
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa
File: d4314907-a293-452a-8393-4b578c9f3645.roa (raw, json)
Hash identifier: vub50BLARnf6Ei80CpuO7FIRC5D5k6ctjL0+V1wPq/I=
Subject key identifier: 10:DD:A6:E5:04:82:04:39:CE:E5:A0:21:4F:13:4E:95:0D:26:17:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E0D0933011DB4E933EEE5F6DDD5E40F5BC65DAF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa
Signing time: Tue 04 Aug 2026 01:21:03 +0000
ROA not before: Tue 04 Aug 2026 01:21:03 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 5.60.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:0d:09:33:01:1d:b4:e9:33:ee:e5:f6:dd:d5:e4:0f:5b:c6:5d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 4 01:21:03 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=78f37e4d61d7f0f8b07313bf247e1a9d61ee190d0050624659df9b55edb9d10c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:96:92:12:c0:03:f9:fb:a8:b3:ff:71:dc:a7:
22:51:8a:74:c7:9f:4d:b2:8e:6a:6b:b7:28:8d:30:
e7:89:13:81:32:ff:90:6d:6f:23:c8:a8:8e:71:95:
66:fa:59:62:33:79:ee:0b:38:8e:38:c0:96:76:fd:
56:41:a4:21:59:c3:69:dd:e6:57:f7:26:6c:7b:c3:
5d:27:8f:e2:f3:8c:44:3e:b6:ea:5c:a4:de:60:f8:
d9:aa:3b:9a:c9:d4:31:9b:25:7f:46:33:8f:4d:96:
c1:47:67:45:71:db:79:3a:f7:a2:44:4e:ed:bb:1b:
ef:d7:a8:18:d5:94:f8:6c:49:b0:d7:a4:b3:4a:ca:
9f:03:c9:a6:c6:4b:0f:c4:6b:d6:d6:f5:b1:37:b8:
ae:31:3c:c1:bb:38:e2:0b:7a:f6:4e:c4:55:0a:df:
f8:eb:12:7c:3d:2a:45:c1:af:e4:dd:db:c6:75:aa:
33:75:e0:a9:2b:32:78:b0:f3:41:f9:c3:bf:ef:73:
d6:e0:13:92:9e:96:1b:76:87:d3:57:f3:e0:e3:f6:
65:10:10:ff:46:3a:e0:92:e4:35:79:30:4d:9d:62:
c9:9c:06:4c:1f:1c:e9:da:36:48:df:db:2f:7d:22:
7f:79:23:4b:fa:af:90:31:07:dc:c8:11:47:15:37:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:DD:A6:E5:04:82:04:39:CE:E5:A0:21:4F:13:4E:95:0D:26:17:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d4314907-a293-452a-8393-4b578c9f3645.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.60.0.0/16
Signature Algorithm: sha256WithRSAEncryption
79:02:72:d2:d9:ce:9b:ca:e4:55:47:dc:9d:33:a8:86:d5:06:
8b:70:f2:88:56:54:ab:79:8f:50:b6:5c:a4:41:dc:ed:22:d9:
af:36:1c:b2:70:f3:5c:60:a9:1f:3e:72:53:ab:02:23:8a:ce:
ff:1b:36:30:45:50:6a:45:49:a2:19:a7:5d:1b:36:3c:28:f9:
9f:4b:0d:5f:80:f5:a1:03:f2:cf:94:e1:67:59:06:52:9f:fc:
c5:30:9f:e5:17:1f:11:1b:fb:be:10:3d:e9:2c:fb:12:96:59:
e7:cc:95:eb:cc:9e:54:98:a8:c9:03:f5:0e:30:2b:a7:1e:10:
1d:8a:25:a9:4f:20:86:9f:13:f2:43:dc:6c:97:51:d2:e7:ae:
24:0e:8e:a9:6f:c8:f9:62:ea:00:fd:ea:6d:0c:47:5a:4e:9a:
8b:98:d5:46:c2:8f:13:3c:b8:74:a2:a1:08:09:1a:6c:dc:c8:
59:49:0b:8a:01:b9:ee:6d:3d:3f:60:d5:e0:d8:6a:cb:11:b6:
6f:76:02:96:4e:e0:0c:b1:fd:84:ec:c5:6c:c2:79:fe:38:16:
e2:07:47:76:c1:c1:9e:da:fd:41:8c:fb:1d:18:b7:79:35:d8:
f1:fd:8d:fe:67:b0:39:69:6b:ee:c3:13:ac:51:bf:35:7b:f7:
e2:a3:ef:8b
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUTg0JMwEdtOkz7uX23dXkD1vGXa8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA0MDEyMTAzWhcNMjYxMTAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3OGYzN2U0ZDYxZDdmMGY4YjA3MzEzYmYyNDdlMWE5ZDYx
ZWUxOTBkMDA1MDYyNDY1OWRmOWI1NWVkYjlkMTBjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCMlpISwAP5+6iz/3HcpyJRinTHn02yjmprtyiNMOeJE4Ey
/5BtbyPIqI5xlWb6WWIzee4LOI44wJZ2/VZBpCFZw2nd5lf3Jmx7w10nj+LzjEQ+
tupcpN5g+NmqO5rJ1DGbJX9GM49NlsFHZ0Vx23k696JETu27G+/XqBjVlPhsSbDX
pLNKyp8DyabGSw/Ea9bW9bE3uK4xPMG7OOILevZOxFUK3/jrEnw9KkXBr+Td28Z1
qjN14KkrMniw80H5w7/vc9bgE5Kelht2h9NX8+Dj9mUQEP9GOuCS5DV5ME2dYsmc
BkwfHOnaNkjf2y99In95I0v6r5AxB9zIEUcVNx3hAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQUEN2m5QSCBDnO5aAhTxNOlQ0mFy8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2Q0MzE0OTA3LWEyOTMtNDUyYS04MzkzLTRiNTc4YzlmMzY0NS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwAFPDANBgkqhkiG9w0BAQsFAAOCAQEAeQJy0tnOm8rkVUfcnTOohtUGi3Dy
iFZUq3mPULZcpEHc7SLZrzYcsnDzXGCpHz5yU6sCI4rO/xs2MEVQakVJohmnXRs2
PCj5n0sNX4D1oQPyz5ThZ1kGUp/8xTCf5RcfERv7vhA96Sz7EpZZ58yV68yeVJio
yQP1DjArpx4QHYolqU8ghp8T8kPcbJdR0ueuJA6OqW/I+WLqAP3qbQxHWk6ai5jV
RsKPEzy4dKKhCAkabNzIWUkLigG57m09P2DV4NhqyxG2b3YClk7gDLH9hOzFbMJ5
/jgW4gdHdsHBntr9QYz7HRi3eTXY8f2N/mewOWlr7sMTrFG/NXv34qPviw==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:23 2026 by rpki-client