
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa
File: 843bf734-db6e-432f-a611-4c86a79225b5.roa (raw, json)
Hash identifier: oMhw5XZ1B/XEeEjcUY74i7PGjRCGQeWfoXl/3rMgp8k=
Subject key identifier: AB:6F:2B:70:0F:57:BA:1A:EB:58:D1:E8:AD:02:B4:6C:52:F4:55:BD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0CA5B3B5AD6BFB7C227F2F5CE8CF469D4E89F358
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa
Signing time: Tue 04 Aug 2026 02:31:50 +0000
ROA not before: Tue 04 Aug 2026 02:31:50 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.24.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:a5:b3:b5:ad:6b:fb:7c:22:7f:2f:5c:e8:cf:46:9d:4e:89:f3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 02:31:50 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=b27366b4e76e362d02677549be9a75dd5e0ab1f04189486374047a408a5a0191, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:c9:1e:ec:40:bd:f0:95:1e:b0:c1:00:9b:
e8:f8:21:81:b1:02:43:ca:9c:b2:1d:f6:6f:1e:0f:
03:35:12:f6:df:0b:3e:78:fd:b0:ff:70:42:83:c0:
d9:5e:86:1e:fe:23:dc:dd:b8:3f:40:16:45:74:5e:
06:b5:68:ba:0a:02:00:b1:42:c7:9f:88:64:73:be:
7a:4a:8d:e7:69:d5:d2:91:50:56:f7:9d:67:31:91:
46:e0:2a:b2:96:fc:e2:9a:b8:ca:62:a5:b6:b4:ee:
83:30:71:a2:95:13:b4:1d:aa:35:23:79:c5:22:05:
1f:a5:d1:10:88:c5:d6:44:9f:34:a4:c9:38:59:a8:
6d:bd:c4:e2:df:fd:f5:64:1c:af:c1:33:be:ba:6c:
d6:c9:19:61:28:eb:2b:53:3f:78:75:d6:f3:ce:53:
f4:14:d0:ba:e6:39:0d:c1:76:cb:96:5e:fb:aa:6a:
30:7d:1b:9c:95:4e:d1:f5:14:b4:11:13:fc:fc:19:
3e:5b:8b:11:fe:07:23:69:bb:02:ad:4c:7a:f0:e6:
2b:9f:9a:d4:4b:f4:7c:e3:4d:9d:fc:7f:f0:12:08:
de:f6:0f:72:5b:9d:69:77:1f:5a:4c:7e:ac:ba:15:
99:55:a1:cc:0d:85:8f:98:87:30:a9:3e:c2:34:33:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:2B:70:0F:57:BA:1A:EB:58:D1:E8:AD:02:B4:6C:52:F4:55:BD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/843bf734-db6e-432f-a611-4c86a79225b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.24.30.0/23
Signature Algorithm: sha256WithRSAEncryption
77:09:ee:5f:bb:49:35:a0:ff:28:91:c8:30:f4:03:10:ef:b7:
56:53:80:6c:a5:e3:31:0d:42:83:74:d4:46:c9:80:32:e7:60:
cb:a5:3f:68:aa:39:87:d5:ec:db:74:9d:c1:6c:3e:2a:1d:4e:
5f:19:ee:ae:4d:7f:ea:fa:06:46:25:5d:80:38:61:55:cc:c3:
59:ca:76:9f:74:0a:10:ba:74:f4:16:07:5b:98:08:a4:b4:eb:
48:8c:12:5b:f8:1e:d5:5c:ff:bf:22:08:6b:79:b6:f7:cc:37:
51:e3:da:fe:5b:e9:99:8a:b7:61:32:8b:eb:7f:bc:72:4c:99:
9d:5f:c5:e1:09:15:dc:90:14:db:b0:61:a0:51:69:27:74:64:
20:71:63:6b:ce:6b:c3:4a:6f:2d:e2:e3:be:31:c9:3e:c3:0c:
f1:0b:88:8a:26:f8:43:38:7a:2f:54:39:7c:1a:a7:60:20:20:
38:64:47:f9:be:dd:93:8c:cc:9d:e5:60:b2:e3:1a:68:68:36:
d7:d1:49:13:ad:f6:81:1f:b5:c1:c2:dd:f2:22:49:cb:44:89:
69:64:ea:13:59:ca:11:ca:c3:08:e5:18:b2:d5:1d:1c:8b:61:
96:fd:8d:a7:c4:09:82:dc:c0:ff:72:11:d8:e1:cd:d8:c4:0f:
a3:49:30:57
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDKWzta1r+3wify9c6M9GnU6J81gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDIzMTUwWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0BiMjczNjZiNGU3NmUzNjJkMDI2Nzc1NDliZTlhNzVkZDVl
MGFiMWYwNDE4OTQ4NjM3NDA0N2E0MDhhNWEwMTkxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpmske7EC98JUesMEAm+j4IYGxAkPKnLId9m8eDwM1Evbf
Cz54/bD/cEKDwNlehh7+I9zduD9AFkV0Xga1aLoKAgCxQsefiGRzvnpKjedp1dKR
UFb3nWcxkUbgKrKW/OKauMpipba07oMwcaKVE7QdqjUjecUiBR+l0RCIxdZEnzSk
yThZqG29xOLf/fVkHK/BM766bNbJGWEo6ytTP3h11vPOU/QU0LrmOQ3BdsuWXvuq
ajB9G5yVTtH1FLQRE/z8GT5bixH+ByNpuwKtTHrw5iufmtRL9HzjTZ38f/ASCN72
D3JbnWl3H1pMfqy6FZlVocwNhY+YhzCpPsI0M48jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUq28rcA9XuhrrWNHorQK0bFL0Vb0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzg0M2JmNzM0LWRiNmUtNDMyZi1hNjExLTRjODZhNzkyMjViNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEQGB4wDQYJKoZIhvcNAQELBQADggEBAHcJ7l+7STWg/yiRyDD0AxDvt1ZT
gGyl4zENQoN01EbJgDLnYMulP2iqOYfV7Nt0ncFsPiodTl8Z7q5Nf+r6BkYlXYA4
YVXMw1nKdp90ChC6dPQWB1uYCKS060iMElv4HtVc/78iCGt5tvfMN1Hj2v5b6ZmK
t2Eyi+t/vHJMmZ1fxeEJFdyQFNuwYaBRaSd0ZCBxY2vOa8NKby3i474xyT7DDPEL
iIom+EM4ei9UOXwap2AgIDhkR/m+3ZOMzJ3lYLLjGmhoNtfRSROt9oEftcHC3fIi
SctEiWlk6hNZyhHKwwjlGLLVHRyLYZb9jafECYLcwP9yEdjhzdjED6NJMFc=
-----END CERTIFICATE-----
Generated at Tue Sep 15 13:26:45 2026 by rpki-client