
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e769021-f0e7-45bf-b76f-185d12b59418.roa
File: 6e769021-f0e7-45bf-b76f-185d12b59418.roa (raw, json)
Hash identifier: 7tUEzbRCjYn5osrkNsIB+f4FyuhDtqu1Q5UV9F4Fa+g=
Subject key identifier: AD:02:17:05:2C:E5:E5:B5:F4:E1:CE:D0:6E:AB:46:71:8B:3B:C5:2B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 43726CBDFF3EE79D9FA3696B4EC9C94E6284B8C4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e769021-f0e7-45bf-b76f-185d12b59418.roa
Signing time: Tue 25 Aug 2026 18:13:23 +0000
ROA not before: Tue 25 Aug 2026 18:13:23 +0000
ROA not after: Mon 23 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.12.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:72:6c:bd:ff:3e:e7:9d:9f:a3:69:6b:4e:c9:c9:4e:62:84:b8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 25 18:13:23 2026 GMT
Not After : Nov 23 23:59:59 2026 GMT
Subject: serialNumber=523e5bfc99d5cd600b72e44090596b54a788d1478b354a44555b9fd3feb1dfdf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:61:d5:97:a8:4e:59:eb:13:ee:1c:ed:07:
e9:be:5d:e5:89:14:46:ad:35:f6:5b:b9:2a:37:56:
64:69:cc:f6:15:16:52:ce:ff:f2:68:bf:0b:5a:ee:
58:d1:2a:b4:c3:8c:04:8f:63:22:d6:c3:92:c5:e3:
74:2a:8e:9a:5c:01:d4:e0:78:c3:de:a6:f8:9b:39:
f6:b9:1c:d8:bd:28:02:74:68:17:74:3b:93:a0:ad:
67:02:07:aa:80:de:1b:ed:04:48:a7:78:ca:00:62:
a5:70:72:18:6d:dc:ad:ee:90:88:0d:d3:50:2c:77:
ac:01:c3:0f:3a:ca:12:d2:43:d0:5c:64:f2:47:6b:
0a:fe:2e:4f:63:d9:db:ec:d5:3c:14:f8:08:0a:06:
14:84:21:c9:f1:aa:16:6a:5c:71:09:c2:12:77:18:
9b:8c:dd:b7:8f:90:e9:a3:50:4e:52:82:99:0a:1b:
81:c2:b2:ec:b2:3a:ca:97:c9:50:4c:86:fd:e7:3f:
3b:c5:03:be:42:f9:e7:e7:52:83:40:23:ac:2e:db:
28:05:bf:dd:5b:c6:6d:51:5a:07:b7:fe:aa:72:77:
f6:e3:b8:b9:a9:df:39:2c:d8:d6:ef:72:e6:4d:8e:
83:a8:8b:39:53:fa:04:d4:77:3c:9f:ac:38:8c:4e:
1c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:17:05:2C:E5:E5:B5:F4:E1:CE:D0:6E:AB:46:71:8B:3B:C5:2B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6e769021-f0e7-45bf-b76f-185d12b59418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.12.0.0/16
Signature Algorithm: sha256WithRSAEncryption
66:c0:c8:f0:17:1f:07:12:1b:47:7b:2c:c6:0d:8a:3d:5f:14:
d8:4a:c6:f4:31:a6:79:d4:84:84:5f:35:ca:cb:dc:fd:41:0d:
06:8f:7c:41:53:d2:3e:09:4c:c0:cc:c2:b4:68:49:53:87:0e:
76:24:8b:2a:96:96:88:1b:8d:1a:57:62:17:b5:a5:77:e8:cc:
f7:49:02:76:05:a0:20:a3:d9:13:b6:50:57:c0:2a:7b:7e:e2:
a8:2f:65:96:d4:6e:ec:3e:a3:cd:d1:72:7e:b5:45:3d:2a:7b:
3e:0e:3d:f7:45:c0:b2:1c:e4:15:be:ac:47:ff:60:7d:09:3d:
3e:9f:55:2b:fa:bf:e7:39:95:57:5a:02:47:03:b6:c5:5f:a2:
14:ce:5e:fd:dc:44:bc:90:de:0e:2f:9e:a9:9a:37:38:e8:c3:
2c:06:b7:53:b6:3b:99:35:3c:2b:fa:14:b9:63:6c:94:3b:b3:
c3:53:d5:80:a0:44:70:b3:b0:2b:ac:7b:a6:6a:e8:a8:bf:ff:
60:60:ca:67:c6:6b:c5:c9:67:a1:23:9a:d3:96:49:1c:43:e1:
1e:86:58:41:8e:b7:3d:c7:b5:95:69:35:d4:7c:7f:fe:d9:28:
24:26:69:d2:59:71:cc:24:f4:c2:d8:c5:5a:c9:63:2f:ec:8c:
04:0c:24:39
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUQ3Jsvf8+552fo2lrTsnJTmKEuMQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODI1MTgxMzIzWhcNMjYxMTIzMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MjNlNWJmYzk5ZDVjZDYwMGI3MmU0NDA5MDU5NmI1NGE3
ODhkMTQ3OGIzNTRhNDQ1NTViOWZkM2ZlYjFkZmRmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCwtmHVl6hOWesT7hztB+m+XeWJFEatNfZbuSo3VmRpzPYV
FlLO//Jovwta7ljRKrTDjASPYyLWw5LF43QqjppcAdTgeMPepvibOfa5HNi9KAJ0
aBd0O5OgrWcCB6qA3hvtBEineMoAYqVwchht3K3ukIgN01Asd6wBww86yhLSQ9Bc
ZPJHawr+Lk9j2dvs1TwU+AgKBhSEIcnxqhZqXHEJwhJ3GJuM3bePkOmjUE5SgpkK
G4HCsuyyOsqXyVBMhv3nPzvFA75C+efnUoNAI6wu2ygFv91bxm1RWge3/qpyd/bj
uLmp3zks2NbvcuZNjoOoizlT+gTUdzyfrDiMThwrAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUrQIXBSzl5bX04c7QbqtGcYs7xSswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzZlNzY5MDIxLWYwZTctNDViZi1iNzZmLTE4NWQxMmI1OTQxOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwA2DDANBgkqhkiG9w0BAQsFAAOCAQEAZsDI8BcfBxIbR3ssxg2KPV8U2ErG
9DGmedSEhF81ysvc/UENBo98QVPSPglMwMzCtGhJU4cOdiSLKpaWiBuNGldiF7Wl
d+jM90kCdgWgIKPZE7ZQV8Aqe37iqC9lltRu7D6jzdFyfrVFPSp7Pg4990XAshzk
Fb6sR/9gfQk9Pp9VK/q/5zmVV1oCRwO2xV+iFM5e/dxEvJDeDi+eqZo3OOjDLAa3
U7Y7mTU8K/oUuWNslDuzw1PVgKBEcLOwK6x7pmroqL//YGDKZ8ZrxclnoSOa05ZJ
HEPhHoZYQY63Pce1lWk11Hx//tkoJCZp0llxzCT0wtjFWsljL+yMBAwkOQ==
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:18:08 2026 by rpki-client