
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa
File: 4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa (raw, json)
Hash identifier: BWckelMG9j7KQJ8+UGf7HiozV9t0IKPl0YqQA7qBB00=
Subject key identifier: 53:32:9E:66:94:04:F2:53:B9:66:4F:6D:01:BF:9C:95:D7:BC:E5:D1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 26E963D586D8A7313929694B1A9F7814C9098F48
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa
Signing time: Sat 16 May 2026 01:20:02 +0000
ROA not before: Sat 16 May 2026 01:20:02 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 23.22.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:e9:63:d5:86:d8:a7:31:39:29:69:4b:1a:9f:78:14:c9:09:8f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:20:02 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=55cf0c0b0f0c8b40a1c893251a2bfaa22cef4d2cf6e182a08c2814a7aac11c64, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4b:01:4d:ef:03:51:7e:bd:3f:49:c8:99:f6:
57:98:31:ac:49:36:17:a4:32:85:a8:2d:92:9a:ba:
61:98:ad:1f:f2:ce:9e:09:02:c3:97:62:8d:2c:1f:
09:75:e3:b9:c0:8e:07:f9:54:ff:34:9b:5d:8f:11:
85:ff:5b:06:c8:9a:5d:b7:fc:80:d1:4d:b4:0a:f4:
61:83:eb:64:cc:8c:49:f8:7b:30:f0:b5:13:56:8f:
37:bd:bb:b9:8c:75:1b:85:d5:b5:64:81:05:59:36:
61:71:ed:97:53:1e:f3:34:e1:8c:60:15:26:7c:7e:
35:b5:23:d8:87:71:15:2b:e6:27:d5:78:2c:08:f1:
a6:b2:b0:33:c7:7c:d2:78:c8:6a:43:96:9c:3b:a8:
64:81:95:be:6c:96:a7:8b:1b:5f:d1:1b:c2:68:75:
82:23:7d:4d:08:1e:c3:a4:a6:fb:8b:86:db:23:2f:
5c:c6:98:51:f2:6b:fd:13:fc:c0:c9:f2:79:0d:f1:
e1:28:d0:f2:3e:35:69:c8:9d:cc:47:96:c1:a5:58:
64:35:ce:7a:94:c4:01:78:b4:d0:09:97:6f:9c:da:
f1:c3:7b:f5:30:f4:81:76:4b:3a:b4:8a:42:2b:47:
7c:e2:5a:6a:3e:86:c5:15:f0:7a:f0:f3:a1:5a:f2:
ef:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:32:9E:66:94:04:F2:53:B9:66:4F:6D:01:BF:9C:95:D7:BC:E5:D1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d71ada9-bbc3-41f1-b86d-df15fdacb515.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.22.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:34:91:d2:d4:98:7d:26:17:f1:e5:99:40:24:89:0a:bd:eb:
70:b9:da:42:71:42:34:6a:9a:3c:6f:7a:52:88:70:fe:99:a7:
fb:85:4d:fc:dd:e9:86:de:68:e7:5a:ae:4d:20:31:ce:b0:ed:
8f:b2:95:08:a6:86:e0:6c:f0:dd:97:be:76:72:2f:03:3f:4e:
b5:61:7b:c9:b9:2f:f9:0f:a2:a9:e2:04:21:c7:51:c7:00:fd:
b6:ae:84:80:6b:b5:73:51:c5:cb:25:12:5d:d3:99:ac:d6:aa:
2d:15:62:f5:f4:9c:0d:35:4d:a5:1b:ac:ed:8b:0f:d3:52:6e:
3b:82:39:94:90:80:ae:16:d0:a9:d0:7f:0d:a8:c7:5e:1c:d9:
d5:d3:ab:c7:82:37:36:c3:17:18:4b:48:46:bc:0e:ce:fe:79:
55:58:3a:b3:03:df:11:88:cb:ef:7f:ab:d3:2e:c4:02:2f:49:
3a:50:2f:f8:2a:a5:b2:64:bb:bb:7a:f5:6a:82:c8:6a:26:39:
a3:5c:b9:94:50:4b:7f:66:63:73:e1:c8:5f:5d:d8:27:57:44:
07:c3:cd:f4:eb:cf:3d:4b:8a:96:1f:d2:8f:10:61:6b:7a:24:
4a:24:51:d3:67:d0:c6:5a:92:4b:92:24:55:40:9f:60:be:33:
a3:e6:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:02 2026 by rpki-client