
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/195f43e5-9baf-4f50-bcbb-65039707f56b.roa
File: 195f43e5-9baf-4f50-bcbb-65039707f56b.roa (raw, json)
Hash identifier: GHmmWCVT9O1zJzpU4vXkKj7MZ+2cZOc/7sgUNl814Fk=
Subject key identifier: 00:41:1E:F8:34:B1:E9:F8:47:91:E4:1A:1F:74:4C:3F:C9:50:25:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: F09C2E4A17041E0943564135430B756356F73C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/195f43e5-9baf-4f50-bcbb-65039707f56b.roa
Signing time: Fri 07 Aug 2026 00:41:13 +0000
ROA not before: Fri 07 Aug 2026 00:41:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 161.228.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f0:9c:2e:4a:17:04:1e:09:43:56:41:35:43:0b:75:63:56:f7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:41:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=3ab02aeba719519bebdc971a9d948232323e612e404b00adfa79777f1769632d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:07:b2:c3:45:77:44:5c:48:ec:4e:1d:da:
ab:31:9c:4f:18:d6:f2:63:06:4f:91:23:b1:df:86:
56:7f:ee:f3:26:c9:4d:7d:cf:4a:e1:f3:b0:e5:d5:
46:0c:3c:1f:cf:a3:4c:bd:b6:46:56:9d:44:d0:a9:
11:45:ad:d5:a3:63:1b:d5:ba:8a:ab:20:a2:09:63:
2f:96:ba:a3:ae:2f:a0:36:c0:0e:bf:71:a3:cf:55:
b5:3d:cb:0e:a8:3f:1f:32:6a:c2:bd:a9:52:4f:f3:
c4:0a:ea:57:8e:b0:a7:18:cb:2e:11:d0:a9:84:a5:
7f:90:5b:fd:ba:a9:19:f4:6f:e8:8e:3e:09:6c:68:
08:33:22:d2:27:06:be:63:3b:8c:d2:a5:57:7a:5e:
af:f9:5f:8e:8a:e1:8c:ba:b6:0a:4a:de:06:32:98:
fe:c1:6d:f0:5a:ec:0b:ef:4c:37:c1:f3:e2:77:5c:
a6:c2:27:ed:6d:43:c6:80:90:91:32:2e:cc:06:29:
68:0f:05:35:50:66:81:e5:1f:65:4c:33:be:77:d9:
45:12:16:6b:d4:57:be:c2:11:a6:c6:2a:88:4c:f8:
bf:b6:3f:5f:68:42:bb:7d:55:94:c4:d5:59:94:fd:
5e:fd:31:27:f8:49:ba:89:4d:93:d5:a5:56:19:0a:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:41:1E:F8:34:B1:E9:F8:47:91:E4:1A:1F:74:4C:3F:C9:50:25:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/195f43e5-9baf-4f50-bcbb-65039707f56b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.228.128.0/18
Signature Algorithm: sha256WithRSAEncryption
94:ff:dc:c8:5e:99:4a:5c:27:09:fb:0d:e2:1f:73:6c:1a:5e:
d1:b8:d6:18:8b:83:8a:a5:d2:35:87:38:0e:3b:4a:a5:6f:62:
d6:38:36:99:a1:e7:84:c8:4b:90:4e:89:a7:34:ca:d6:6e:0b:
c0:86:ff:62:de:22:fc:02:f4:38:f5:16:62:25:29:aa:19:f7:
ce:d2:f6:0b:2b:b1:f1:e2:6a:fc:ff:78:f5:36:24:09:cb:4f:
07:fa:ab:38:af:c7:ba:05:41:58:01:df:fc:ac:85:ba:77:f0:
c0:40:84:dd:48:e9:93:21:32:15:7c:0e:8c:cd:aa:87:f2:76:
15:20:a8:d0:c6:c0:8e:34:8b:6c:ea:be:7d:99:22:69:ea:09:
d2:14:3e:7b:23:a5:2c:23:3c:eb:4d:cb:5c:ef:4a:d7:4c:6d:
7f:33:8d:48:67:a4:83:05:64:e5:92:9a:30:38:b1:1e:58:29:
95:61:6b:06:5d:fd:86:f1:6e:38:e1:b8:7b:79:30:7c:31:7a:
d0:9d:8b:5e:16:cb:ea:5b:80:07:0d:ca:d7:f7:08:b9:d7:1f:
ee:f5:bb:19:55:dd:b5:83:9e:9a:00:04:57:70:9f:a1:7c:36:
22:0e:5c:8a:7a:32:23:87:06:c5:04:81:aa:95:45:c8:62:e4:
8c:48:44:82
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUAPCcLkoXBB4JQ1ZBNUMLdWNW9zwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDA0MTEzWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYWIwMmFlYmE3MTk1MTliZWJkYzk3MWE5ZDk0ODIzMjMy
M2U2MTJlNDA0YjAwYWRmYTc5Nzc3ZjE3Njk2MzJkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC4uQeyw0V3RFxI7E4d2qsxnE8Y1vJjBk+RI7HfhlZ/7vMm
yU19z0rh87Dl1UYMPB/Po0y9tkZWnUTQqRFFrdWjYxvVuoqrIKIJYy+WuqOuL6A2
wA6/caPPVbU9yw6oPx8yasK9qVJP88QK6leOsKcYyy4R0KmEpX+QW/26qRn0b+iO
PglsaAgzItInBr5jO4zSpVd6Xq/5X46K4Yy6tgpK3gYymP7BbfBa7AvvTDfB8+J3
XKbCJ+1tQ8aAkJEyLswGKWgPBTVQZoHlH2VMM7532UUSFmvUV77CEabGKohM+L+2
P19oQrt9VZTE1VmU/V79MSf4SbqJTZPVpVYZCpFvAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUAEEe+DSx6fhHkeQaH3RMP8lQJYYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE5NWY0M2U1LTliYWYtNGY1MC1iY2JiLTY1MDM5NzA3ZjU2Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAah5IAwDQYJKoZIhvcNAQELBQADggEBAJT/3MhemUpcJwn7DeIfc2waXtG4
1hiLg4ql0jWHOA47SqVvYtY4Npmh54TIS5BOiac0ytZuC8CG/2LeIvwC9Dj1FmIl
KaoZ987S9gsrsfHiavz/ePU2JAnLTwf6qzivx7oFQVgB3/yshbp38MBAhN1I6ZMh
MhV8DozNqofydhUgqNDGwI40i2zqvn2ZImnqCdIUPnsjpSwjPOtNy1zvStdMbX8z
jUhnpIMFZOWSmjA4sR5YKZVhawZd/YbxbjjhuHt5MHwxetCdi14Wy+pbgAcNytf3
CLnXH+71uxlV3bWDnpoABFdwn6F8NiIOXIp6MiOHBsUEgaqVRchi5IxIRII=
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:54:53 2026 by rpki-client