
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a9489e8-8ade-4ce9-a7f5-9def391102e3.roa
File: 8a9489e8-8ade-4ce9-a7f5-9def391102e3.roa (raw, json)
Hash identifier: o2W7hMkrlPHr7MjSJ/fK3ILpqD7c1L/Gdl2BQfsinb8=
Subject key identifier: F0:2C:1B:BD:8B:8A:53:8F:71:A4:58:9B:A0:8B:C4:46:E2:E4:D5:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7C608305A1F38CCA769AC4463647791B4A3A0883
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a9489e8-8ade-4ce9-a7f5-9def391102e3.roa
Signing time: Fri 07 Aug 2026 00:21:02 +0000
ROA not before: Fri 07 Aug 2026 00:21:02 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.69.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:60:83:05:a1:f3:8c:ca:76:9a:c4:46:36:47:79:1b:4a:3a:08:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 7 00:21:02 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=b65808741fe6b86ddf3c9816b72051dcb30b6abd119d7103be4e11d53ea4e4e5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:07:86:3b:c1:0c:91:2e:f0:33:88:ca:38:
eb:a8:4e:9d:44:72:c5:37:34:7c:31:45:ce:a0:1c:
01:31:8a:36:55:b7:b3:7b:24:08:6d:39:ba:6c:27:
d5:00:7e:72:d1:ad:cb:22:fc:9d:26:de:08:5e:c1:
ce:de:86:d4:49:28:33:56:42:c1:3b:44:81:5b:dd:
fd:6a:0f:8c:d6:8b:f8:ca:15:f2:3c:99:de:81:f0:
6a:49:70:62:de:8d:8a:f4:38:fc:67:46:25:53:72:
d4:c4:86:e6:7a:7d:55:c2:78:76:87:dd:ce:81:07:
29:0d:e8:2c:51:a5:c7:10:f2:57:2a:52:62:9e:6b:
58:46:db:58:7a:4d:4d:91:32:48:00:c9:29:4e:c2:
34:7d:56:7a:98:55:69:45:83:bc:e8:27:22:35:10:
f2:49:19:8a:e8:cb:87:16:f5:99:19:ab:f5:b4:b8:
93:6a:05:3b:2f:1e:c3:46:75:bd:fc:9f:9e:32:d7:
1d:cc:4f:0c:ec:c4:8e:1a:87:0b:d4:e0:1b:51:e3:
a7:79:00:65:52:d0:e3:b8:28:a8:73:87:28:37:04:
72:e6:06:81:3f:74:27:6e:2d:b1:90:f5:4e:b7:12:
c2:c8:41:82:9f:71:8d:3f:22:56:59:fc:09:37:26:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:2C:1B:BD:8B:8A:53:8F:71:A4:58:9B:A0:8B:C4:46:E2:E4:D5:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8a9489e8-8ade-4ce9-a7f5-9def391102e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.69.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d5:6f:46:00:2c:09:02:85:17:bd:39:b6:af:03:a9:93:bb:21:
84:e4:0b:86:9c:bf:54:b2:d9:91:fe:de:15:ab:20:8e:0a:81:
3c:56:64:41:d3:43:e9:66:13:9c:e2:be:82:4f:e4:1e:a0:a8:
3b:8c:e0:70:f4:a5:6c:d8:4d:ea:db:4e:d3:c6:b3:41:0f:e4:
95:81:54:47:ec:1e:40:7e:41:7d:ba:2d:e7:17:a4:ad:3f:b9:
6e:84:e7:4e:19:5d:aa:fb:eb:82:74:cf:a6:56:7a:48:a7:ba:
34:ea:2d:55:e8:e0:70:d5:11:1f:ba:b7:6d:bd:69:9b:99:ff:
48:a4:95:11:a6:85:6b:11:e0:ac:f0:be:af:b6:14:e2:60:bc:
8b:c1:1c:65:52:84:5f:92:27:af:88:ba:1c:89:13:ba:67:ab:
67:a8:63:bb:1f:8f:5e:b3:c2:7d:5c:3e:60:86:5f:1f:7a:d3:
a5:71:9f:e3:2f:ee:a4:05:42:4d:d4:8d:f1:63:bc:bc:8e:6e:
84:a0:9a:88:66:03:92:b5:bf:dc:23:d4:3c:3d:0f:9c:44:d7:
a9:13:c5:c8:f3:66:69:29:10:46:18:7b:78:08:e3:6b:54:3d:
e0:ac:a3:24:81:e2:b0:34:2f:07:0d:72:9f:cd:73:cb:2d:48:
ce:b7:10:27
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUfGCDBaHzjMp2msRGNkd5G0o6CIMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA3MDAyMTAyWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjU4MDg3NDFmZTZiODZkZGYzYzk4MTZiNzIwNTFkY2Iz
MGI2YWJkMTE5ZDcxMDNiZTRlMTFkNTNlYTRlNGU1MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDqsQeGO8EMkS7wM4jKOOuoTp1EcsU3NHwxRc6gHAExijZV
t7N7JAhtObpsJ9UAfnLRrcsi/J0m3ghewc7ehtRJKDNWQsE7RIFb3f1qD4zWi/jK
FfI8md6B8GpJcGLejYr0OPxnRiVTctTEhuZ6fVXCeHaH3c6BBykN6CxRpccQ8lcq
UmKea1hG21h6TU2RMkgAySlOwjR9VnqYVWlFg7zoJyI1EPJJGYroy4cW9ZkZq/W0
uJNqBTsvHsNGdb38n54y1x3MTwzsxI4ahwvU4BtR46d5AGVS0OO4KKhzhyg3BHLm
BoE/dCduLbGQ9U63EsLIQYKfcY0/IlZZ/Ak3JpaFAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU8CwbvYuKU49xpFiboIvERuLk1aEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzhhOTQ4OWU4LThhZGUtNGNlOS1hN2Y1LTlkZWYzOTExMDJlMy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAQRTANBgkqhkiG9w0BAQsFAAOCAQEA1W9GACwJAoUXvTm2rwOpk7shhOQL
hpy/VLLZkf7eFasgjgqBPFZkQdND6WYTnOK+gk/kHqCoO4zgcPSlbNhN6ttO08az
QQ/klYFUR+weQH5Bfbot5xekrT+5boTnThldqvvrgnTPplZ6SKe6NOotVejgcNUR
H7q3bb1pm5n/SKSVEaaFaxHgrPC+r7YU4mC8i8EcZVKEX5Inr4i6HIkTumerZ6hj
ux+PXrPCfVw+YIZfH3rTpXGf4y/upAVCTdSN8WO8vI5uhKCaiGYDkrW/3CPUPD0P
nETXqRPFyPNmaSkQRhh7eAjja1Q94KyjJIHisDQvBw1yn81zyy1IzrcQJw==
-----END CERTIFICATE-----
Generated at Thu Sep 17 17:50:23 2026 by rpki-client