
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa
File: ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa (raw, json)
Hash identifier: C+cjhWskf/l7XGgqhHCVscMU5EfiRF3wgyboxfJw2dg=
Subject key identifier: 7F:D5:BC:E3:79:7F:DF:E8:8B:8C:C5:04:1D:71:25:57:8F:E4:55:B1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 53D11EA3DF8D943E6BA58DB44291F6555CE9E3A9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa
Signing time: Thu 22 Oct 2026 00:41:10 +0000
ROA not before: Thu 22 Oct 2026 00:41:10 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 147.106.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:d1:1e:a3:df:8d:94:3e:6b:a5:8d:b4:42:91:f6:55:5c:e9:e3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 22 00:41:10 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=03cd4f4c50c3ba95ea8e985ff291cb9ecbe3a4f92fbf8dca4c6e5d8e04cc9f51, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8a:e4:df:bd:9c:b2:93:38:5a:b3:01:43:ac:
20:fd:c0:26:05:d5:05:92:6c:16:35:03:19:18:8d:
e7:f5:e5:03:4d:e1:84:c6:f2:c1:21:c0:40:fd:98:
51:66:30:e4:e2:fc:df:69:41:0b:ca:da:f6:b0:4c:
f7:03:22:52:94:19:1b:9c:f0:97:2b:ad:22:15:4d:
d9:58:20:fd:0b:15:c5:54:55:e1:d5:50:3d:69:fe:
dc:ba:13:14:0f:8e:09:5f:5d:73:95:43:21:2e:27:
f5:10:6e:53:ea:3b:b6:86:c5:99:28:af:41:a4:93:
13:74:e4:9d:34:48:49:12:96:48:f5:53:b6:45:f3:
f9:7f:32:43:3e:79:b9:ee:41:a8:62:6c:0d:e4:e7:
5d:0e:06:d2:17:6a:4a:b4:9f:66:1d:4c:67:62:4e:
0a:dd:93:42:43:8a:8d:84:32:cb:37:d8:dc:10:7a:
d7:1d:71:42:76:c6:a3:52:d9:85:d9:57:c3:46:b5:
03:ad:6b:fb:09:f7:fe:dc:b9:80:ab:4f:11:0b:35:
bf:a0:ac:bb:10:25:74:4f:d6:92:b1:af:dc:f8:4f:
78:e8:60:d3:87:cb:5b:42:69:05:4e:8d:7c:41:3f:
bb:67:5f:cf:0e:c3:f7:cd:7a:04:3d:35:29:d0:36:
8a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D5:BC:E3:79:7F:DF:E8:8B:8C:C5:04:1D:71:25:57:8F:E4:55:B1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ab5b8d10-5f17-4c4b-aae8-a265399770c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.106.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1f:e0:12:4f:c1:b9:e8:19:bf:e8:e9:78:b4:47:c0:4f:e4:dd:
59:90:bd:da:8b:fc:86:e3:23:0d:4a:7c:c7:80:04:9d:48:dd:
f5:6d:dd:95:e3:58:68:90:7a:94:2f:77:96:3b:83:ee:c0:b9:
d7:59:21:e4:d9:51:0f:51:09:4f:91:99:df:1f:75:4f:d2:8c:
2a:b4:24:5a:41:05:d9:5f:b9:84:0a:a6:d3:09:ad:a2:ea:ed:
cc:18:d5:2e:03:71:5e:10:3d:34:93:2f:2f:31:85:03:fb:91:
7e:ea:6f:4a:fe:1a:bc:be:53:33:1b:c9:6c:45:5c:50:ee:75:
c6:2c:f4:27:50:b4:4f:87:22:e7:ca:22:53:8f:f3:3a:d3:b2:
10:2e:e4:7f:8b:49:6d:70:95:f1:86:68:6a:93:8e:72:1d:c1:
44:d7:4a:eb:f8:20:84:9b:ce:ed:6a:81:97:98:c1:b9:a0:4b:
1d:64:a9:37:b3:1e:cf:fc:f8:39:c3:81:e1:40:20:6b:a9:ac:
24:18:2a:6a:4b:93:97:15:f8:cb:98:5d:5c:1a:b5:9e:21:23:
7c:09:0d:bc:71:28:ba:05:83:a4:3a:9e:3f:b4:be:0a:96:da:
4f:98:61:fa:c3:51:29:ce:02:74:85:d2:b1:5b:a2:13:82:a3:
41:02:03:bf
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUU9Eeo9+NlD5rpY20QpH2VVzp46kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDA0MTEwWhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0AwM2NkNGY0YzUwYzNiYTk1ZWE4ZTk4NWZmMjkxY2I5ZWNi
ZTNhNGY5MmZiZjhkY2E0YzZlNWQ4ZTA0Y2M5ZjUxMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQiuTfvZyykzhaswFDrCD9wCYF1QWSbBY1AxkYjef15QNN
4YTG8sEhwED9mFFmMOTi/N9pQQvK2vawTPcDIlKUGRuc8JcrrSIVTdlYIP0LFcVU
VeHVUD1p/ty6ExQPjglfXXOVQyEuJ/UQblPqO7aGxZkor0GkkxN05J00SEkSlkj1
U7ZF8/l/MkM+ebnuQahibA3k510OBtIXakq0n2YdTGdiTgrdk0JDio2EMss32NwQ
etcdcUJ2xqNS2YXZV8NGtQOta/sJ9/7cuYCrTxELNb+grLsQJXRP1pKxr9z4T3jo
YNOHy1tCaQVOjXxBP7tnX88Ow/fNegQ9NSnQNoqZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUf9W843l/3+iLjMUEHXElV4/kVbEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2FiNWI4ZDEwLTVmMTctNGM0Yi1hYWU4LWEyNjUzOTk3NzBjNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAaTasAwDQYJKoZIhvcNAQELBQADggEBAB/gEk/BuegZv+jpeLRHwE/k3VmQ
vdqL/IbjIw1KfMeABJ1I3fVt3ZXjWGiQepQvd5Y7g+7AuddZIeTZUQ9RCU+Rmd8f
dU/SjCq0JFpBBdlfuYQKptMJraLq7cwY1S4DcV4QPTSTLy8xhQP7kX7qb0r+Gry+
UzMbyWxFXFDudcYs9CdQtE+HIufKIlOP8zrTshAu5H+LSW1wlfGGaGqTjnIdwUTX
Suv4IISbzu1qgZeYwbmgSx1kqTezHs/8+DnDgeFAIGuprCQYKmpLk5cV+MuYXVwa
tZ4hI3wJDbxxKLoFg6Q6nj+0vgqW2k+YYfrDUSnOAnSF0rFbohOCo0ECA78=
-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:08 2026 by rpki-client