
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa
File: 5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa (raw, json)
Hash identifier: 4MhiICCBKMwew2GnMguCvuBCzMl9DsOGam4UTGxIXpw=
Subject key identifier: D9:A2:93:60:9A:A2:9B:7E:1B:54:2E:C3:FD:A4:88:3C:C5:1D:4B:2F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18E4293760DB6FEAF105D0497C60130565B6A9DF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa
Signing time: Fri 24 Apr 2026 03:16:44 +0000
ROA not before: Fri 24 Apr 2026 03:16:44 +0000
ROA not after: Thu 23 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 65.9.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e4:29:37:60:db:6f:ea:f1:05:d0:49:7c:60:13:05:65:b6:a9:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 24 03:16:44 2026 GMT
Not After : Jul 23 23:59:59 2026 GMT
Subject: serialNumber=0d3654cc8f6e94063c862295d12bf1584b7fa391e2709fbc1d095be07bb49ba4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:e6:40:dc:18:f5:62:d2:a5:87:60:ab:a1:
d3:f4:b5:60:56:be:07:8f:5e:45:6a:d0:6e:52:09:
93:e7:73:2b:67:6d:f8:4b:3c:cb:60:e1:cf:f0:98:
d3:26:54:a6:fa:9e:c1:5f:ba:94:3f:0c:ec:fa:80:
89:3a:44:b1:f9:ff:ef:76:0e:9e:b4:19:7b:fd:a7:
27:20:e4:01:02:b9:43:13:4a:88:ed:79:0c:4d:44:
e5:89:5e:a4:51:35:41:40:77:8d:67:5c:11:13:17:
2e:e2:d7:01:39:95:df:d7:b2:a4:67:45:a6:42:c2:
42:d6:4d:b3:e1:d9:8d:1c:7c:42:9b:e6:12:1b:ee:
fa:4d:3a:7f:8b:47:41:90:01:69:6f:6d:3c:34:3d:
db:5c:85:76:d3:1f:bf:be:63:b9:39:68:e2:47:6e:
e8:6c:70:8e:a4:65:80:31:d3:f3:2e:75:41:6e:61:
84:23:5e:30:aa:16:3b:6d:98:c6:19:24:8d:d3:32:
fa:43:a7:63:65:5a:9d:65:65:59:89:a1:84:93:ee:
48:5b:2a:c4:70:34:5d:99:66:ba:54:ee:93:f5:32:
04:ba:e5:58:d5:cf:77:cd:6b:e8:b2:94:5e:83:e9:
4f:3a:30:8a:b7:06:3f:ef:82:d7:fc:63:d0:c5:78:
c7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A2:93:60:9A:A2:9B:7E:1B:54:2E:C3:FD:A4:88:3C:C5:1D:4B:2F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5e724bfb-12fb-46a5-9880-c64f9300dbdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
65.9.160.0/21
Signature Algorithm: sha256WithRSAEncryption
16:c7:48:ea:07:ba:da:2b:3d:46:ae:16:32:8c:1e:4c:8c:51:
51:58:90:23:a8:43:82:c2:46:a2:cc:a9:8a:32:7c:31:a8:0f:
c4:a2:8f:f5:ea:eb:32:3d:84:5d:9f:0e:c2:c2:cc:bb:29:05:
5d:13:eb:32:fa:7d:81:e2:b6:e9:5b:21:e5:0b:79:d6:c7:9f:
1d:6c:f8:d7:10:f7:a6:5c:6c:44:06:0c:5b:07:6c:1f:b7:70:
2a:2c:81:84:81:fa:8a:63:53:4a:05:21:0c:e0:92:12:ff:c7:
af:03:24:25:64:79:7c:c2:73:d1:1b:2c:db:6e:7c:b1:45:a7:
28:64:37:78:e6:1e:a3:0a:f3:81:61:4a:75:b9:5c:e0:de:f0:
15:5c:7e:8c:89:06:f9:70:55:a5:77:d9:43:4d:ab:66:f7:1d:
81:48:cb:da:c3:8b:e8:4d:c5:e9:60:3e:ea:cf:f2:88:0a:d9:
94:a8:6c:b0:17:43:66:c5:4e:ef:88:79:80:7c:10:f1:60:f6:
1b:7e:12:e4:51:f5:9a:ed:08:ac:9e:f3:a3:5b:a9:97:cf:a0:
7b:25:6d:38:70:5c:4d:19:29:83:ef:fe:56:f5:9d:5b:5d:ff:
a3:89:23:85:9b:11:d5:0d:f0:81:5d:e1:2f:70:3b:ca:fa:2f:
11:52:12:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:56 2026 by rpki-client