
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4883367-a421-4b51-8d94-753f59efa727.roa
File: c4883367-a421-4b51-8d94-753f59efa727.roa (raw, json)
Hash identifier: PfwLJXpQoWdViAFaDmo/9LEadg0cQ4OkJHXsFSofTjI=
Subject key identifier: DE:5C:36:1F:DC:F7:B5:7A:DD:38:9C:B6:1E:EE:99:D2:21:77:91:13
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 127E48A8101C3911C4AD370433E7BB2C10E7407E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4883367-a421-4b51-8d94-753f59efa727.roa
Signing time: Tue 11 Aug 2026 19:47:58 +0000
ROA not before: Tue 11 Aug 2026 19:47:58 +0000
ROA not after: Mon 09 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 32.200.0.0/13 maxlen: 13
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7e:48:a8:10:1c:39:11:c4:ad:37:04:33:e7:bb:2c:10:e7:40:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 11 19:47:58 2026 GMT
Not After : Nov 9 23:59:59 2026 GMT
Subject: serialNumber=543799eb5b534414ef51c0ebe4fa12f779235a3892f0cfa5763d42e604250658, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a1:db:8d:13:62:8d:46:78:46:18:98:5e:f6:
34:18:a0:b1:07:48:67:9a:cc:2b:a0:43:5c:3e:22:
a8:2b:c5:13:be:5d:1b:34:f3:44:c5:37:6f:99:87:
ae:9c:ab:3c:9d:db:b0:c0:50:d5:21:79:f2:7a:ce:
d1:5d:21:7a:29:80:77:31:a4:e9:1d:36:60:d7:02:
9d:10:46:90:e7:ed:b4:04:75:84:0d:c0:ce:60:1a:
68:1b:7f:6f:0a:d3:e3:d2:17:a3:13:a6:a5:b4:84:
d4:d4:04:b6:88:64:af:28:f6:2b:11:84:3e:f2:41:
84:48:5a:4d:3b:cb:30:27:44:bb:07:a6:2b:10:2c:
c2:3f:ae:9e:39:a1:db:20:5e:94:21:67:96:8d:37:
91:ad:a9:24:a0:57:8c:e6:dd:19:c5:c0:04:7c:bb:
cc:4d:de:7b:f0:69:04:8d:72:dd:11:68:05:56:d8:
ef:92:ae:29:aa:9d:46:ba:94:c4:b0:44:ac:ab:bb:
a9:31:2f:50:74:92:b6:27:0f:1c:d0:e8:d0:4a:6d:
79:01:33:5c:12:ab:a0:10:8a:45:50:4f:56:a6:56:
3f:1a:7f:f3:f2:3e:95:96:7e:f5:f2:40:79:a7:c0:
9b:eb:df:95:5b:34:a1:dc:6b:9a:76:ef:16:9e:38:
e7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:36:1F:DC:F7:B5:7A:DD:38:9C:B6:1E:EE:99:D2:21:77:91:13
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c4883367-a421-4b51-8d94-753f59efa727.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
32.200.0.0/13
Signature Algorithm: sha256WithRSAEncryption
b5:a5:8e:9a:08:e3:11:9e:2c:e6:c6:69:0f:c5:23:87:de:b5:
15:7a:54:ff:a6:89:53:8d:59:89:f0:71:47:5d:be:0d:07:9c:
78:68:4d:c1:0b:b1:3c:0d:ae:bc:75:84:3e:00:74:c8:9d:81:
c5:0c:8f:97:ff:ee:49:12:b1:96:1e:4d:0c:eb:b9:d7:47:81:
df:f2:8c:15:be:ce:36:29:9e:3a:a9:d9:fe:d5:22:0b:b9:f4:
c2:3b:a0:43:ea:3b:b9:a1:40:f8:5d:fe:12:40:fa:7b:29:e1:
1f:58:da:c9:b4:1e:6a:bc:5e:92:32:ac:39:cc:1e:c1:c1:02:
30:62:f9:82:cc:84:c6:35:60:fa:38:56:a1:30:ee:27:26:38:
47:85:84:94:b5:33:0a:6c:c8:c7:98:6f:1c:39:ea:76:3a:79:
21:61:52:c9:c3:b3:a3:76:6b:37:a4:0b:ae:df:f8:2e:2b:47:
65:d4:15:59:fc:d3:75:64:65:4f:1c:c4:d4:e3:42:1c:23:62:
78:d8:30:a6:d6:4b:f2:87:1f:ac:ad:64:56:45:66:33:c1:2c:
61:dd:05:95:5a:67:ff:5d:76:97:72:5f:0b:62:2a:8b:02:79:
0a:d6:7c:19:27:6e:9e:30:e0:75:4c:9a:8f:cd:66:06:25:8c:
1c:41:97:66
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUEn5IqBAcORHErTcEM+e7LBDnQH4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODExMTk0NzU4WhcNMjYxMTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A1NDM3OTllYjViNTM0NDE0ZWY1MWMwZWJlNGZhMTJmNzc5
MjM1YTM4OTJmMGNmYTU3NjNkNDJlNjA0MjUwNjU4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDPoduNE2KNRnhGGJhe9jQYoLEHSGeazCugQ1w+IqgrxRO+
XRs080TFN2+Zh66cqzyd27DAUNUhefJ6ztFdIXopgHcxpOkdNmDXAp0QRpDn7bQE
dYQNwM5gGmgbf28K0+PSF6MTpqW0hNTUBLaIZK8o9isRhD7yQYRIWk07yzAnRLsH
pisQLMI/rp45odsgXpQhZ5aNN5GtqSSgV4zm3RnFwAR8u8xN3nvwaQSNct0RaAVW
2O+SrimqnUa6lMSwRKyru6kxL1B0krYnDxzQ6NBKbXkBM1wSq6AQikVQT1amVj8a
f/PyPpWWfvXyQHmnwJvr35VbNKHca5p27xaeOOfjAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU3lw2H9z3tXrdOJy2Hu6Z0iF3kRMwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2M0ODgzMzY3LWE0MjEtNGI1MS04ZDk0LTc1M2Y1OWVmYTcyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwMgyDANBgkqhkiG9w0BAQsFAAOCAQEAtaWOmgjjEZ4s5sZpD8Ujh961FXpU
/6aJU41ZifBxR12+DQeceGhNwQuxPA2uvHWEPgB0yJ2BxQyPl//uSRKxlh5NDOu5
10eB3/KMFb7ONimeOqnZ/tUiC7n0wjugQ+o7uaFA+F3+EkD6eynhH1jaybQearxe
kjKsOcwewcECMGL5gsyExjVg+jhWoTDuJyY4R4WElLUzCmzIx5hvHDnqdjp5IWFS
ycOzo3ZrN6QLrt/4LitHZdQVWfzTdWRlTxzE1ONCHCNieNgwptZL8ocfrK1kVkVm
M8EsYd0FlVpn/112l3JfC2IqiwJ5CtZ8GSdunjDgdUyaj81mBiWMHEGXZg==
-----END CERTIFICATE-----
Generated at Tue Sep 15 12:09:54 2026 by rpki-client