
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7cedeac-0833-47ed-853e-0aaeed16cf21.roa
File: c7cedeac-0833-47ed-853e-0aaeed16cf21.roa (raw, json)
Hash identifier: CpcNxUQ5PLaJSduHASpEIoyjlyXEziH89ZZ7XBRhPtI=
Subject key identifier: 47:CF:42:22:B4:86:CC:69:89:DD:22:FD:1E:90:A2:5D:DF:86:F6:E9
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6085B271AD792D01B9C9FC97017F072299E4CCE4
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7cedeac-0833-47ed-853e-0aaeed16cf21.roa
Signing time: Fri 13 Feb 2026 00:10:11 +0000
ROA not before: Fri 13 Feb 2026 00:10:11 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 13.128.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:85:b2:71:ad:79:2d:01:b9:c9:fc:97:01:7f:07:22:99:e4:cc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:10:11 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=7ce46f4e244e91191892208d470f08e6da8aa89ae8a419e5a6a22dc36595984d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c9:f9:ea:12:c1:1b:f5:12:d9:5e:6d:b4:d1:
ee:68:75:6c:a9:e2:15:d7:02:b2:ca:25:9f:4d:94:
9d:16:79:79:d7:e8:74:a4:86:f1:61:8b:45:6d:4a:
52:da:16:ea:bd:da:b2:ee:25:7a:df:2b:c3:03:a1:
00:08:00:53:2d:1c:ab:25:10:6a:e2:32:17:73:ec:
dd:f8:37:f9:3c:6d:6b:7c:b4:b2:b2:d3:33:c4:ff:
37:6d:6c:6b:78:01:bf:9c:4f:4f:de:68:06:35:d5:
3a:01:95:52:e9:f5:86:50:80:24:90:b1:04:49:be:
02:9b:a1:e2:ef:40:95:cf:b7:93:ca:2f:64:ec:e7:
dc:84:a7:d8:d9:df:39:93:03:23:ed:51:ef:04:25:
30:c3:f3:28:c9:74:f3:55:16:44:a5:71:1f:bf:7e:
02:db:e5:2f:3a:b9:94:00:d3:5b:b2:7e:16:91:9b:
ab:2e:cb:9b:f2:0e:ad:92:3d:95:cf:ac:3c:0e:84:
f2:41:86:35:f2:6d:39:c6:ea:a9:57:53:a9:27:83:
d8:21:b3:85:f3:eb:c9:fd:cf:0b:64:47:10:40:62:
c6:32:80:5a:b0:26:e5:b2:b2:8d:e7:4c:a2:2c:d3:
7b:a4:f7:90:8b:57:13:8c:6e:19:a9:55:8f:b4:c0:
2b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:CF:42:22:B4:86:CC:69:89:DD:22:FD:1E:90:A2:5D:DF:86:F6:E9
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c7cedeac-0833-47ed-853e-0aaeed16cf21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.248.0/21
Signature Algorithm: sha256WithRSAEncryption
67:50:34:cf:e0:7b:d5:1f:2f:fe:ed:a2:73:c1:b5:62:00:88:
08:24:41:9e:88:fa:4e:6c:00:55:45:61:50:c8:2f:8f:fd:ab:
99:ab:51:4b:68:7a:5e:43:a5:7b:e2:b0:32:bb:16:7f:11:63:
fe:fe:51:fd:21:c2:e2:39:72:1d:3e:e3:d9:4b:bb:bf:8a:7f:
7d:7a:47:42:61:1f:8f:d1:89:5b:fc:7c:da:5c:7a:15:f5:a2:
9c:81:ab:4a:ab:23:a4:f3:84:3a:cb:0b:50:ed:41:53:eb:df:
50:63:6a:bd:a5:76:67:9a:62:29:89:da:45:78:19:55:6c:8a:
fd:d5:d6:c5:e4:15:a6:bc:84:b5:0a:66:a8:9b:65:96:a8:f4:
0e:2f:be:c8:c5:92:34:97:15:4c:d4:61:d3:50:da:4a:7c:f6:
13:2d:84:07:94:61:28:d4:66:e6:d3:34:da:43:fb:17:90:7d:
62:88:b5:05:f4:98:ca:e8:68:cb:d5:8f:62:45:17:34:43:70:
8c:c4:94:cf:de:7b:54:d2:30:42:09:dc:a5:e8:6c:0f:f1:17:
5f:db:2b:9c:df:af:b9:39:a4:29:f7:c9:eb:d3:b2:57:63:54:
55:f6:2c:02:dd:a9:e3:fb:e3:ad:9b:63:74:1f:9b:dc:bc:f6:
dd:c6:6a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:16 2026 by rpki-client