
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa
File: 2d54f54a-5931-4b42-adfd-9815eaa1c425.roa (raw, json)
Hash identifier: eLxtKYgAx+772IyKjhnl9UHXX+W5Klx6W3YaqhkYFf4=
Subject key identifier: D8:74:B9:9A:F9:50:9D:18:EE:3C:79:20:81:D4:78:51:B9:8C:EA:5F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 034CD965BCE4D27905A69B26E76026CD99980ACD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa
Signing time: Mon 04 May 2026 00:41:27 +0000
ROA not before: Mon 04 May 2026 00:41:27 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.128.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4c:d9:65:bc:e4:d2:79:05:a6:9b:26:e7:60:26:cd:99:98:0a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:41:27 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=743a14b1c8efc02d9272f000f0430e51bd9256433583a452cf79a8a147f56fcd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:87:ea:3d:76:d3:63:e2:b4:f6:94:ff:56:ca:
1b:b6:de:f9:69:f5:45:7d:fc:f4:5b:54:90:d1:b0:
15:02:5b:e6:51:47:6e:95:c9:1f:65:3d:24:c0:33:
4f:19:09:04:08:24:2e:e3:42:ac:f9:8e:84:da:df:
67:e4:2b:00:5b:ee:e8:70:2c:94:f4:2a:e9:de:4a:
b6:10:29:a5:58:f8:8c:6d:34:a3:d0:31:a6:b0:69:
c6:db:ff:a2:37:47:fd:5f:3b:9b:c9:16:29:3d:30:
ea:c4:e7:d3:5e:61:31:e2:76:2f:0a:16:d4:17:79:
7e:ab:a6:2e:4f:6e:75:95:ab:3f:38:26:53:d0:c1:
57:25:8d:a2:14:e9:e2:99:ab:de:ca:f0:af:0f:ef:
d4:f8:71:08:b8:68:71:d2:25:91:2f:0c:e7:53:63:
aa:3f:33:2c:cb:ee:ee:22:d5:6f:90:31:d9:e7:12:
7a:f3:a2:c7:c6:a0:1a:7c:5c:bb:71:eb:9e:85:2c:
1d:23:7e:af:dc:0f:98:17:ea:c5:04:3e:00:73:b7:
13:91:48:79:4e:68:6d:34:18:bd:11:45:6e:ce:cb:
fd:8b:40:f6:5e:39:cc:e2:4e:e0:8f:18:86:e9:ea:
48:2f:42:67:c6:ce:3a:3d:a4:be:c5:29:5e:a4:f2:
43:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:B9:9A:F9:50:9D:18:EE:3C:79:20:81:D4:78:51:B9:8C:EA:5F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2d54f54a-5931-4b42-adfd-9815eaa1c425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.192.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:41:af:cc:3c:01:d0:24:d8:0c:0d:67:a6:eb:09:fd:56:be:
6b:ba:bd:b7:a2:cc:ed:8b:74:37:7a:d2:3c:03:b1:cc:a1:bc:
6d:98:35:3e:b7:48:f6:ef:4a:8f:0b:d4:5b:63:78:73:e9:3a:
14:b5:59:39:7e:a1:03:8e:33:f4:ec:8d:1d:d1:6d:a2:85:7f:
2b:5b:bb:e2:69:89:1e:6e:95:a3:27:be:dc:19:50:ee:40:f3:
77:00:b0:54:fb:67:73:d2:cd:af:59:a0:3c:e5:a7:46:90:b9:
3e:7c:0d:bd:ec:a6:34:c5:86:2c:85:8d:d0:4b:9f:a6:6f:32:
82:3f:b5:82:d8:c1:80:bd:ec:bf:e0:5c:90:d2:87:3f:79:49:
5f:ed:ba:8b:b1:47:a9:ce:e7:a8:48:e7:c7:bb:cb:7c:0c:a3:
86:c6:95:7f:f3:c4:cd:53:ed:59:bb:ab:c1:93:26:b1:9e:80:
91:54:62:5d:24:95:85:fc:86:04:41:29:1f:95:a5:eb:2a:ea:
64:61:c1:5e:a6:89:cc:91:e8:63:1d:d3:31:5c:78:f0:ad:16:
44:6a:f6:37:6d:c7:2e:14:9c:75:81:54:b7:2d:43:a7:1b:0b:
f0:18:f2:ca:16:31:f8:81:39:25:36:7d:c5:76:74:40:b6:08:
bf:a2:57:4f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUA0zZZbzk0nkFppsm52AmzZmYCs0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDA0MTI3WhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0A3NDNhMTRiMWM4ZWZjMDJkOTI3MmYwMDBmMDQzMGU1MWJk
OTI1NjQzMzU4M2E0NTJjZjc5YThhMTQ3ZjU2ZmNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCzh+o9dtNj4rT2lP9Wyhu23vlp9UV9/PRbVJDRsBUCW+ZR
R26VyR9lPSTAM08ZCQQIJC7jQqz5joTa32fkKwBb7uhwLJT0KuneSrYQKaVY+Ixt
NKPQMaawacbb/6I3R/1fO5vJFik9MOrE59NeYTHidi8KFtQXeX6rpi5PbnWVqz84
JlPQwVcljaIU6eKZq97K8K8P79T4cQi4aHHSJZEvDOdTY6o/MyzL7u4i1W+QMdnn
EnrzosfGoBp8XLtx656FLB0jfq/cD5gX6sUEPgBztxORSHlOaG00GL0RRW7Oy/2L
QPZeOcziTuCPGIbp6kgvQmfGzjo9pL7FKV6k8kNfAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2HS5mvlQnRjuPHkggdR4UbmM6l8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzJkNTRmNTRhLTU5MzEtNGI0Mi1hZGZkLTk4MTVlYWExYzQyNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAUNgMAwDQYJKoZIhvcNAQELBQADggEBAF9Br8w8AdAk2AwNZ6brCf1Wvmu6
vbeizO2LdDd60jwDscyhvG2YNT63SPbvSo8L1FtjeHPpOhS1WTl+oQOOM/TsjR3R
baKFfytbu+JpiR5ulaMnvtwZUO5A83cAsFT7Z3PSza9ZoDzlp0aQuT58Db3spjTF
hiyFjdBLn6ZvMoI/tYLYwYC97L/gXJDShz95SV/tuouxR6nO56hI58e7y3wMo4bG
lX/zxM1T7Vm7q8GTJrGegJFUYl0klYX8hgRBKR+Vpesq6mRhwV6micyR6GMd0zFc
ePCtFkRq9jdtxy4UnHWBVLctQ6cbC/AY8soWMfiBOSU2fcV2dEC2CL+iV08=
-----END CERTIFICATE-----
Generated at Wed May 13 01:23:32 2026 by rpki-client