
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa
File: 4b2544fb-aa2e-41f9-bbfc-780593774257.roa (raw, json)
Hash identifier: uWcKhD0dgukeJ0LqmWKf0bxnPML12+J0oYkgo8sj9fY=
Subject key identifier: DB:7C:8C:1E:09:E5:AE:94:7A:35:C2:19:F6:20:50:46:DD:01:D2:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 512E8826C0ACD629FA7FDED4D16EE17FA4C1615C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa
Signing time: Mon 04 May 2026 01:20:05 +0000
ROA not before: Mon 04 May 2026 01:20:05 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.146.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:2e:88:26:c0:ac:d6:29:fa:7f:de:d4:d1:6e:e1:7f:a4:c1:61:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 01:20:05 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=62c5927a589d089e81b2c40715c9d29eadf85ef580fea81bfef7aafa135cb984, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ce:ee:c7:79:40:90:d0:73:4f:37:0b:d7:ea:
bd:bb:e3:21:87:b2:06:98:fb:53:57:0e:86:94:24:
b5:13:32:62:02:b0:dd:97:da:d9:ed:11:57:0b:16:
bb:38:a9:c6:f2:25:e5:0c:9c:df:bd:b8:83:bb:23:
24:65:9f:a0:3e:e5:56:cf:9d:a5:6f:7b:18:cd:44:
b7:0b:67:e0:ce:dd:a4:e1:43:36:4d:63:f0:5d:07:
18:07:92:85:21:74:49:e8:b2:63:a2:a4:0d:ad:4a:
4a:e3:cb:30:27:02:77:2b:c6:f9:ee:44:bd:7a:f9:
e7:f2:eb:49:95:61:c8:54:5e:cc:e8:64:02:81:f7:
28:32:9e:42:9d:66:34:2e:8c:57:ea:05:88:3a:9f:
c1:2d:81:e9:39:93:d6:46:60:c2:72:e6:dc:31:ef:
4a:fe:2e:fa:52:91:9b:99:cd:94:20:31:96:61:58:
f7:73:1d:95:d3:55:20:03:de:53:0e:25:60:74:f5:
ec:32:35:a9:fb:43:d7:ba:5e:77:f0:1c:3d:dc:e4:
69:93:32:6f:1a:bc:42:70:39:ad:73:3b:c3:48:7b:
59:2f:dd:ee:ab:05:e5:73:20:3a:de:42:c7:8f:56:
91:81:48:01:07:30:68:ed:3d:f3:cc:2a:60:36:b3:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7C:8C:1E:09:E5:AE:94:7A:35:C2:19:F6:20:50:46:DD:01:D2:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.146.32.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:3a:6c:93:e0:a1:4d:58:1c:22:81:4e:5e:41:04:95:74:6a:
01:54:eb:63:da:d5:18:13:a6:0c:69:32:de:d6:57:9b:06:61:
69:ac:e0:27:b9:d7:5b:b3:5e:9c:27:cc:87:bc:71:a7:1b:3d:
93:01:1b:4e:5b:f1:15:08:29:02:1a:34:7a:de:a1:db:73:02:
20:9a:2e:37:33:7b:71:94:40:2a:9b:c5:04:cc:3d:8f:4a:26:
73:20:e6:49:65:4e:75:7d:ce:7f:72:f4:6f:ef:bf:97:d9:34:
ce:76:5e:6a:90:e7:e3:73:d1:85:96:dd:70:01:78:71:5e:c8:
d2:4d:0a:99:d3:aa:1c:cb:1c:4f:55:58:5f:c0:54:d2:58:48:
13:61:87:e1:34:44:23:89:b2:b1:10:5b:16:e1:99:b9:ae:d9:
7d:69:bb:b0:cd:8c:9d:10:ba:23:a1:9c:14:07:be:d6:cc:3b:
77:bf:37:cc:50:aa:f8:12:b0:96:b4:24:d9:72:74:5f:57:5e:
41:3c:69:0f:b7:26:68:91:a0:5f:ca:6d:9d:ed:6b:9b:e4:24:
cf:93:59:9e:8b:a0:db:57:aa:28:7b:56:14:30:f7:5c:40:7c:
5b:41:fd:ea:87:77:13:02:7a:52:18:f9:6e:4d:c5:4e:c4:5e:
37:b3:51:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:43:42 2026 by rpki-client