
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa
File: 4b2544fb-aa2e-41f9-bbfc-780593774257.roa (raw, json)
Hash identifier: hpoemRjzsE/OkFdQqILEkzhUEITjK2FoT3oqtSlfB7w=
Subject key identifier: A8:7A:46:4D:54:9C:F4:7A:56:F8:28:90:63:C1:2F:B7:60:D0:D7:06
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13DAA8BFDC4A9571E16F71EC121C8B46E0AD1C51
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa
Signing time: Fri 13 Feb 2026 01:11:24 +0000
ROA not before: Fri 13 Feb 2026 01:11:24 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.146.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:da:a8:bf:dc:4a:95:71:e1:6f:71:ec:12:1c:8b:46:e0:ad:1c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 01:11:24 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=74be77acc9bd9acfb3351ed6c53f213c790ec9da6b8069ee284b840ff2e9cdfd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:12:42:f5:cb:0a:f0:b0:e1:23:3d:9f:f3:61:
a3:52:14:8c:bc:08:21:c9:ab:ff:d2:f8:f3:46:41:
b3:87:58:95:51:f4:fd:07:c3:13:1c:67:7d:a1:01:
20:40:b0:87:e9:7d:25:81:3e:fe:5e:89:89:47:bc:
76:52:95:9b:f1:ad:3f:6f:1f:4c:b0:87:95:5f:96:
58:99:06:44:93:d4:07:f1:d0:64:42:d5:7c:47:82:
13:73:61:c6:2d:12:af:4e:a1:ba:0e:e0:b9:0f:d3:
da:37:4b:63:19:85:26:84:fe:1b:d3:8e:7c:87:94:
4b:77:cd:68:6d:63:60:ab:c5:eb:29:7c:5a:15:58:
cd:11:4c:42:2b:f6:1c:4d:1e:6d:5e:cb:c4:7f:00:
75:58:63:c8:41:a7:24:d8:37:c7:e5:82:7f:53:c3:
ff:4c:68:4a:53:81:29:a0:d7:14:51:7e:a9:5f:46:
8f:45:b7:f3:4b:85:e5:f1:ea:2d:65:4a:21:af:9a:
73:a7:3a:35:13:01:7a:fd:47:22:01:f0:4b:3d:98:
97:70:b5:a9:82:62:cf:bd:40:ec:ba:69:d0:0f:f2:
5a:2c:60:3a:93:25:9f:83:4a:3d:e1:3c:d3:40:01:
08:ed:e7:8d:1d:20:73:3d:b9:f6:0c:ba:7e:16:31:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7A:46:4D:54:9C:F4:7A:56:F8:28:90:63:C1:2F:B7:60:D0:D7:06
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4b2544fb-aa2e-41f9-bbfc-780593774257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.146.32.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:36:53:36:ce:83:a1:9e:8a:f0:36:56:77:ed:66:5f:aa:8e:
bb:8b:ae:0f:be:57:00:1c:50:35:98:7a:56:4e:a5:0a:62:fb:
f4:94:5c:e0:36:66:a7:f3:f0:07:a7:74:20:c8:0a:a7:9c:16:
02:84:6e:03:c2:41:ca:3f:3a:66:c3:85:b8:78:31:57:54:1a:
93:7c:fb:d3:b5:c4:c4:31:fe:15:5c:16:56:f0:0d:20:70:47:
22:1f:e4:7a:d7:c5:d9:65:51:dd:7d:51:17:36:5a:9b:2a:e4:
c1:61:e9:49:5e:39:f1:6c:f8:4c:81:26:18:fb:a5:e8:c8:1f:
da:85:4b:5d:96:e9:32:f6:e2:01:79:84:5a:1f:b2:b8:29:50:
84:40:ac:f4:d9:a7:e7:b0:3c:5f:4c:62:89:ba:ef:e1:db:c9:
dd:9d:b1:05:cb:e9:30:b0:cd:06:ba:06:07:1f:50:07:3b:d9:
dd:4f:8f:88:a2:27:ec:71:30:d9:a4:88:3c:c7:11:10:1e:a2:
15:ec:24:fd:3a:7b:15:de:94:55:aa:68:ce:6a:2b:b4:db:dd:
e2:f4:b8:85:ab:1a:9c:d1:08:a2:86:77:8f:91:14:7d:2a:34:
55:62:2b:e1:b9:79:bf:95:a9:14:0e:45:ee:9d:bd:c1:15:11:
18:1d:13:0d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUE9qov9xKlXHhb3HsEhyLRuCtHFEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjEzMDExMTI0WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3NGJlNzdhY2M5YmQ5YWNmYjMzNTFlZDZjNTNmMjEzYzc5
MGVjOWRhNmI4MDY5ZWUyODRiODQwZmYyZTljZGZkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDXEkL1ywrwsOEjPZ/zYaNSFIy8CCHJq//S+PNGQbOHWJVR
9P0HwxMcZ32hASBAsIfpfSWBPv5eiYlHvHZSlZvxrT9vH0ywh5VflliZBkST1Afx
0GRC1XxHghNzYcYtEq9OoboO4LkP09o3S2MZhSaE/hvTjnyHlEt3zWhtY2Crxesp
fFoVWM0RTEIr9hxNHm1ey8R/AHVYY8hBpyTYN8flgn9Tw/9MaEpTgSmg1xRRfqlf
Ro9Ft/NLheXx6i1lSiGvmnOnOjUTAXr9RyIB8Es9mJdwtamCYs+9QOy6adAP8los
YDqTJZ+DSj3hPNNAAQjt540dIHM9ufYMun4WMcIZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUqHpGTVSc9HpW+CiQY8Evt2DQ1wYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzRiMjU0NGZiLWFhMmUtNDFmOS1iYmZjLTc4MDU5Mzc3NDI1Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAMNkiAwDQYJKoZIhvcNAQELBQADggEBAB42UzbOg6GeivA2VnftZl+qjruL
rg++VwAcUDWYelZOpQpi+/SUXOA2Zqfz8AendCDICqecFgKEbgPCQco/OmbDhbh4
MVdUGpN8+9O1xMQx/hVcFlbwDSBwRyIf5HrXxdllUd19URc2Wpsq5MFh6UleOfFs
+EyBJhj7pejIH9qFS12W6TL24gF5hFofsrgpUIRArPTZp+ewPF9MYom67+Hbyd2d
sQXL6TCwzQa6BgcfUAc72d1Pj4iiJ+xxMNmkiDzHERAeohXsJP06exXelFWqaM5q
K7Tb3eL0uIWrGpzRCKKGd4+RFH0qNFViK+G5eb+VqRQORe6dvcEVERgdEw0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:21:49 2026 by rpki-client