
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa
File: 235ba01b-bc16-4244-a93f-06a145b0732c.roa (raw, json)
Hash identifier: HBn06ptDkpBXdXeWUFh7PCVV29ly5ZwnmkjWIXWqhGU=
Subject key identifier: 71:FA:9E:97:F8:A3:82:4B:2C:EA:CF:3E:48:04:0F:D5:E6:0A:02:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 56A04D6361173B95273F71E104CC1DFE7CA41C2F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa
Signing time: Mon 03 Aug 2026 01:21:52 +0000
ROA not before: Mon 03 Aug 2026 01:21:52 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 147.106.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:a0:4d:63:61:17:3b:95:27:3f:71:e1:04:cc:1d:fe:7c:a4:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 01:21:52 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=5c113f4fd7fe012953ac46585193f2468a0602a0e42dc51669769c7504f70aa3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:cf:84:fc:a6:d2:eb:8e:1e:d5:ed:c8:b0:
89:6f:03:b3:21:47:0a:ef:06:07:18:b0:49:9e:da:
f0:be:ee:dc:7a:91:48:8b:56:37:21:5f:d3:6d:d4:
08:7d:58:29:2f:be:15:79:f0:80:66:56:5b:ea:cc:
52:10:ea:ec:e2:08:1f:42:74:f3:a5:26:88:e8:29:
39:0a:3d:87:a2:20:8e:39:e0:27:76:9d:e2:59:f5:
5c:6b:c8:fb:94:80:a1:20:f3:65:75:1f:58:70:12:
e4:89:5d:db:96:2d:bb:0a:02:c3:70:94:bb:9a:9a:
5f:85:81:f3:a9:93:f2:c0:ed:81:3c:15:74:53:c6:
d0:75:cb:76:78:e4:c2:26:c7:8b:c3:8b:77:a9:4d:
a6:73:0f:5b:d9:1f:67:f3:ca:2d:da:e5:1f:07:32:
dc:be:a3:4f:77:23:e4:e0:2f:f7:37:41:f0:7e:0e:
42:c6:c2:de:44:19:d4:38:95:aa:ed:8f:b1:39:42:
f7:2e:19:f9:85:dd:1b:c7:f6:a1:01:53:1d:f1:75:
19:44:4b:84:22:b6:31:33:b1:1c:ff:3d:23:bd:15:
70:db:40:f7:ac:aa:ff:35:24:6e:6a:b5:21:fe:8b:
97:54:59:b7:f9:0b:b6:4f:f3:04:cf:de:a2:5a:e7:
41:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FA:9E:97:F8:A3:82:4B:2C:EA:CF:3E:48:04:0F:D5:E6:0A:02:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/235ba01b-bc16-4244-a93f-06a145b0732c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.106.128.0/18
Signature Algorithm: sha256WithRSAEncryption
d2:b0:21:0d:cf:d2:26:85:5c:9d:3f:ce:b4:8d:a9:04:d2:36:
c1:a6:8d:2c:a7:04:00:f6:f8:99:c3:19:0d:6c:04:80:c7:a0:
d3:d8:1b:72:0b:67:ad:1c:94:03:ba:c0:ad:42:b2:b0:a7:0c:
2a:3c:bf:14:76:6f:3a:55:41:a8:dd:88:ba:32:5b:56:d1:fc:
e0:57:cf:52:f2:17:e6:ee:31:66:44:52:ad:1e:51:30:d3:93:
c2:c8:92:a4:70:20:07:43:1f:24:c5:3a:e6:4f:61:97:c2:00:
eb:c9:d9:df:61:41:de:6f:67:2a:9e:38:fa:96:62:c3:28:51:
7d:ce:97:aa:4c:c4:f6:e6:5b:cf:b9:bf:ee:db:15:35:b7:83:
a6:8a:e0:55:2d:24:7e:5e:ac:ed:aa:04:9d:d6:04:e1:ea:2d:
d0:61:80:76:a0:35:d6:ff:b8:68:21:e7:8a:ee:cd:12:47:b5:
25:01:80:fe:17:e2:a7:e6:0d:ff:26:34:d1:6f:89:02:ee:d2:
59:ff:d7:5f:ed:20:f8:92:5e:21:11:48:a3:e2:51:b9:73:04:
9c:a3:6f:eb:5e:03:cd:f3:4c:70:96:96:bc:cf:bf:f5:dd:96:
fd:00:21:2f:48:b1:f2:ad:b3:c8:e9:46:9b:ef:49:90:38:81:
6b:fc:b5:30
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVqBNY2EXO5UnP3HhBMwd/nykHC8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEyMTUyWhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1YzExM2Y0ZmQ3ZmUwMTI5NTNhYzQ2NTg1MTkzZjI0Njhh
MDYwMmEwZTQyZGM1MTY2OTc2OWM3NTA0ZjcwYWEzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsic+E/KbS644e1e3IsIlvA7MhRwrvBgcYsEme2vC+7tx6
kUiLVjchX9Nt1Ah9WCkvvhV58IBmVlvqzFIQ6uziCB9CdPOlJojoKTkKPYeiII45
4Cd2neJZ9VxryPuUgKEg82V1H1hwEuSJXduWLbsKAsNwlLuaml+FgfOpk/LA7YE8
FXRTxtB1y3Z45MImx4vDi3epTaZzD1vZH2fzyi3a5R8HMty+o093I+TgL/c3QfB+
DkLGwt5EGdQ4lartj7E5QvcuGfmF3RvH9qEBUx3xdRlES4QitjEzsRz/PSO9FXDb
QPesqv81JG5qtSH+i5dUWbf5C7ZP8wTP3qJa50GhAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUcfqel/ijgkss6s8+SAQP1eYKAj4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzIzNWJhMDFiLWJjMTYtNDI0NC1hOTNmLTA2YTE0NWIwNzMyYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAaTaoAwDQYJKoZIhvcNAQELBQADggEBANKwIQ3P0iaFXJ0/zrSNqQTSNsGm
jSynBAD2+JnDGQ1sBIDHoNPYG3ILZ60clAO6wK1CsrCnDCo8vxR2bzpVQajdiLoy
W1bR/OBXz1LyF+buMWZEUq0eUTDTk8LIkqRwIAdDHyTFOuZPYZfCAOvJ2d9hQd5v
ZyqeOPqWYsMoUX3Ol6pMxPbmW8+5v+7bFTW3g6aK4FUtJH5erO2qBJ3WBOHqLdBh
gHagNdb/uGgh54ruzRJHtSUBgP4X4qfmDf8mNNFviQLu0ln/11/tIPiSXiERSKPi
UblzBJyjb+teA83zTHCWlrzPv/Xdlv0AIS9IsfKts8jpRpvvSZA4gWv8tTA=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:44:00 2026 by rpki-client