
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bab8791a-2a38-491e-93b8-620d86339e11.roa
File: bab8791a-2a38-491e-93b8-620d86339e11.roa (raw, json)
Hash identifier: V4iLk1X3xneNmwUy3mZP0pla35FxocRmqtfYySjDuf4=
Subject key identifier: DA:63:42:E7:3F:7E:26:14:26:DA:2F:BC:72:6F:D3:B7:AE:26:52:DF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CED14A85C187B0302F653DDF0B716F281DF7851
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bab8791a-2a38-491e-93b8-620d86339e11.roa
Signing time: Mon 04 May 2026 01:20:03 +0000
ROA not before: Mon 04 May 2026 01:20:03 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.144.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ed:14:a8:5c:18:7b:03:02:f6:53:dd:f0:b7:16:f2:81:df:78:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 4 01:20:03 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=8293c82952902544206eb42e3fdd6b9438efa172d8a6d27f16918f4ad2092f81, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:bb:b5:77:05:5f:e5:19:28:15:10:15:d0:
40:1a:53:b6:24:4c:75:2b:b8:b8:85:1f:b3:1f:50:
a8:48:00:0a:fc:a3:8b:6e:7e:44:af:51:1b:e2:8e:
8c:5b:4c:00:09:bb:1c:d5:10:2b:ad:d2:70:e2:4e:
c7:e9:65:39:1a:4b:46:9b:7b:05:83:18:d2:23:b4:
36:d0:75:e7:f1:27:b7:5d:d8:83:d3:a5:cf:3c:00:
29:39:97:9a:77:8d:d4:18:f0:16:f3:23:6c:5a:ed:
a1:be:49:f1:8b:da:08:78:13:0c:64:bc:f1:98:79:
17:ce:8c:70:60:65:d8:da:46:40:b4:ff:68:cf:0e:
96:b7:1d:af:35:8c:96:a0:68:be:92:b2:db:92:08:
c4:d3:f0:62:e1:83:08:0b:64:b2:54:4f:61:fc:64:
e5:e6:5b:e4:8c:7f:a5:b5:2d:17:8b:2e:92:ad:0a:
ab:0e:65:a5:42:1c:48:98:49:07:e1:ae:72:77:7b:
0a:51:d7:ba:e5:87:eb:13:07:98:be:aa:1c:2e:fa:
41:cf:89:a7:dc:26:27:9a:1d:c9:32:a7:b6:1a:62:
91:4a:6a:ca:21:e8:ee:85:0c:0d:c7:a1:71:d8:3d:
5c:4c:31:b9:a7:66:3f:3b:7a:8b:de:52:bb:89:31:
b9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:63:42:E7:3F:7E:26:14:26:DA:2F:BC:72:6F:D3:B7:AE:26:52:DF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bab8791a-2a38-491e-93b8-620d86339e11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.144.0.0/16
Signature Algorithm: sha256WithRSAEncryption
36:ef:ce:88:08:d4:35:32:ce:48:ca:d3:a0:2c:ae:8d:d3:7f:
1a:7e:0e:5d:7a:9e:15:cc:10:df:5e:cd:93:f7:e8:4e:fb:bb:
97:d5:ae:71:9e:fb:e9:b6:84:74:e1:da:55:c6:e6:5c:54:19:
30:57:70:e7:72:54:26:c1:53:f6:38:be:00:10:63:d7:01:9a:
ff:c2:b3:88:e7:1d:39:d3:35:ab:de:6e:f1:89:7f:3d:96:11:
5b:cf:af:ca:0e:a0:da:4c:a9:ba:a6:a7:af:b6:77:a7:22:cb:
d2:b9:05:00:f8:98:1b:c1:3b:4d:c2:af:83:53:9c:8a:33:ab:
f2:11:2c:b3:31:81:f5:52:2c:3e:cb:86:ed:14:02:a5:16:51:
cb:bd:54:e4:b7:ab:33:c1:ee:b6:00:1c:c5:c8:24:a7:97:9c:
20:60:12:bb:10:8a:c7:ba:7d:d4:cc:48:50:c5:90:d6:e2:0a:
3a:16:56:6c:56:6f:e3:78:a9:42:cf:9d:53:fb:3a:ed:3e:5d:
d9:e4:0e:70:82:4e:44:1e:fa:6e:bd:dd:a5:92:c1:ef:11:35:
ca:ee:7a:aa:30:09:07:5f:99:ea:76:27:4b:f7:a4:b0:6c:2c:
50:8c:7a:b3:c0:24:0c:d2:c8:66:8b:db:f1:f1:c1:f5:7b:f6:
d4:14:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:43:35 2026 by rpki-client