
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
File: 5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa (raw, json)
Hash identifier: CREO0rdtiqYKY47PfrOGmpaSOEuPtGRQi9ZEOUwqWoM=
Subject key identifier: 30:A5:D6:3C:0B:F0:F7:08:72:B2:0D:E3:FB:91:D9:8C:6D:53:AF:D9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 36884FD4981ED7BCCE5B4BDC3EADEC47EF68A7D9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
Signing time: Thu 30 Jul 2026 00:30:45 +0000
ROA not before: Thu 30 Jul 2026 00:30:45 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.91.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:88:4f:d4:98:1e:d7:bc:ce:5b:4b:dc:3e:ad:ec:47:ef:68:a7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 30 00:30:45 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=54de5b8f0f0d50a94ee5f1faa1fc48eba8371892c384c4109f5862db64150ffd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8c:ba:16:f2:e2:22:ff:c1:00:52:16:92:77:
13:f7:19:0b:74:61:92:8c:74:95:61:25:12:9c:fa:
65:bb:67:ae:7f:bc:cb:66:4d:82:3a:0e:25:7e:09:
92:a9:07:f3:39:bd:9d:98:bf:98:62:e6:93:b5:ad:
50:db:11:c7:8c:26:12:72:bb:1e:41:d5:19:0a:8f:
3e:a0:2f:0a:08:a9:8f:c8:16:ee:9f:2e:5c:a1:86:
91:45:cb:41:36:2e:0a:a7:1e:52:81:2d:3a:11:09:
46:ae:ee:39:22:71:8b:80:67:77:5a:fe:97:07:a9:
72:32:01:97:c6:38:ae:d7:1a:9a:a8:03:60:d5:e5:
61:36:e5:33:4b:3d:9e:c9:2f:64:f3:21:81:1e:d4:
fb:1f:2b:2b:2d:22:68:48:61:eb:67:6d:82:2a:62:
82:22:00:4d:f4:45:2d:7a:bd:46:1b:ce:76:0d:80:
69:1c:85:30:6c:e7:76:5c:7a:41:8f:6d:32:3d:20:
f6:ca:e7:29:99:61:25:d0:2c:b9:6e:23:5b:6f:27:
b3:fc:a4:38:ba:87:7f:c9:db:59:a3:fb:e1:80:a9:
19:f2:8e:cd:64:f1:9f:f4:1c:bc:ab:f8:83:57:39:
43:b7:db:0c:8a:bc:c6:48:59:41:4d:06:38:cb:ee:
13:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A5:D6:3C:0B:F0:F7:08:72:B2:0D:E3:FB:91:D9:8C:6D:53:AF:D9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b5164b9-1b5d-4ea1-874d-675859cc9f80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.91.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:a5:b4:49:b5:b7:5d:d1:71:8e:c7:53:4a:b4:a9:96:4e:b5:
52:0f:9e:dc:aa:6a:3f:dc:cd:20:50:ba:d1:48:6b:9b:70:a3:
39:8d:d8:6c:84:51:73:b5:8d:dd:43:c7:09:2a:10:90:b8:c2:
75:fb:0f:2e:1a:a2:1f:76:b7:2a:96:9e:2c:16:86:31:f6:39:
dd:a8:d7:37:22:6d:30:52:65:6f:dd:51:98:fd:d7:27:1f:a4:
64:c5:f1:ca:b2:9b:68:9c:4a:3f:dd:11:bf:f4:d8:d7:5d:a1:
cd:21:b8:d3:ee:13:69:60:69:c5:bf:13:54:d4:ef:1d:0a:89:
9b:02:17:f9:37:09:92:8c:cf:70:6f:7e:20:43:84:58:d5:35:
7e:e7:46:b0:8c:ae:88:03:6d:0e:98:8c:a8:db:9e:52:d5:02:
05:82:96:df:d8:10:ae:eb:78:2f:9b:95:3f:a7:af:93:18:ff:
f7:38:e3:c7:dc:2c:12:a5:8c:ab:09:cc:a0:6c:cf:e4:91:e1:
a8:aa:76:5c:ef:19:4d:f4:70:1e:f3:a6:da:e3:67:7c:ee:f1:
d2:28:3e:52:81:f4:7c:ff:a7:b1:6c:76:34:de:70:5f:3e:53:
2e:e6:55:fe:99:0f:77:01:72:fa:47:2c:ef:45:e2:f9:30:15:
45:46:41:c3
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNohP1Jge17zOW0vcPq3sR+9op9kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMwMDAzMDQ1WhcNMjYxMDI4MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NGRlNWI4ZjBmMGQ1MGE5NGVlNWYxZmFhMWZjNDhlYmE4
MzcxODkyYzM4NGM0MTA5ZjU4NjJkYjY0MTUwZmZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDYjLoW8uIi/8EAUhaSdxP3GQt0YZKMdJVhJRKc+mW7Z65/
vMtmTYI6DiV+CZKpB/M5vZ2Yv5hi5pO1rVDbEceMJhJyux5B1RkKjz6gLwoIqY/I
Fu6fLlyhhpFFy0E2LgqnHlKBLToRCUau7jkicYuAZ3da/pcHqXIyAZfGOK7XGpqo
A2DV5WE25TNLPZ7JL2TzIYEe1PsfKystImhIYetnbYIqYoIiAE30RS16vUYbznYN
gGkchTBs53ZcekGPbTI9IPbK5ymZYSXQLLluI1tvJ7P8pDi6h3/J21mj++GAqRny
js1k8Z/0HLyr+INXOUO32wyKvMZIWUFNBjjL7hMxAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUMKXWPAvw9whysg3j+5HZjG1Tr9kwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzViNTE2NGI5LTFiNWQtNGVhMS04NzRkLTY3NTg1OWNjOWY4MC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAXWwUwDQYJKoZIhvcNAQELBQADggEBAESltEm1t13RcY7HU0q0qZZOtVIP
ntyqaj/czSBQutFIa5twozmN2GyEUXO1jd1DxwkqEJC4wnX7Dy4aoh92tyqWniwW
hjH2Od2o1zcibTBSZW/dUZj91ycfpGTF8cqym2icSj/dEb/02Nddoc0huNPuE2lg
acW/E1TU7x0KiZsCF/k3CZKMz3BvfiBDhFjVNX7nRrCMrogDbQ6YjKjbnlLVAgWC
lt/YEK7reC+blT+nr5MY//c448fcLBKljKsJzKBsz+SR4aiqdlzvGU30cB7zptrj
Z3zu8dIoPlKB9Hz/p7FsdjTecF8+Uy7mVf6ZD3cBcvpHLO9F4vkwFUVGQcM=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:54 2026 by rpki-client