
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a82cd8c8-f9e8-4b4a-b459-c652a16d0db6.roa
File: a82cd8c8-f9e8-4b4a-b459-c652a16d0db6.roa (raw, json)
Hash identifier: e8J/ftZP6zPs1tZUFyyT/b/1RNCaDjNAuCqAtN5BXcg=
Subject key identifier: 62:9C:40:7B:94:E1:30:90:9B:23:5F:C6:F3:FE:3D:36:97:13:31:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 505E600BEDE429629F5E945AF5E42B17B44D35DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a82cd8c8-f9e8-4b4a-b459-c652a16d0db6.roa
Signing time: Tue 21 Apr 2026 20:47:57 +0000
ROA not before: Tue 21 Apr 2026 20:47:57 +0000
ROA not after: Mon 20 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 1.178.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 06 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5e:60:0b:ed:e4:29:62:9f:5e:94:5a:f5:e4:2b:17:b4:4d:35:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Apr 21 20:47:57 2026 GMT
Not After : Jul 20 23:59:59 2026 GMT
Subject: serialNumber=c5cf1b41bc298262e0f460abed66fc66374dffbc291572f8517248ed58006b1c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:14:f6:17:2c:4e:47:a7:9f:ad:e6:a5:b4:
fa:0e:ce:65:f6:34:e2:04:dd:e8:15:d7:84:a9:7d:
a9:c6:00:47:86:0e:ae:c2:c9:e1:b7:12:0f:7b:bd:
1b:40:7b:82:45:f9:a5:91:54:84:1b:84:d0:55:df:
bd:d4:46:1f:65:e4:af:e8:04:dc:43:34:8a:0b:11:
2f:a2:33:f4:4b:06:a6:85:e1:c7:9e:67:c1:a7:1d:
9d:b3:63:5a:04:e4:be:06:f9:3f:f7:8f:cd:da:3c:
3e:5f:71:57:cd:fa:fb:83:ce:0d:de:d9:f0:fd:ba:
b4:b2:bc:d4:c8:fc:75:ed:1a:a3:e0:70:12:d3:cd:
25:19:f6:2f:bd:30:3e:6f:79:5e:21:83:4d:38:76:
90:08:13:1b:98:dd:2b:3a:f9:0a:9a:08:58:4c:0e:
de:54:ba:c1:f0:b8:4f:26:f2:7f:aa:7f:15:51:10:
54:99:57:78:54:82:ec:b3:49:48:6d:1b:9e:ea:d8:
0c:e1:6b:68:94:ba:fa:c8:a2:8e:3d:97:d3:5d:2a:
f5:f7:d0:40:32:78:9b:69:10:78:e1:98:62:a3:35:
92:43:bd:af:2c:b8:30:fc:ad:96:64:f7:02:4b:2b:
7d:70:54:b0:ec:c6:18:05:14:b2:1b:a3:5f:35:b0:
e3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9C:40:7B:94:E1:30:90:9B:23:5F:C6:F3:FE:3D:36:97:13:31:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a82cd8c8-f9e8-4b4a-b459-c652a16d0db6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.178.172.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:f1:b3:29:10:de:1f:45:03:e6:87:0d:1e:62:69:38:e8:10:
71:8f:7a:21:fb:01:cd:9d:66:9f:58:74:7d:e3:e6:df:43:c7:
57:58:52:0d:76:a3:cd:cc:a7:8f:19:28:69:2e:72:a1:62:c6:
2e:1a:51:13:ba:46:6b:0a:67:76:42:15:51:35:af:2f:d5:9b:
bd:97:6d:46:f8:e1:86:9b:c9:fe:5a:93:23:7c:2a:a8:a7:3c:
82:32:56:5a:1a:98:64:74:9a:11:7d:bc:e6:d8:15:1c:4e:2c:
62:15:0d:f2:07:7e:2a:cb:a0:97:25:24:86:65:34:b2:e6:4f:
d1:3c:85:29:c1:d2:7c:d9:1e:7f:e8:0c:f8:b4:66:7b:91:0e:
2b:dc:f4:40:23:c8:2e:27:81:e2:44:d9:e9:2c:1b:ea:75:a0:
d7:2b:92:7b:44:6d:38:db:8f:c8:7e:9d:db:9f:72:3c:93:a6:
3b:8f:cd:bc:02:cb:0e:36:46:cb:0d:7d:95:99:0b:43:df:be:
d7:59:61:de:b4:a7:72:ef:69:ff:84:87:d1:36:b8:2a:ba:86:
87:d7:61:24:9e:a5:e8:fe:dc:4e:77:01:37:d0:a7:83:e2:df:
7d:a0:70:80:03:9c:51:f3:0a:d2:39:33:17:b7:99:4c:9c:db:
61:35:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 21:37:01 2026 by rpki-client