
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/174655aa-3528-434c-8b76-bb186c3d5b6f.roa
File: 174655aa-3528-434c-8b76-bb186c3d5b6f.roa (raw, json)
Hash identifier: MeIf2x6XUYli5lBVjBAvKVY73KAHxUAn9//RY+dYkBY=
Subject key identifier: 88:D7:2D:67:CD:B0:79:A7:EE:C5:AB:89:28:21:47:E7:E7:08:53:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 314F79E8667DAB23B1EC55523E653425A6952F3A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/174655aa-3528-434c-8b76-bb186c3d5b6f.roa
Signing time: Tue 12 May 2026 00:40:48 +0000
ROA not before: Tue 12 May 2026 00:40:48 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4f:79:e8:66:7d:ab:23:b1:ec:55:52:3e:65:34:25:a6:95:2f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 00:40:48 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=0eb292ed84f1c33a99b4f73016097c31d8cab1cdbff2552d0d5dc7fa944f90d5, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:70:59:31:cd:16:fa:0f:84:1f:a0:c9:d1:84:
e2:c4:85:83:e9:41:c6:a4:2d:3b:84:fe:fa:3c:4e:
02:91:3e:ea:f8:e5:ee:47:89:37:70:b3:c4:b9:02:
65:3d:7e:1e:5a:71:89:2b:15:6f:bd:59:f0:67:f9:
98:14:3a:5b:a1:e8:71:55:3b:5c:31:13:e0:ba:9c:
4d:0a:6d:4b:45:91:f1:69:31:35:1e:ee:e9:f9:bc:
99:43:50:d0:ef:f1:05:cc:69:2b:22:c8:9e:df:40:
05:fa:a4:f6:51:2d:bd:69:9a:31:83:6d:a4:ec:dd:
70:b4:a1:11:48:bb:c6:1b:2a:a5:8e:92:48:77:8f:
1e:ee:e3:be:8b:90:66:de:3c:ff:ff:39:92:fe:f3:
86:f8:7d:cb:a4:f1:d5:cb:92:89:ae:62:9c:84:aa:
d3:fe:66:5a:89:e0:69:23:42:7f:da:d2:e0:ec:92:
41:dc:91:d9:ca:67:3a:f3:09:30:9a:29:b0:61:3d:
cc:5a:ec:c2:86:1b:9e:11:07:75:04:50:3b:23:27:
bc:39:7f:0f:e8:1a:7a:17:fa:b2:fe:34:41:63:1e:
f5:93:80:62:15:84:91:3d:6c:f8:ae:85:1d:c6:24:
ce:3c:9d:40:aa:0b:f4:fb:eb:ce:44:d6:10:a3:65:
07:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D7:2D:67:CD:B0:79:A7:EE:C5:AB:89:28:21:47:E7:E7:08:53:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/174655aa-3528-434c-8b76-bb186c3d5b6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.64.0/21
Signature Algorithm: sha256WithRSAEncryption
7c:51:d9:08:38:a5:e5:9b:3c:51:e6:e8:ab:f2:be:7d:7d:6d:
fc:27:2f:57:a0:24:d2:7a:75:0f:ff:10:fb:f6:15:44:5d:a5:
34:fd:4e:11:42:f0:b5:f9:1d:2a:32:e1:22:e5:c9:0d:be:ac:
bd:04:71:3c:09:32:0b:a8:bf:86:30:ee:86:6d:3a:d0:46:fa:
05:eb:d3:6e:26:74:e0:de:55:3e:28:d2:f7:cb:10:7d:f1:f1:
cd:d1:41:7f:d3:61:38:4d:e6:be:fe:b1:5b:71:b5:6a:15:21:
c5:b0:d4:03:8d:2e:a8:1b:cd:3b:e8:63:71:68:b9:df:2c:d2:
ac:38:d3:d2:c4:0d:e3:6e:bc:5f:b7:2e:22:93:de:20:09:d2:
0e:25:2b:82:b1:a9:02:71:2e:6c:11:20:75:5c:0c:84:43:5a:
89:4e:52:13:b8:d2:13:ec:da:68:4d:64:b6:30:0e:98:d0:f1:
2d:c9:a4:b5:fb:07:7b:68:1d:d1:a8:14:ca:7b:14:03:57:bf:
2b:49:fb:06:93:5e:08:a8:f1:91:e8:ad:d4:94:9b:d5:d0:6b:
f3:6e:c0:b6:68:c1:68:28:9f:f5:14:f6:a8:ae:06:8e:d6:c2:
68:41:cd:4f:60:d1:68:fa:6c:e0:d6:b9:59:f2:8c:75:bb:96:
72:4c:2d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:39 2026 by rpki-client