
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8e92854-ce1a-4aaa-b4fa-0bfe159105c0.roa
File: a8e92854-ce1a-4aaa-b4fa-0bfe159105c0.roa (raw, json)
Hash identifier: UlEMyAmzDn9fys0/cerz8BAhDrSpOMsFnXOT+ZcjbCo=
Subject key identifier: 0F:A7:00:8C:E8:CA:BC:B6:30:6E:87:80:05:1B:16:E6:BC:D4:5B:9C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6421F1B8A2FF99C6E577AA59BF00CBCDB4DD377E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8e92854-ce1a-4aaa-b4fa-0bfe159105c0.roa
Signing time: Fri 31 Jul 2026 01:21:58 +0000
ROA not before: Fri 31 Jul 2026 01:21:58 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 16 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:21:f1:b8:a2:ff:99:c6:e5:77:aa:59:bf:00:cb:cd:b4:dd:37:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 01:21:58 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=db0df1f1c2b583a44dcff91be575cc9df953960c018e5ee1bfacae32c593a54a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:b8:45:2d:df:6d:f4:e2:c7:a4:e5:88:56:
51:51:61:3a:f1:ea:a3:92:5c:fa:e0:86:49:65:84:
ef:8f:aa:56:03:54:94:66:06:26:eb:3a:7c:dc:23:
53:6a:25:25:7b:17:46:e4:35:9d:d6:d0:5e:39:e3:
0f:7d:14:8f:1c:b0:98:9f:52:4e:30:d1:90:ae:dd:
c6:f1:6a:27:8f:f6:65:d3:d5:d2:18:01:1e:20:13:
32:9c:5d:b8:7e:de:d0:61:ba:70:b2:03:68:58:e3:
07:bf:20:e7:f0:75:b0:ab:b3:72:8c:c0:23:0f:89:
65:ab:74:57:59:dd:f4:3f:d7:e2:71:13:88:ee:67:
b4:b1:e2:7d:0a:3f:e1:e8:00:ff:f9:21:46:27:73:
e0:e0:c3:44:c3:fc:c3:ba:0e:05:e5:bb:19:ea:cf:
69:d1:33:11:b5:09:be:1e:3d:4e:a7:85:20:87:d7:
a5:a4:e3:6d:de:69:1f:75:8d:7a:22:91:f5:9c:88:
88:98:e1:de:2f:41:3e:95:f0:78:1a:23:9f:d5:92:
43:4c:23:48:a6:b5:70:c5:85:7e:49:0c:a2:77:50:
98:7e:45:1b:e9:55:10:f7:25:41:83:3a:c3:88:c2:
82:2b:e6:08:13:ab:09:fd:ed:6a:9e:b3:c1:8e:fe:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A7:00:8C:E8:CA:BC:B6:30:6E:87:80:05:1B:16:E6:BC:D4:5B:9C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a8e92854-ce1a-4aaa-b4fa-0bfe159105c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.208.0/20
Signature Algorithm: sha256WithRSAEncryption
9f:24:e4:ca:51:4d:8e:92:e6:05:92:ee:35:f9:93:71:fe:a4:
0f:4b:6d:46:9e:3a:8e:8e:e1:da:a7:76:99:1d:c4:fb:f6:49:
ec:82:51:f0:66:d3:b2:41:b0:e2:05:1d:77:a0:21:57:1c:4a:
be:ab:d0:51:d7:47:14:3c:6d:80:51:66:88:84:b8:4a:df:0b:
ce:7c:ad:f8:24:1c:4f:55:c9:1f:36:a4:f8:69:ae:8d:ca:f9:
a0:b5:af:db:8f:93:c4:5d:4c:d5:ed:dd:d9:f8:c2:33:f1:f4:
f6:5b:3a:08:d4:03:88:0b:aa:76:18:d6:2e:ec:94:8c:af:5b:
5c:b6:ed:51:c0:42:47:c2:8f:cd:7f:30:b9:5b:82:01:86:de:
af:4e:fe:1d:3f:6a:cc:55:ae:bc:dd:e0:67:6e:09:6c:66:39:
46:80:b9:64:55:50:ee:bc:d1:81:8d:48:ca:8d:f4:4e:ba:df:
40:06:d8:e8:67:5d:fb:a0:9d:63:5a:67:6c:94:4f:99:13:19:
20:f1:d8:12:1e:24:88:eb:f3:1b:73:08:f3:9b:40:e4:c6:9a:
d2:d3:38:8e:e8:bb:b9:08:6b:4e:45:f3:a7:31:09:a6:74:cf:
5b:47:bc:de:ea:12:20:87:7a:d6:12:4b:72:16:22:fd:36:10:
2e:51:fc:3d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZCHxuKL/mcbld6pZvwDLzbTdN34wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDEyMTU4WhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0BkYjBkZjFmMWMyYjU4M2E0NGRjZmY5MWJlNTc1Y2M5ZGY5
NTM5NjBjMDE4ZTVlZTFiZmFjYWUzMmM1OTNhNTRhMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/IbhFLd9t9OLHpOWIVlFRYTrx6qOSXPrghkllhO+PqlYD
VJRmBibrOnzcI1NqJSV7F0bkNZ3W0F454w99FI8csJifUk4w0ZCu3cbxaieP9mXT
1dIYAR4gEzKcXbh+3tBhunCyA2hY4we/IOfwdbCrs3KMwCMPiWWrdFdZ3fQ/1+Jx
E4juZ7Sx4n0KP+HoAP/5IUYnc+Dgw0TD/MO6DgXluxnqz2nRMxG1Cb4ePU6nhSCH
16Wk423eaR91jXoikfWciIiY4d4vQT6V8HgaI5/VkkNMI0imtXDFhX5JDKJ3UJh+
RRvpVRD3JUGDOsOIwoIr5ggTqwn97Wqes8GO/oMZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUD6cAjOjKvLYwboeABRsW5rzUW5wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2E4ZTkyODU0LWNlMWEtNGFhYS1iNGZhLTBiZmUxNTkxMDVjMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBASCsNAwDQYJKoZIhvcNAQELBQADggEBAJ8k5MpRTY6S5gWS7jX5k3H+pA9L
bUaeOo6O4dqndpkdxPv2SeyCUfBm07JBsOIFHXegIVccSr6r0FHXRxQ8bYBRZoiE
uErfC858rfgkHE9VyR82pPhpro3K+aC1r9uPk8RdTNXt3dn4wjPx9PZbOgjUA4gL
qnYY1i7slIyvW1y27VHAQkfCj81/MLlbggGG3q9O/h0/asxVrrzd4GduCWxmOUaA
uWRVUO680YGNSMqN9E6630AG2OhnXfugnWNaZ2yUT5kTGSDx2BIeJIjr8xtzCPOb
QOTGmtLTOI7ou7kIa05F86cxCaZ0z1tHvN7qEiCHetYSS3IWIv02EC5R/D0=
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:43:58 2026 by rpki-client