
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa
File: 9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa (raw, json)
Hash identifier: W/tXF+qmzkYy1+x50GHO06vFjDTfeJBF1TPIhAqSjgg=
Subject key identifier: C4:05:F2:F9:A6:5D:C2:DE:BB:A3:41:54:B1:C1:88:D9:3D:9D:4F:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13831D17BA0CD623CF8619DA97ACECF4453D1FD5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa
Signing time: Mon 04 May 2026 00:20:52 +0000
ROA not before: Mon 04 May 2026 00:20:52 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.128.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:83:1d:17:ba:0c:d6:23:cf:86:19:da:97:ac:ec:f4:45:3d:1f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 00:20:52 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=7072af4c5d89d6abb909fe24cd09ce0b04009fa4981d265f337631f89248e071, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:d6:cd:7a:5b:69:49:d2:b4:c1:98:93:f5:
28:99:f8:0b:f0:ba:e8:2f:81:f1:f5:f9:54:78:b4:
1c:59:d9:a5:e6:ee:4d:70:1c:59:66:34:be:88:f2:
6a:42:18:a0:4c:53:0b:4b:95:9d:63:b9:e5:b8:db:
93:03:8f:4e:16:67:e1:2a:1b:63:1a:ef:6a:55:03:
cf:e4:7e:ec:a6:06:42:7a:31:d3:07:0f:06:e0:49:
5f:94:ed:23:3b:91:82:fc:20:65:ff:a8:fc:44:aa:
a4:95:17:48:24:08:8b:b5:ae:a8:5d:7d:cd:45:10:
32:a4:ae:44:20:db:df:a7:95:38:47:57:66:ef:29:
1c:4f:f6:a6:51:8b:6f:df:fa:2c:02:96:05:aa:d9:
dd:5b:8b:d3:26:90:f1:b0:13:9c:b2:e9:4a:cb:72:
7c:90:2e:f5:0e:19:58:31:66:79:af:04:71:4a:66:
c8:15:4d:26:f1:07:61:eb:03:88:30:31:14:28:d2:
00:9a:79:92:79:49:ed:97:18:e3:11:dc:4e:8d:e8:
04:87:9f:74:b9:97:11:89:76:cd:5c:80:8f:0b:fd:
29:5c:db:44:61:d4:32:28:a2:0c:dd:48:ef:ea:fc:
fe:4a:bd:9a:61:c1:81:54:5c:9b:d9:11:c8:a0:96:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:05:F2:F9:A6:5D:C2:DE:BB:A3:41:54:B1:C1:88:D9:3D:9D:4F:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9b66345b-6b7f-4b28-9689-df7e9fdb1ee9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.80.0/20
Signature Algorithm: sha256WithRSAEncryption
99:5b:71:d4:ea:d0:a8:0c:81:f4:18:f5:b2:f4:ec:a0:93:a9:
3a:00:90:88:4e:93:a2:07:9f:7b:9f:57:cf:4e:f9:3f:b0:8a:
78:86:63:28:65:8c:24:9c:4b:4a:03:fc:37:d7:af:dd:ed:06:
e9:2c:c1:c7:13:8b:df:66:cf:b8:cb:93:5f:85:fc:56:b8:e9:
ea:6c:02:84:df:f7:19:7f:31:f8:9d:ef:c6:1d:04:da:ee:54:
ba:25:43:fd:53:e0:a8:98:4a:7a:54:f6:4b:ea:53:62:32:d0:
fd:e5:28:61:06:1b:e4:b9:e1:f2:ab:72:3c:e7:3b:97:83:ff:
c9:1d:c2:53:0e:84:5d:66:5c:08:df:da:65:08:12:28:e6:2a:
08:12:26:4b:f0:9a:c4:c7:4f:ff:7c:23:50:8f:4e:da:10:8d:
83:2a:be:ad:5d:93:c7:1d:fa:4a:87:65:6f:08:4f:89:7e:46:
3e:78:44:f9:0a:22:fa:9a:8e:b3:a2:ef:8a:28:40:09:41:c6:
bf:12:54:68:a2:20:f1:49:1f:f8:a4:45:57:2e:d6:e3:b2:c2:
fc:92:25:5a:58:b0:e6:3e:93:80:7a:d7:d0:d0:51:85:7f:75:
40:88:b5:bf:c8:c1:44:42:60:b2:41:52:88:48:ae:f1:6b:f9:
ea:c7:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:26 2026 by rpki-client