
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5948d76e-c619-4073-88b0-07f79eca9d5d.roa
File: 5948d76e-c619-4073-88b0-07f79eca9d5d.roa (raw, json)
Hash identifier: b5uJqkEJWKweBtlOfPqrEJ1Fp4mrtNMyU1oqrAFgx9w=
Subject key identifier: AD:F3:7E:78:CF:39:3E:45:DF:9D:CD:42:C5:30:64:34:BD:0C:A7:69
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 39CDAE00033D8C6BEC1FF923868D1D608ABE88C7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5948d76e-c619-4073-88b0-07f79eca9d5d.roa
Signing time: Mon 03 Aug 2026 00:20:09 +0000
ROA not before: Mon 03 Aug 2026 00:20:09 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.50.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:cd:ae:00:03:3d:8c:6b:ec:1f:f9:23:86:8d:1d:60:8a:be:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 3 00:20:09 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=c7806fa1741a3a58f5706bd52213384438b4aa51638bacd72eafb1b21262716a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:48:67:77:d5:85:d5:96:1c:e9:94:c6:38:
d6:62:63:ca:fc:c7:bb:65:81:5f:08:0c:9b:0c:44:
f0:71:e5:0e:72:c3:77:cc:22:78:21:9b:b9:1e:f5:
a9:6e:bd:74:b0:ce:a8:c1:fd:28:38:f7:10:f8:e7:
ad:1b:0d:9f:3c:a0:3e:20:35:04:c4:6b:f7:82:98:
d5:00:c6:1c:b5:39:c1:2e:0f:5c:19:d7:ba:02:cc:
ee:47:28:1a:01:9b:94:78:96:2c:9c:43:10:db:2a:
2e:b1:3f:04:d6:94:97:f2:3a:8c:43:46:51:e2:51:
c0:cb:2d:9b:d8:30:29:73:53:63:80:1b:f6:e9:57:
de:a3:ae:eb:6f:3b:21:2c:a1:2e:f4:d4:a0:86:93:
af:88:f6:75:12:73:ca:95:07:f8:67:9c:97:0e:23:
75:12:66:56:12:26:08:53:f0:41:85:1b:78:36:a6:
a7:67:9c:06:df:cc:a1:c4:0c:59:73:b8:fe:99:be:
1d:5b:02:f2:b4:2c:46:fb:89:13:d3:3e:cd:44:80:
42:ca:95:6c:30:5a:10:5d:78:be:8a:09:dd:b5:16:
8c:f3:fe:7b:87:1e:26:59:60:d1:c2:da:5d:6f:57:
55:24:49:a8:00:e9:91:d4:04:69:49:f9:0e:c4:d5:
47:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F3:7E:78:CF:39:3E:45:DF:9D:CD:42:C5:30:64:34:BD:0C:A7:69
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5948d76e-c619-4073-88b0-07f79eca9d5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.50.139.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:bb:06:23:85:fc:1b:fa:09:a5:e3:df:e9:7b:27:9f:9e:53:
ef:f9:e0:1f:ae:c8:31:f7:8c:19:a0:61:eb:3f:36:2b:44:29:
42:79:58:ab:70:88:82:4a:04:4f:c3:9d:94:f1:cd:19:59:9a:
98:dd:76:f5:e6:21:9e:61:42:c1:db:38:6d:0e:28:14:6f:c4:
13:5a:c2:f7:56:be:9a:c6:31:4b:38:e8:41:91:3f:2a:7d:80:
45:d5:45:c7:af:f3:56:40:02:a8:e6:39:17:85:09:29:f7:2b:
d1:5d:1f:79:44:54:c0:6d:b9:13:b4:cd:3c:88:eb:cd:63:e3:
a0:ca:00:52:93:16:38:d3:6d:eb:1b:4c:c0:85:e9:63:9c:94:
b0:a5:a9:02:1e:db:16:b9:58:5b:4c:d7:e7:21:6a:a4:49:a5:
48:08:20:f6:35:59:07:a1:08:9d:70:21:7e:94:3c:47:99:8d:
ec:97:99:21:cb:43:07:8e:fc:89:c1:16:10:d3:57:45:26:06:
2f:af:f9:61:1a:16:75:9b:46:90:05:aa:15:d3:99:34:40:8c:
8c:87:f7:09:c9:c8:53:63:c5:30:9f:1a:3b:7f:2d:66:65:de:
72:66:9c:18:ac:cb:f7:59:10:97:72:06:cf:34:36:fd:00:bb:
7f:18:96:a8
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOc2uAAM9jGvsH/kjho0dYIq+iMcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDAyMDA5WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjNzgwNmZhMTc0MWEzYTU4ZjU3MDZiZDUyMjEzMzg0NDM4
YjRhYTUxNjM4YmFjZDcyZWFmYjFiMjEyNjI3MTZhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC7eEhnd9WF1ZYc6ZTGONZiY8r8x7tlgV8IDJsMRPBx5Q5y
w3fMInghm7ke9aluvXSwzqjB/Sg49xD4560bDZ88oD4gNQTEa/eCmNUAxhy1OcEu
D1wZ17oCzO5HKBoBm5R4liycQxDbKi6xPwTWlJfyOoxDRlHiUcDLLZvYMClzU2OA
G/bpV96jrutvOyEsoS701KCGk6+I9nUSc8qVB/hnnJcOI3USZlYSJghT8EGFG3g2
pqdnnAbfzKHEDFlzuP6Zvh1bAvK0LEb7iRPTPs1EgELKlWwwWhBdeL6KCd21Fozz
/nuHHiZZYNHC2l1vV1UkSagA6ZHUBGlJ+Q7E1UfxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrfN+eM85PkXfnc1CxTBkNL0Mp2kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzU5NDhkNzZlLWM2MTktNDA3My04OGIwLTA3Zjc5ZWNhOWQ1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjMoswDQYJKoZIhvcNAQELBQADggEBANW7BiOF/Bv6CaXj3+l7J5+eU+/5
4B+uyDH3jBmgYes/NitEKUJ5WKtwiIJKBE/DnZTxzRlZmpjddvXmIZ5hQsHbOG0O
KBRvxBNawvdWvprGMUs46EGRPyp9gEXVRcev81ZAAqjmOReFCSn3K9FdH3lEVMBt
uRO0zTyI681j46DKAFKTFjjTbesbTMCF6WOclLClqQIe2xa5WFtM1+chaqRJpUgI
IPY1WQehCJ1wIX6UPEeZjeyXmSHLQweO/InBFhDTV0UmBi+v+WEaFnWbRpAFqhXT
mTRAjIyH9wnJyFNjxTCfGjt/LWZl3nJmnBisy/dZEJdyBs80Nv0Au38Ylqg=
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:52 2026 by rpki-client