
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db8932a-8080-4c16-999b-564d25522124.roa
File: 0db8932a-8080-4c16-999b-564d25522124.roa (raw, json)
Hash identifier: AXb0xZlhDjAhBwE9KWRDBqbGTqGfTcAFbCuXy4UoSsk=
Subject key identifier: AF:70:E0:F5:E0:C9:DD:92:07:2D:44:C0:71:A6:5C:EA:1F:47:5F:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 63FDF026E4721C60F338AD6B223263DC6C033429
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db8932a-8080-4c16-999b-564d25522124.roa
Signing time: Tue 12 May 2026 01:30:47 +0000
ROA not before: Tue 12 May 2026 01:30:47 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:fd:f0:26:e4:72:1c:60:f3:38:ad:6b:22:32:63:dc:6c:03:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 01:30:47 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=7919061718acabbb6d4e45b5c5ea07cf51382c2afd86067c7546936b7f5695cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:59:b0:29:11:2e:86:fc:be:f8:43:73:3c:
b6:fb:53:7a:51:7b:fc:a7:9c:b0:7e:e3:27:2b:2e:
de:1a:dc:93:2d:46:32:94:7b:60:d1:27:73:09:d3:
94:66:db:1a:28:49:bf:64:f5:21:1e:39:ca:40:2a:
b5:a2:82:42:17:d4:4f:02:96:c4:72:25:ab:2f:4c:
8e:31:99:33:86:e4:ce:3e:28:4a:27:89:56:02:fe:
ba:f0:64:ef:eb:cd:91:cc:fb:87:6b:0d:29:4c:ac:
77:94:48:13:90:e8:8e:c3:6f:46:74:f2:db:15:d6:
1d:20:e9:44:a4:0b:d7:f9:a6:1c:a6:f1:db:0e:f6:
fe:26:36:37:20:55:3d:93:b4:8f:c0:90:83:92:3b:
e4:71:cb:b5:85:3a:9a:69:b8:ae:ba:1c:81:2b:1b:
c9:ef:43:79:21:90:94:0b:f3:64:8c:f7:2a:a6:54:
51:bb:e4:72:a0:0e:3f:14:e9:bc:ff:24:fb:4c:b0:
d0:bc:65:06:24:2a:42:6b:59:0e:80:c8:0f:67:9d:
29:54:e3:e6:96:7f:78:0c:4f:8a:24:3e:60:af:f5:
ba:9e:54:58:58:d4:b7:3a:35:97:16:7a:be:d7:22:
96:b9:1e:15:d8:68:41:e6:fd:4c:d3:e6:99:1c:64:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:E0:F5:E0:C9:DD:92:07:2D:44:C0:71:A6:5C:EA:1F:47:5F:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0db8932a-8080-4c16-999b-564d25522124.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.220.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ff:f5:a8:52:c0:9d:ac:1c:c6:3e:c5:30:f0:55:67:a7:eb:
e5:90:9a:e3:a3:40:a8:88:f4:7f:0a:a4:fe:e6:70:fc:e2:c0:
c1:66:ca:44:68:48:e6:65:4e:81:62:ae:22:2d:10:d2:84:48:
c0:c9:f8:90:ef:39:cd:bd:0c:59:00:0f:d4:17:86:7b:eb:a3:
9a:42:4c:3a:5f:a4:df:cd:27:49:7e:63:75:b2:bd:85:64:c1:
fd:f1:1e:c2:e4:08:90:03:c8:79:4f:3e:4d:95:dc:07:0c:2c:
28:c4:63:d3:fe:56:27:27:86:58:78:f3:0d:64:cc:40:26:22:
8f:3b:a7:32:cb:15:68:bd:f5:3f:cc:76:5a:7f:dd:45:29:68:
70:94:83:f9:7b:f0:34:d5:91:a7:aa:39:61:35:cd:27:0f:c1:
5b:6e:1f:e1:10:a8:6c:32:72:06:c4:23:79:d3:29:a0:3b:8b:
fd:7d:85:af:cf:ed:01:cd:ed:23:ad:7f:8c:89:d6:1f:5e:1f:
12:28:6b:73:86:94:42:0c:4f:7e:2b:15:db:27:5b:4c:d4:20:
a8:b2:65:4b:bc:b6:53:ae:c9:6e:70:ed:4e:74:68:e2:26:e7:
cf:2f:f0:f6:04:f9:d6:46:30:e0:2e:4f:05:24:79:a7:e9:a1:
20:bb:80:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:34:46 2026 by rpki-client