
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8447f8-92bb-4832-8e3f-00babd2deee8.roa
File: 7a8447f8-92bb-4832-8e3f-00babd2deee8.roa (raw, json)
Hash identifier: GbA/19ia70sXVXJwx0W6uyXn9RY+pg+Hn1iT4z7D9bQ=
Subject key identifier: AE:B4:D1:7E:C8:92:49:89:F4:D7:87:DA:94:C6:87:28:5D:6D:DE:98
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 323F05FBD2450681200930AD33545FC50247BA7B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8447f8-92bb-4832-8e3f-00babd2deee8.roa
Signing time: Mon 19 Oct 2026 00:51:35 +0000
ROA not before: Mon 19 Oct 2026 00:51:35 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3f:05:fb:d2:45:06:81:20:09:30:ad:33:54:5f:c5:02:47:ba:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:51:35 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=a42e094540d89ad75757d1e7966c1609169af6c8a046d58146bb671d1b49e5cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a2:7f:85:6c:03:fe:02:97:36:8f:b0:04:55:
70:3a:cf:d4:7a:af:bc:bd:22:7c:0d:18:63:bb:75:
25:3e:e8:03:5b:56:21:1f:14:82:80:64:b6:2e:35:
f0:53:16:0d:23:e5:4e:19:9f:a7:92:6e:c8:d9:67:
c2:2b:ef:2d:1b:35:b4:ee:3a:6e:a9:33:ea:f1:90:
1b:a0:e8:1f:cc:f4:23:f7:b4:c0:8e:79:cf:cb:e8:
94:22:93:d9:50:52:d6:e8:e4:1a:87:5d:c1:0b:ec:
a9:11:f8:af:87:a3:ca:d0:ca:fa:c8:2d:f1:33:df:
19:95:9e:c4:e4:63:d8:69:9f:51:20:10:c4:5f:7c:
14:2c:2a:09:d9:2d:fc:ec:4b:09:67:02:dc:4d:ed:
4f:1f:88:bd:d1:81:22:45:24:86:44:0e:c5:b1:50:
94:b4:81:3b:ce:3b:84:79:cb:9e:03:2a:d8:20:8a:
0a:31:a9:37:d9:be:e6:36:91:aa:ee:3d:41:10:ec:
78:9d:e8:3f:6b:a1:e4:73:a4:2f:ef:36:e0:ab:88:
f9:c1:b6:d2:95:a9:bd:a6:ec:a4:f9:36:fc:39:a4:
a5:f5:79:69:33:29:8e:88:12:7d:99:19:b6:b3:f9:
b8:65:05:26:42:31:5e:03:cc:7f:de:f8:16:dc:4c:
45:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B4:D1:7E:C8:92:49:89:F4:D7:87:DA:94:C6:87:28:5D:6D:DE:98
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7a8447f8-92bb-4832-8e3f-00babd2deee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:1d:c7:70:fb:fd:e8:43:af:e6:d9:11:4b:d3:52:86:17:8a:
fa:0c:61:99:53:80:02:7a:22:d9:86:81:06:66:5c:3f:d1:d0:
9d:3a:33:35:3d:82:75:71:d8:33:ae:87:df:fa:aa:52:50:af:
00:44:3d:32:ef:93:36:24:49:0d:79:a5:23:65:4a:b7:9f:d4:
32:63:23:46:6f:3d:b7:cd:4f:92:a8:c6:0d:b7:84:cc:06:d8:
d4:84:60:4d:33:2f:57:89:4a:cf:33:01:74:77:1e:2c:9f:76:
b0:a0:33:6c:4f:ee:99:41:72:9a:d0:ad:00:2b:42:16:c8:21:
a7:43:85:44:13:52:1f:18:f0:bb:72:1f:b5:56:38:d9:38:71:
9f:66:4b:8b:44:17:6e:26:e6:4d:6f:2c:04:56:f8:7f:f1:8b:
8c:d7:0c:a8:e5:7c:61:16:4b:27:84:32:b5:ec:38:8d:b6:2f:
1b:66:53:65:1a:8a:bd:37:14:ab:64:20:d4:d7:0c:80:b3:fe:
99:ec:90:71:f2:0c:7f:99:d8:99:79:6a:1e:ad:e4:e7:8a:9c:
b2:b2:b8:e9:f6:6e:36:92:1a:5f:68:1b:81:9a:7a:21:41:4a:
3f:89:3e:7c:bc:c9:b0:6f:02:5f:ae:33:95:53:18:93:4d:93:
47:a5:07:f9
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUMj8F+9JFBoEgCTCtM1RfxQJHunswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MTM1WhcNMjcwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhNDJlMDk0NTQwZDg5YWQ3NTc1N2QxZTc5NjZjMTYwOTE2
OWFmNmM4YTA0NmQ1ODE0NmJiNjcxZDFiNDllNWNmMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDvon+FbAP+Apc2j7AEVXA6z9R6r7y9InwNGGO7dSU+6ANb
ViEfFIKAZLYuNfBTFg0j5U4Zn6eSbsjZZ8Ir7y0bNbTuOm6pM+rxkBug6B/M9CP3
tMCOec/L6JQik9lQUtbo5BqHXcEL7KkR+K+Ho8rQyvrILfEz3xmVnsTkY9hpn1Eg
EMRffBQsKgnZLfzsSwlnAtxN7U8fiL3RgSJFJIZEDsWxUJS0gTvOO4R5y54DKtgg
igoxqTfZvuY2karuPUEQ7Hid6D9roeRzpC/vNuCriPnBttKVqb2m7KT5Nvw5pKX1
eWkzKY6IEn2ZGbaz+bhlBSZCMV4DzH/e+BbcTEXNAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUrrTRfsiSSYn014falMaHKF1t3pgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzdhODQ0N2Y4LTkyYmItNDgzMi04ZTNmLTAwYmFiZDJkZWVlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsMEwDQYJKoZIhvcNAQELBQADggEBAG4dx3D7/ehDr+bZEUvTUoYXivoM
YZlTgAJ6ItmGgQZmXD/R0J06MzU9gnVx2DOuh9/6qlJQrwBEPTLvkzYkSQ15pSNl
Sref1DJjI0ZvPbfNT5Koxg23hMwG2NSEYE0zL1eJSs8zAXR3HiyfdrCgM2xP7plB
cprQrQArQhbIIadDhUQTUh8Y8LtyH7VWONk4cZ9mS4tEF24m5k1vLARW+H/xi4zX
DKjlfGEWSyeEMrXsOI22LxtmU2Uair03FKtkINTXDICz/pnskHHyDH+Z2Jl5ah6t
5OeKnLKyuOn2bjaSGl9oG4GaeiFBSj+JPny8ybBvAl+uM5VTGJNNk0elB/k=
-----END CERTIFICATE-----
Generated at Mon Nov 2 21:08:02 2026 by rpki-client