
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eddf1e55-1022-49fd-bb4a-40ea0d1809aa.roa
File: eddf1e55-1022-49fd-bb4a-40ea0d1809aa.roa (raw, json)
Hash identifier: H/ewPRBX/rSzfs/d3WvHU8+twhWRSzeNIJ5mbzdhlls=
Subject key identifier: 61:B8:23:AF:54:E7:46:86:9B:57:57:C4:CB:1D:A3:36:CF:4E:BB:E6
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 280E7E838B6A0407E009D13DC616E9EEE6CA30ED
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eddf1e55-1022-49fd-bb4a-40ea0d1809aa.roa
Signing time: Sun 02 Aug 2026 01:30:43 +0000
ROA not before: Sun 02 Aug 2026 01:30:43 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 18.68.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:0e:7e:83:8b:6a:04:07:e0:09:d1:3d:c6:16:e9:ee:e6:ca:30:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 2 01:30:43 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=50a34f1fb2a97c63999f9ed28b12e8011cb2d783a85ffb2457891e4e61b79283, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:fc:e3:ef:b5:25:da:f5:a3:56:37:eb:7b:
59:1c:c9:c8:d2:35:b2:5a:d6:06:22:4a:eb:8a:16:
b9:5b:a4:da:a0:81:2d:77:04:ef:b7:ce:6f:ae:1d:
c3:5a:51:d4:27:ad:93:dd:32:49:7a:19:87:02:0a:
16:c3:58:09:b3:01:d0:72:0b:4b:15:3a:16:f7:66:
01:8e:e0:3e:9b:6b:94:94:56:3b:68:f5:b4:42:ae:
ba:84:91:51:84:ff:94:1d:ac:fb:89:10:3a:59:7b:
b8:a4:f6:9b:20:95:12:cc:d2:f4:3f:a6:17:47:2b:
64:00:fe:00:4f:ef:fc:d8:ff:51:25:ca:e6:80:07:
75:8b:c1:cf:f2:2b:4b:16:4b:43:96:ba:bd:d8:b0:
93:ba:03:61:6a:a0:3c:0c:71:d3:58:e7:24:85:be:
9a:63:7f:8f:f4:37:ad:e2:8f:09:07:e8:fc:94:28:
30:b0:4b:b9:da:85:9f:a8:4d:c0:61:c5:af:f1:95:
33:0f:d2:94:16:0b:ed:5c:29:4d:2e:83:79:64:eb:
db:1e:96:89:97:a3:82:81:a6:9d:42:c5:76:c5:2c:
cc:09:e9:65:f8:d4:62:77:49:1b:94:df:1c:c4:bc:
3d:d7:97:fb:f3:8c:ad:14:ef:2d:57:d8:50:89:ba:
f6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B8:23:AF:54:E7:46:86:9B:57:57:C4:CB:1D:A3:36:CF:4E:BB:E6
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/eddf1e55-1022-49fd-bb4a-40ea0d1809aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
18.68.220.0/24
Signature Algorithm: sha256WithRSAEncryption
48:25:a0:b3:0c:1c:30:62:86:02:aa:e7:86:66:fe:d1:ff:05:
9c:7e:3f:ec:a7:20:ea:69:3e:62:a9:2b:6a:f3:b3:c0:e4:e7:
df:b0:08:28:c0:43:c4:b7:73:31:80:2b:7c:12:a9:a0:de:cc:
33:fa:51:49:24:11:63:7c:40:e9:ce:ad:ef:11:5c:e4:3c:b8:
2a:af:48:63:46:57:af:8a:a1:d2:ef:7b:87:fc:dd:e9:01:42:
3f:37:fc:14:62:77:f3:ee:6c:3d:6e:a8:2f:aa:c2:a9:e6:9d:
b5:11:40:82:b2:0d:ba:1d:82:af:20:b7:f9:dd:59:00:d9:07:
5d:10:b4:db:07:6e:e4:32:87:72:85:e2:af:f3:33:25:2d:fc:
ba:3e:8a:b5:95:a1:94:15:cb:65:c0:24:82:d6:a4:4a:b8:be:
7a:c4:db:08:6b:2d:b2:39:dc:f6:f8:9f:a0:52:db:66:b3:06:
2b:16:86:fe:31:07:26:ec:d9:91:98:b3:f3:c0:bc:cb:54:73:
66:15:49:d5:75:a4:94:b7:c1:a2:58:07:0f:64:96:49:44:7f:
fa:ba:27:4b:d9:0a:b5:86:4b:b4:12:90:f9:3b:c3:ab:0f:83:
43:36:dd:bb:bd:df:47:4a:54:9e:ec:24:b3:e1:c8:ba:c9:1f:
98:f1:45:fc
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUKA5+g4tqBAfgCdE9xhbp7ubKMO0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYwODAyMDEzMDQzWhcNMjYxMDMxMjM1OTU5
WjB6MUkwRwYDVQQFE0A1MGEzNGYxZmIyYTk3YzYzOTk5ZjllZDI4YjEyZTgwMTFj
YjJkNzgzYTg1ZmZiMjQ1Nzg5MWU0ZTYxYjc5MjgzMS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5Cvzj77Ul2vWjVjfre1kcycjSNbJa1gYiSuuKFrlbpNqg
gS13BO+3zm+uHcNaUdQnrZPdMkl6GYcCChbDWAmzAdByC0sVOhb3ZgGO4D6ba5SU
Vjto9bRCrrqEkVGE/5QdrPuJEDpZe7ik9psglRLM0vQ/phdHK2QA/gBP7/zY/1El
yuaAB3WLwc/yK0sWS0OWur3YsJO6A2FqoDwMcdNY5ySFvppjf4/0N63ijwkH6PyU
KDCwS7nahZ+oTcBhxa/xlTMP0pQWC+1cKU0ug3lk69selomXo4KBpp1CxXbFLMwJ
6WX41GJ3SRuU3xzEvD3Xl/vzjK0U7y1X2FCJuvZXAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYbgjr1TnRoabV1fEyx2jNs9Ou+YwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyL2VkZGYxZTU1LTEwMjItNDlmZC1iYjRhLTQwZWEwZDE4MDlhYS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAASRNwwDQYJKoZIhvcNAQELBQADggEBAEgloLMMHDBihgKq54Zm/tH/BZx+
P+ynIOppPmKpK2rzs8Dk59+wCCjAQ8S3czGAK3wSqaDezDP6UUkkEWN8QOnOre8R
XOQ8uCqvSGNGV6+KodLve4f83ekBQj83/BRid/PubD1uqC+qwqnmnbURQIKyDbod
gq8gt/ndWQDZB10QtNsHbuQyh3KF4q/zMyUt/Lo+irWVoZQVy2XAJILWpEq4vnrE
2whrLbI53Pb4n6BS22azBisWhv4xBybs2ZGYs/PAvMtUc2YVSdV1pJS3waJYBw9k
lklEf/q6J0vZCrWGS7QSkPk7w6sPg0M23bu930dKVJ7sJLPhyLrJH5jxRfw=
-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:24 2026 by rpki-client