYJN002bxdsJrODfG8fL5Z/NWGH9fKMZZv8YA69pGXPqUzN3SJUUyi3
I6fuLIzuhgOyqCT6lC0pgl/5jVuEeGBQ0p4ZkSJLxONpQ4Mb0kFWcCAZU4P/IgKV
OcxO9iihCUXM36ThvFP10HfAthU30L11t3gZjQQhN0zDwzEvUYhzROOOrMcfyZW2
crF99yAj/4ODtZHpEE7X6qIse+iX37bVdc77zrPVnhlVKD1yL4MibyRtfAg=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:16:26 2026 by rpki-client