
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fb3179-4381-4749-a9d3-2cdc94d109eb.roa
File: 88fb3179-4381-4749-a9d3-2cdc94d109eb.roa (raw, json)
Hash identifier: VLxL1B+0mmPOeGlx0Fk5AlQ1v2CjtxmOpIJZIQuu9Cw=
Subject key identifier: 35:C7:03:D6:CB:9B:6E:C0:0D:B4:B0:E2:DE:61:D9:33:2F:E5:33:54
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4AF7A81D5D5DC209BFBEC60A676D988491E44A47
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fb3179-4381-4749-a9d3-2cdc94d109eb.roa
Signing time: Mon 04 May 2026 01:00:49 +0000
ROA not before: Mon 04 May 2026 01:00:49 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 44.220.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:f7:a8:1d:5d:5d:c2:09:bf:be:c6:0a:67:6d:98:84:91:e4:4a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 01:00:49 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=7756d3ee99e861539ecbcfece6557e064ceb67ab113a3b08684aa9ddfae54873, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:31:7a:9c:77:60:f5:28:2b:bc:08:8f:08:3d:
42:76:d1:cb:97:33:40:3e:78:88:5e:f2:a4:76:19:
61:a7:69:4b:88:53:9f:6e:89:7d:c8:fc:5f:12:53:
ce:24:9f:6e:6a:80:46:91:15:9a:91:5f:b6:ed:8f:
0c:89:0d:f2:fd:b0:17:32:e4:62:91:5d:ab:fb:89:
8d:16:1f:cd:3f:4a:6a:db:cc:7b:85:95:7c:99:a2:
54:53:5e:eb:50:5c:0b:f5:6c:ed:51:7b:8c:b8:12:
71:7b:7f:2b:95:d4:fb:d0:03:aa:2d:ac:8d:b1:15:
55:8f:88:ba:78:8a:74:6c:81:77:3c:b2:67:85:48:
8f:2e:61:ca:18:ae:48:9c:5a:3b:1e:44:c0:99:f9:
85:54:5a:d5:27:31:42:39:ee:f6:67:ae:eb:a2:02:
f3:70:3f:f8:71:bb:93:eb:09:9f:8c:de:e8:5d:98:
33:66:58:16:57:8c:db:24:ee:cd:63:35:9c:b3:19:
0a:1f:ec:f0:e5:05:f0:fd:6d:e3:11:12:ea:71:48:
b9:3d:1e:09:6d:f5:73:d0:8f:55:c3:34:69:8c:b4:
96:e6:75:ce:4c:2f:9b:19:23:b5:51:ac:54:d0:64:
d9:63:0e:40:9d:98:3f:46:bf:34:69:cc:06:93:87:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C7:03:D6:CB:9B:6E:C0:0D:B4:B0:E2:DE:61:D9:33:2F:E5:33:54
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/88fb3179-4381-4749-a9d3-2cdc94d109eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.220.76.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:a5:97:65:3f:f9:f4:91:33:c9:21:93:17:1e:4f:e4:cc:76:
f3:b2:fe:aa:5f:81:99:1a:5b:9b:11:f4:9f:33:b0:1c:23:20:
6c:5f:29:79:1f:ac:43:8a:fd:eb:60:9a:0c:e8:32:68:60:9e:
9d:9e:bf:01:1a:82:4c:9d:e0:bd:89:50:74:38:17:76:d6:ac:
0e:11:15:f6:3f:d7:a9:24:83:dc:e9:45:8d:a0:f5:1b:ad:68:
0b:ab:04:66:68:1a:91:6a:80:72:61:6d:b2:f1:50:72:67:35:
94:cc:bb:82:50:df:df:30:1e:8b:9b:a4:48:a2:9d:e6:57:69:
04:d4:df:47:17:1f:e0:9d:ef:99:1b:f7:4b:2a:e4:b2:1f:73:
62:c8:97:db:be:e0:dd:83:45:f8:f8:60:36:43:c0:9e:ef:b2:
9f:d5:08:45:dc:6f:9a:c4:e2:5c:e7:d0:bc:90:75:f5:35:7a:
44:14:a0:c5:7e:e0:d3:9d:96:7d:90:ab:80:bb:66:85:e6:dc:
80:cc:fe:6e:11:2d:da:21:2e:9d:f7:63:de:8e:5a:06:76:cd:
c4:7f:bf:c8:85:1d:99:99:dc:bb:04:5d:66:6f:2f:ce:a3:54:
41:c7:f4:c0:a2:16:ac:b0:9e:be:98:d5:ee:92:26:84:8f:38:
ae:4d:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:12:32 2026 by rpki-client