
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad53057-3cbb-48a2-aec2-3c8d86813e27.roa
File: bad53057-3cbb-48a2-aec2-3c8d86813e27.roa (raw, json)
Hash identifier: vytBCFvMJxz802HOYjeb3xvd4K47bYyXKt3CC3kepTs=
Subject key identifier: 66:BE:4F:32:ED:57:0E:9D:C9:05:E4:94:F4:4A:EC:26:83:E7:2E:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 69656A3D414F67B48A3EA39D0B077997EEA3ED8E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad53057-3cbb-48a2-aec2-3c8d86813e27.roa
Signing time: Tue 12 May 2026 01:40:37 +0000
ROA not before: Tue 12 May 2026 01:40:37 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:65:6a:3d:41:4f:67:b4:8a:3e:a3:9d:0b:07:79:97:ee:a3:ed:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 01:40:37 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=254c94bfef134a7730cf6328cbce86bb8a6583e42def6eb4ab806ae49533e9fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c9:0b:6d:10:e3:3b:5c:90:78:77:bf:2a:a1:
a9:29:7c:1c:02:f1:1b:38:9d:09:f3:3c:fa:95:c8:
cb:6e:71:eb:5e:29:4e:59:8e:6a:23:b9:4e:82:64:
7f:25:cc:3c:35:a0:70:3a:4e:0b:d5:c3:0d:8c:ca:
71:94:3d:2a:63:ec:ad:b1:f7:40:a0:ed:75:93:0d:
9a:59:46:68:f4:70:fb:dc:36:6d:fc:fb:da:d8:04:
c2:cb:32:b2:5c:3a:fa:f3:a1:6c:5b:d7:84:95:1e:
88:10:8d:01:18:29:d4:ac:ab:71:51:0d:ca:af:2f:
2e:59:1e:fb:07:bc:e8:07:6e:58:12:ec:90:2e:4d:
a9:75:85:5a:a9:fb:41:0b:fc:e0:c3:d5:39:ad:d2:
34:a6:92:c0:64:92:6e:a0:a3:51:f8:20:8e:92:63:
c0:b3:06:53:98:e3:e7:3a:79:9d:0c:b2:b0:c9:2c:
c8:da:9b:1e:08:12:d9:c3:b3:f2:a6:20:04:ef:0f:
af:42:63:1c:c6:77:81:dd:b5:af:6b:29:c3:41:66:
9b:52:31:1d:55:b3:18:3a:ef:43:6a:6f:21:b7:5e:
65:85:c5:a5:3c:b2:80:a4:03:2a:23:bb:64:82:2f:
34:39:54:c4:69:9b:93:d2:ae:d5:07:39:10:b9:cf:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BE:4F:32:ED:57:0E:9D:C9:05:E4:94:F4:4A:EC:26:83:E7:2E:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bad53057-3cbb-48a2-aec2-3c8d86813e27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:6e:25:53:20:de:3b:97:b0:20:9a:eb:e6:51:d0:39:1b:8c:
bc:56:6d:d1:51:54:60:1c:35:10:bd:2b:87:6f:b0:53:25:8a:
b8:66:21:b1:68:b4:7d:37:9c:53:3b:92:07:8d:66:95:f0:ad:
5e:74:1d:5f:cd:59:e4:2a:c0:73:d5:ce:52:58:d2:ad:44:e1:
6c:8b:78:d9:44:06:0e:a9:58:4a:fa:34:e8:97:87:4b:d0:ac:
c8:a6:84:90:6a:8a:6c:00:8b:e2:fd:94:2e:ee:d1:ec:d3:54:
8f:00:48:1c:82:d6:96:ea:c5:3a:67:aa:e5:11:34:b7:b4:57:
f1:77:81:c7:8f:87:4d:71:7e:ff:a5:9b:16:f0:ca:3a:84:45:
06:9d:a2:5a:ac:21:46:78:02:cd:47:c6:b4:80:b7:67:47:f1:
94:71:68:0a:b9:5e:fc:c7:d0:f1:7a:be:ed:c4:0e:27:ed:77:
31:7b:e4:6c:54:fa:d4:c2:52:1f:d8:47:39:81:c0:bd:24:99:
76:bd:16:18:c7:11:06:1f:c6:7e:5f:66:e9:8f:e6:53:56:69:
93:0c:a5:65:68:cf:2c:3d:6c:c5:51:90:c3:5e:2f:2f:b1:b0:
c0:a3:c7:19:55:c1:c8:9b:9e:be:ba:04:e6:2d:5e:d7:56:70:
87:c9:ca:06
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUaWVqPUFPZ7SKPqOdCwd5l+6j7Y4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTEyMDE0MDM3WhcNMjYwODEwMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNTRjOTRiZmVmMTM0YTc3MzBjZjYzMjhjYmNlODZiYjhh
NjU4M2U0MmRlZjZlYjRhYjgwNmFlNDk1MzNlOWZlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQD1yQttEOM7XJB4d78qoakpfBwC8Rs4nQnzPPqVyMtucete
KU5ZjmojuU6CZH8lzDw1oHA6TgvVww2MynGUPSpj7K2x90Cg7XWTDZpZRmj0cPvc
Nm38+9rYBMLLMrJcOvrzoWxb14SVHogQjQEYKdSsq3FRDcqvLy5ZHvsHvOgHblgS
7JAuTal1hVqp+0EL/ODD1Tmt0jSmksBkkm6go1H4II6SY8CzBlOY4+c6eZ0MsrDJ
LMjamx4IEtnDs/KmIATvD69CYxzGd4Hdta9rKcNBZptSMR1Vsxg670NqbyG3XmWF
xaU8soCkAyoju2SCLzQ5VMRpm5PSrtUHORC5z2unAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUZr5PMu1XDp3JBeSU9ErsJoPnLn4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2JhZDUzMDU3LTNjYmItNDhhMi1hZWMyLTNjOGQ4NjgxM2UyNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsHcwDQYJKoZIhvcNAQELBQADggEBAMtuJVMg3juXsCCa6+ZR0DkbjLxW
bdFRVGAcNRC9K4dvsFMlirhmIbFotH03nFM7kgeNZpXwrV50HV/NWeQqwHPVzlJY
0q1E4WyLeNlEBg6pWEr6NOiXh0vQrMimhJBqimwAi+L9lC7u0ezTVI8ASByC1pbq
xTpnquURNLe0V/F3gcePh01xfv+lmxbwyjqERQadolqsIUZ4As1HxrSAt2dH8ZRx
aAq5XvzH0PF6vu3EDiftdzF75GxU+tTCUh/YRzmBwL0kmXa9FhjHEQYfxn5fZumP
5lNWaZMMpWVozyw9bMVRkMNeLy+xsMCjxxlVwcibnr66BOYtXtdWcIfJygY=
-----END CERTIFICATE-----
Generated at Wed May 13 00:39:55 2026 by rpki-client