
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68534c26-cfef-460d-b04e-7852b58ae151.roa
File: 68534c26-cfef-460d-b04e-7852b58ae151.roa (raw, json)
Hash identifier: hia6SCYmREouGdHLkmGkhO0LgL1dcmeOuQbvLt8hAUM=
Subject key identifier: 9D:A3:67:57:AC:E9:2E:DC:81:06:CE:11:6A:17:B4:DB:97:81:2E:79
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1278E92D41AD98FFC21D042AB2573DF0FB9D51D8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68534c26-cfef-460d-b04e-7852b58ae151.roa
Signing time: Tue 12 May 2026 01:40:04 +0000
ROA not before: Tue 12 May 2026 01:40:04 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:78:e9:2d:41:ad:98:ff:c2:1d:04:2a:b2:57:3d:f0:fb:9d:51:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 01:40:04 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=77b8d60c07fa4411a61efb461300de96335e9d35e072755122f041c8d55ad368, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:2a:82:69:cb:66:f6:5e:4e:56:ef:6d:7d:
15:13:a2:f3:94:5d:71:d5:dd:d6:d1:8c:13:58:95:
95:67:7b:f9:b8:fa:4d:e0:b1:3e:17:6b:7c:b2:bf:
c1:dc:c9:ab:1e:3a:9d:c0:51:ab:2a:df:a4:57:88:
df:a0:4b:34:12:7e:85:a5:85:24:93:d4:b3:55:6e:
ee:5e:75:c3:9e:00:bb:96:58:58:3c:a4:f5:1d:b2:
2f:58:58:f5:c6:5b:1e:94:5f:e1:79:18:c8:04:7a:
80:57:2d:3e:70:3b:19:aa:e5:f3:c1:2b:4c:53:56:
7b:8a:4d:0c:2f:74:0b:2c:12:87:d8:d4:bb:73:de:
8a:60:94:59:70:f0:69:d6:b8:02:d5:ce:91:cc:4b:
8c:73:ee:51:17:af:e1:af:5a:52:bb:75:8b:85:1c:
56:42:c4:1d:aa:3f:cd:c0:69:d2:f0:78:c8:74:fa:
0a:6b:1b:99:9a:16:6a:ea:0e:1c:9e:cd:83:34:a0:
f1:ce:d9:49:70:d2:19:9c:7f:0a:08:64:e8:dc:e6:
6e:94:55:5d:c5:fe:d2:8c:7a:f2:ba:8d:6c:08:e5:
fd:ad:b8:97:7e:5e:4b:56:27:ae:a3:c9:01:37:4a:
6a:e5:34:bb:5a:ec:4c:ee:90:56:35:df:dd:7e:d1:
83:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A3:67:57:AC:E9:2E:DC:81:06:CE:11:6A:17:B4:DB:97:81:2E:79
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/68534c26-cfef-460d-b04e-7852b58ae151.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.238.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9b:62:b4:f6:1a:fc:97:83:e8:31:56:3e:9b:8c:5a:cb:13:
55:29:52:46:ca:63:52:06:a5:7b:c6:df:81:f5:d5:21:d3:a2:
1d:e2:9d:0e:70:3a:fd:50:74:81:68:a0:e2:03:27:18:6e:24:
11:1a:7f:0f:d4:e0:f1:8d:43:01:cf:9c:17:40:c8:bd:54:14:
0d:2a:dd:fe:9b:8c:d8:61:b1:90:77:59:e1:1f:94:5d:7a:59:
01:2a:88:39:41:59:41:09:74:a3:3c:41:1b:ba:ab:8d:e0:81:
ea:e2:67:f0:4f:65:f7:6f:10:21:5f:c9:14:43:82:02:98:26:
7f:2f:74:13:e1:6b:f7:74:e3:fd:bc:fe:d9:3a:8c:25:bb:46:
ee:2b:78:3d:f3:2a:a1:d3:6b:70:bf:48:5b:1a:48:52:38:13:
21:f0:a7:82:51:c0:df:8a:77:7b:dd:33:b0:48:9c:9f:6e:1a:
d8:c7:26:a9:d7:3b:f1:69:59:d4:93:81:92:f5:b8:58:31:07:
a9:70:21:21:0c:3a:2d:cc:1f:79:36:c5:22:db:5c:d1:96:95:
75:5f:14:dd:84:a7:d1:86:b1:8f:49:ef:20:6b:09:40:0a:a5:
8c:5f:1a:43:32:20:c0:be:d7:f4:9f:f4:59:a5:a9:e2:75:52:
20:19:ce:3e
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEnjpLUGtmP/CHQQqslc98PudUdgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDE0MDA0WhcNMjYwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0A3N2I4ZDYwYzA3ZmE0NDExYTYxZWZiNDYxMzAwZGU5NjMz
NWU5ZDM1ZTA3Mjc1NTEyMmYwNDFjOGQ1NWFkMzY4MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDCSCqCactm9l5OVu9tfRUTovOUXXHV3dbRjBNYlZVne/m4
+k3gsT4Xa3yyv8HcyaseOp3AUasq36RXiN+gSzQSfoWlhSST1LNVbu5edcOeALuW
WFg8pPUdsi9YWPXGWx6UX+F5GMgEeoBXLT5wOxmq5fPBK0xTVnuKTQwvdAssEofY
1Ltz3opglFlw8GnWuALVzpHMS4xz7lEXr+GvWlK7dYuFHFZCxB2qP83AadLweMh0
+gprG5maFmrqDhyezYM0oPHO2Ulw0hmcfwoIZOjc5m6UVV3F/tKMevK6jWwI5f2t
uJd+XktWJ66jyQE3SmrlNLta7EzukFY1391+0YOjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUnaNnV6zpLtyBBs4Rahe025eBLnkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY4NTM0YzI2LWNmZWYtNDYwZC1iMDRlLTc4NTJiNThhZTE1MS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsO4wDQYJKoZIhvcNAQELBQADggEBAIqbYrT2GvyXg+gxVj6bjFrLE1Up
UkbKY1IGpXvG34H11SHToh3inQ5wOv1QdIFooOIDJxhuJBEafw/U4PGNQwHPnBdA
yL1UFA0q3f6bjNhhsZB3WeEflF16WQEqiDlBWUEJdKM8QRu6q43ggeriZ/BPZfdv
ECFfyRRDggKYJn8vdBPha/d04/28/tk6jCW7Ru4reD3zKqHTa3C/SFsaSFI4EyHw
p4JRwN+Kd3vdM7BInJ9uGtjHJqnXO/FpWdSTgZL1uFgxB6lwISEMOi3MH3k2xSLb
XNGWlXVfFN2Ep9GGsY9J7yBrCUAKpYxfGkMyIMC+1/Sf9FmlqeJ1UiAZzj4=
-----END CERTIFICATE-----
Generated at Tue May 12 21:55:28 2026 by rpki-client