
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e454b87e-3750-4f94-a7d0-f1c6408adee5.roa
File: e454b87e-3750-4f94-a7d0-f1c6408adee5.roa (raw, json)
Hash identifier: SJ+NO6CVVgu6ptJj3a8b5ayyyWhssOzMAclkyknhxXM=
Subject key identifier: 22:DD:F1:69:56:3F:DB:4D:5F:BB:5A:E2:29:46:17:0C:67:65:24:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 60C185D58F46F76DA340F445716F1BFBF90B85A6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e454b87e-3750-4f94-a7d0-f1c6408adee5.roa
Signing time: Sat 02 May 2026 01:01:24 +0000
ROA not before: Sat 02 May 2026 01:01:24 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.56.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c1:85:d5:8f:46:f7:6d:a3:40:f4:45:71:6f:1b:fb:f9:0b:85:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 2 01:01:24 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=514756c56349e9602c9aea08d2c7b1ed29135f75fbc589722b68d059c50dbaad, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:7b:59:f8:52:52:b8:b0:b0:7d:c7:86:83:
9d:b8:00:75:a3:8d:1e:a1:d8:1d:30:89:67:13:37:
85:65:2b:08:bc:b7:a9:05:d1:76:b7:d5:97:71:d9:
1d:ef:2c:38:71:f7:28:d5:85:58:32:54:d9:9d:16:
a4:de:52:c9:13:94:0d:1f:11:c2:c2:b0:23:14:37:
a4:1c:3d:43:f5:2d:7f:48:92:c9:12:ec:ef:6d:8e:
cc:7b:e3:ff:b7:c0:9b:b2:88:8f:82:59:06:e8:c5:
32:49:a8:1c:ff:c5:92:51:bc:0c:42:31:af:af:55:
68:02:5f:c5:4b:81:29:e4:e4:79:d5:d3:39:5a:c3:
53:81:95:4a:db:73:92:f0:b4:6d:6b:d8:d4:ee:d8:
3b:ed:a1:ad:16:77:3f:5f:c9:6d:53:67:b8:26:be:
16:fd:a8:2a:45:42:5c:66:75:76:ec:bb:ba:32:27:
a8:94:26:71:05:ef:b2:39:b1:a5:8e:fa:d4:5c:07:
64:f7:8f:c4:a0:43:a4:4c:55:56:a8:e1:bd:4a:fe:
a5:a6:b3:57:0c:3c:7c:0e:5b:30:1a:99:10:56:30:
ea:87:6a:13:7f:c2:60:ad:ef:87:85:c7:f7:39:ab:
d1:84:a2:3c:bf:a3:03:b2:64:02:5f:2e:09:c7:f9:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DD:F1:69:56:3F:DB:4D:5F:BB:5A:E2:29:46:17:0C:67:65:24:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e454b87e-3750-4f94-a7d0-f1c6408adee5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.56.64.0/18
Signature Algorithm: sha256WithRSAEncryption
d2:00:b8:44:46:55:59:7f:9c:ff:dd:e9:04:91:77:2d:0c:02:
06:2c:05:2b:eb:b0:c5:ec:ac:60:d4:5d:4d:a0:d9:60:97:3f:
42:c5:96:ba:01:d4:e6:21:59:cd:2a:94:80:77:df:b7:02:5b:
23:2d:cb:a1:6c:6e:95:e0:fa:85:bd:32:10:52:83:b3:e3:bc:
c6:d9:35:48:59:11:6a:f6:dc:07:b6:8d:67:b3:15:a9:7f:f3:
74:b4:4d:d9:ce:cc:1e:34:0e:c3:14:fb:2f:ea:d8:61:43:ce:
ae:7b:ad:ce:a7:ed:e5:0d:0d:01:c3:ac:ea:fb:d6:0c:cb:e0:
43:45:50:b3:93:f6:21:1b:33:d5:83:9d:73:88:d8:ea:28:bb:
56:a3:ae:0b:65:06:c5:5a:12:71:52:c2:a5:06:31:b9:9c:b7:
c1:1f:cb:db:7e:e6:3c:a4:c1:f6:fb:5f:7f:27:76:14:23:97:
d4:b4:f2:ea:39:f8:96:f3:b4:a6:1d:5e:d7:f1:b1:4b:de:f3:
69:d2:56:9c:93:9b:63:61:25:fe:2d:03:dc:1f:ca:d7:da:fe:
36:c5:58:41:61:42:5e:3f:f3:1d:0a:36:cd:b3:b1:b7:66:4f:
be:72:46:c3:69:2e:1c:8e:0f:b3:9b:68:e8:39:ea:68:26:f1:
f9:b6:51:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:33:54 2026 by rpki-client