
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
File: 1b5753b0-d542-44ed-a4ed-def12dec14c4.roa (raw, json)
Hash identifier: uGTYWIjobwdXdnouN9X91ySPmFyHbRiiUJAkK36cLCo=
Subject key identifier: 56:27:D7:19:61:65:6C:0D:A9:30:59:AF:19:C2:06:20:67:23:24:67
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 38502E99F7E4DF44CE1136041A6399D441197008
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
Signing time: Tue 12 May 2026 01:40:06 +0000
ROA not before: Tue 12 May 2026 01:40:06 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:50:2e:99:f7:e4:df:44:ce:11:36:04:1a:63:99:d4:41:19:70:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 01:40:06 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=4cc75f2249f7d4ed924522b1158ec86ad14ec9ae6f1adfab8838d178438ecfe9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b6:fe:8a:ca:b4:b5:a4:b7:ed:53:f0:9c:5c:
f8:8c:6e:e6:61:b0:27:4a:fb:f0:e6:08:c0:d7:f5:
35:66:00:ab:50:a0:b6:fc:e6:a8:20:a0:f7:96:dd:
12:d9:52:15:2a:36:e1:33:fc:3a:36:5b:ef:34:ce:
2c:15:c1:b1:4e:81:1c:fa:4b:0f:18:ec:f2:13:f4:
ef:db:40:3a:23:70:b6:20:ea:7b:59:52:12:79:8c:
cd:80:50:bf:53:28:4b:d0:b8:14:63:54:aa:88:5c:
4c:b0:ac:d7:9c:13:be:d1:8f:0e:c3:7c:08:6b:23:
7c:44:28:89:23:bc:83:88:1e:e5:6d:ce:e7:20:fd:
8e:bd:ae:65:1d:ca:f2:df:35:5d:b2:51:5c:0a:a5:
ff:be:da:27:2f:af:6e:da:a6:34:9e:40:f8:0f:c7:
87:c5:9a:ea:87:4c:00:5f:b9:67:2d:e9:2f:0c:9a:
e2:13:7e:3b:fe:3d:6f:e5:d2:fa:0c:e5:34:e9:28:
1c:bd:21:b1:50:f7:99:64:27:aa:a7:7d:94:ae:0f:
e8:24:ac:55:bb:6a:2a:84:66:57:7e:d9:05:ba:f4:
3e:a0:01:3b:2d:a3:dc:1b:bc:b4:9c:fd:fe:d8:10:
f7:40:82:1f:c7:25:aa:b5:e6:f6:82:84:3e:a5:b1:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:27:D7:19:61:65:6C:0D:A9:30:59:AF:19:C2:06:20:67:23:24:67
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:25:34:77:6f:8e:57:c0:42:74:67:ec:48:d1:e9:74:17:2d:
91:06:20:55:fb:a8:43:f5:89:79:e5:18:f8:37:ab:d1:00:1d:
81:81:3c:b9:80:f5:7a:d0:90:9f:ed:5c:d7:06:f4:5a:a8:b9:
56:cb:8f:89:a2:40:59:89:a3:6a:d5:e9:70:4c:07:93:eb:7e:
78:61:12:9d:a8:0d:47:82:2a:1e:36:ce:c3:9c:a1:55:e7:53:
7c:06:a3:16:95:aa:1c:74:a1:82:59:d8:df:1b:80:ce:ae:d4:
e6:b9:f1:dc:b8:37:44:57:ad:28:20:c0:e4:84:01:8c:21:3b:
bd:6f:f7:1f:1a:11:f1:e2:33:34:d2:fa:00:bb:87:b0:ad:58:
5d:67:7f:e5:44:77:9f:b8:96:20:75:49:26:a5:ee:3f:0a:3a:
0a:dc:26:a9:5c:12:4d:77:f4:74:63:cf:43:0a:af:ab:77:79:
32:6d:ce:94:31:c0:eb:78:b0:89:20:22:24:d3:a1:e0:b1:3b:
2e:28:f6:8f:12:4f:a0:71:d0:50:f8:b0:29:c6:61:6c:a9:ca:
1a:89:34:04:98:40:10:73:c2:ed:82:8f:b7:e5:bf:37:90:7f:
63:fe:40:e2:18:62:30:d8:94:a1:08:63:c3:99:4a:80:19:2c:
de:ff:b9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:20 2026 by rpki-client