
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa
File: aae2d162-8718-4e30-8f4a-57332cb846c6.roa (raw, json)
Hash identifier: DZB6KsVgTJwfZYKyLBG63CenUZecNK/vUf1g2r99Lac=
Subject key identifier: 2C:46:E8:6F:51:0E:44:33:8C:C5:FF:74:0B:59:38:AF:2C:FC:0A:3C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 608FD58A068B1A56677CC5AE44E87643FBB43595
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa
Signing time: Mon 26 Oct 2026 00:40:59 +0000
ROA not before: Mon 26 Oct 2026 00:40:59 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 45.57.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:8f:d5:8a:06:8b:1a:56:67:7c:c5:ae:44:e8:76:43:fb:b4:35:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 26 00:40:59 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=fe62c72f777044a187e5997cceda2071a88dcfeaf3b7dd5b04029f53880235a1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:16:86:1e:ff:b3:ab:77:d9:61:d2:c9:6a:f6:
26:22:4b:7b:94:b2:94:9b:6b:a2:16:d6:8c:56:e0:
4e:05:ca:72:23:b5:22:7f:72:a7:ae:6a:28:da:22:
c8:5e:e5:b0:54:77:77:a8:fb:fd:80:b0:43:33:e6:
77:fe:d7:7d:43:00:84:39:2d:19:a2:1d:b1:ef:80:
b4:74:2b:76:b7:49:8d:4a:5a:df:0c:29:ad:bd:5e:
e4:cd:8c:27:cd:0c:fe:fc:ce:45:d2:19:0d:4b:fe:
af:72:85:22:66:c9:3e:fe:11:1b:b3:a4:6d:fe:fa:
d0:6e:5c:dd:18:03:94:84:c6:0c:51:92:47:07:0f:
00:ab:69:17:67:a2:50:30:4a:9f:ae:51:04:16:d8:
7a:1e:51:ec:6b:21:5d:cc:b8:9a:7b:68:d8:ab:da:
26:d4:20:f8:5c:fd:d6:1c:8d:00:03:96:30:fd:db:
46:d3:9a:1f:52:66:ea:c6:e1:f4:d1:c4:20:2f:d8:
86:94:76:f6:43:71:ad:ba:25:f6:f3:83:fc:9a:98:
cf:74:5d:9f:29:a3:b1:cb:34:25:11:98:f7:1f:c4:
ba:3d:49:7e:bf:a3:e9:2e:01:2c:b3:b0:84:9e:31:
43:5a:fd:8f:5d:e9:e7:15:35:16:16:e5:34:3c:3e:
b3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:46:E8:6F:51:0E:44:33:8C:C5:FF:74:0B:59:38:AF:2C:FC:0A:3C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aae2d162-8718-4e30-8f4a-57332cb846c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.57.160.0/19
Signature Algorithm: sha256WithRSAEncryption
18:ff:1a:00:42:c9:c1:57:f4:2d:1e:4f:17:13:75:a3:8d:70:
4f:91:71:2a:2a:b6:91:31:63:8a:e9:96:0a:91:0b:b2:38:59:
75:57:02:75:35:97:75:b1:4a:ac:8a:6b:45:fa:4a:b6:4d:0c:
b8:92:7b:bb:eb:e0:fa:95:73:34:64:48:e3:c6:74:2e:fc:8b:
cd:ce:cd:ba:d3:3a:9a:0b:12:ff:16:7b:83:a3:91:ba:7c:c5:
70:61:c2:c1:1f:b6:6c:94:e8:b0:11:6c:9c:a3:81:44:8c:81:
74:83:21:4f:84:ec:29:eb:e6:7f:c9:ac:94:69:a1:95:fd:2b:
34:d7:3e:24:7a:60:49:9b:57:d5:3c:d3:33:8b:ff:85:ba:1e:
16:96:ef:e2:e1:79:00:4d:35:be:e1:da:15:68:77:80:d6:7d:
51:80:25:7a:b9:a9:07:f6:63:1a:08:cb:68:46:a1:aa:4a:03:
74:79:89:71:17:77:b0:41:a0:bb:5e:48:c5:ed:d7:5e:13:4a:
2e:eb:7c:7f:b6:31:6a:58:d5:0a:f7:27:f7:44:f5:e9:f4:f4:
2f:fa:ba:4f:df:33:d1:15:48:30:3f:15:d0:d0:02:9e:05:9a:
df:c9:81:9a:70:97:fe:d0:16:99:72:8e:17:e8:a6:e1:76:d4:
2e:62:b8:8e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUYI/VigaLGlZnfMWuROh2Q/u0NZUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDI2MDA0MDU5WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZTYyYzcyZjc3NzA0NGExODdlNTk5N2NjZWRhMjA3MWE4
OGRjZmVhZjNiN2RkNWIwNDAyOWY1Mzg4MDIzNWExMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDIFoYe/7Ord9lh0slq9iYiS3uUspSba6IW1oxW4E4FynIj
tSJ/cqeuaijaIshe5bBUd3eo+/2AsEMz5nf+131DAIQ5LRmiHbHvgLR0K3a3SY1K
Wt8MKa29XuTNjCfNDP78zkXSGQ1L/q9yhSJmyT7+ERuzpG3++tBuXN0YA5SExgxR
kkcHDwCraRdnolAwSp+uUQQW2HoeUexrIV3MuJp7aNir2ibUIPhc/dYcjQADljD9
20bTmh9SZurG4fTRxCAv2IaUdvZDca26Jfbzg/yamM90XZ8po7HLNCURmPcfxLo9
SX6/o+kuASyzsISeMUNa/Y9d6ecVNRYW5TQ8PrNHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULEbob1EORDOMxf90C1k4ryz8CjwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FhZTJkMTYyLTg3MTgtNGUzMC04ZjRhLTU3MzMyY2I4NDZjNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUtOaAwDQYJKoZIhvcNAQELBQADggEBABj/GgBCycFX9C0eTxcTdaONcE+R
cSoqtpExY4rplgqRC7I4WXVXAnU1l3WxSqyKa0X6SrZNDLiSe7vr4PqVczRkSOPG
dC78i83OzbrTOpoLEv8We4Ojkbp8xXBhwsEftmyU6LARbJyjgUSMgXSDIU+E7Cnr
5n/JrJRpoZX9KzTXPiR6YEmbV9U80zOL/4W6HhaW7+LheQBNNb7h2hVod4DWfVGA
JXq5qQf2YxoIy2hGoapKA3R5iXEXd7BBoLteSMXt114TSi7rfH+2MWpY1Qr3J/dE
9en09C/6uk/fM9EVSDA/FdDQAp4Fmt/JgZpwl/7QFplyjhfopuF21C5iuI4=
-----END CERTIFICATE-----
Generated at Tue Nov 3 01:26:19 2026 by rpki-client