
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9604105-f39a-4142-b995-e604d3c4813b.roa
File: b9604105-f39a-4142-b995-e604d3c4813b.roa (raw, json)
Hash identifier: dVQl2YW9ikPNntabf7APZFoPdFgo9xPvvyz2MfKIFtY=
Subject key identifier: 19:60:5B:2A:9E:0D:9C:1B:62:D5:95:7F:84:AB:D2:59:E4:AC:5E:DD
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4515E2B2005C21D113B0DE4E536CFD130EEF7D5A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9604105-f39a-4142-b995-e604d3c4813b.roa
Signing time: Tue 12 May 2026 01:21:26 +0000
ROA not before: Tue 12 May 2026 01:21:26 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:15:e2:b2:00:5c:21:d1:13:b0:de:4e:53:6c:fd:13:0e:ef:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 01:21:26 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=cdf753d06d346a6b4a6e19902b6e9d7731f76e54151719c316c499017264adc1, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:86:82:70:bc:31:a6:61:de:42:84:a8:d2:
e2:a0:a3:a2:b3:95:8e:4b:bc:49:d5:17:10:16:13:
e0:27:ff:4e:f8:74:8f:6c:ca:a5:86:a5:38:cc:01:
84:66:7a:97:c5:1b:32:14:fe:1c:9f:3e:fe:a1:46:
bf:47:cb:0c:c9:9b:05:a5:27:48:46:17:df:cc:8a:
5f:f8:8d:c7:ea:90:21:d1:3c:98:14:9f:f0:02:3e:
25:f4:80:7b:d2:4a:02:c1:c7:31:76:a5:4b:f4:6d:
bb:08:17:bd:86:2c:14:bf:df:62:5b:69:32:29:88:
b2:b0:be:f6:56:65:d4:71:15:16:2e:6e:f4:92:d9:
0a:1a:14:86:46:a3:6d:90:f6:c7:c3:0b:e3:45:88:
ef:cd:e4:4a:4a:21:65:fa:ce:9d:c4:3a:1a:35:c7:
01:3e:31:38:95:a4:70:aa:ef:1a:c8:9d:3e:94:dd:
b7:7e:7b:d2:8b:28:3f:55:a8:cf:51:7b:d6:45:bf:
ad:f9:89:48:1a:2f:1d:61:8b:e0:32:12:80:cb:b3:
c5:5b:a1:61:6a:75:c9:85:3b:42:57:d1:d0:fc:4d:
8b:2c:16:4f:9c:c6:81:cd:cc:79:98:ed:a4:b8:46:
a7:51:ce:33:b4:75:b7:fe:52:ba:79:0c:4f:44:7d:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:60:5B:2A:9E:0D:9C:1B:62:D5:95:7F:84:AB:D2:59:E4:AC:5E:DD
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b9604105-f39a-4142-b995-e604d3c4813b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.225.0/24
Signature Algorithm: sha256WithRSAEncryption
79:1e:23:15:f4:2f:f9:a0:c1:40:64:b5:0e:17:38:0a:66:49:
3c:0d:09:b9:3b:6d:90:f4:39:57:22:7f:34:e9:d9:f3:ff:4c:
6c:56:1b:f7:a9:22:81:d5:d1:6e:6b:f2:8f:d0:66:cb:b3:76:
f2:04:5a:19:a5:aa:10:a8:cc:a9:ff:dc:d5:5d:ef:e9:7e:b3:
a3:c6:2a:f0:4a:b4:97:63:86:d1:c4:e8:7b:8c:17:a4:08:bc:
8b:57:d1:ff:6e:22:00:1d:ed:35:ce:34:04:08:f6:0a:d1:da:
25:5f:5b:2a:7c:40:c8:46:2e:c8:99:29:03:9f:d5:c9:a5:14:
ef:d9:3a:f8:d3:a7:73:25:4f:c4:07:f2:ef:92:35:28:74:e3:
78:c9:dd:66:ed:1a:9d:a1:bc:c5:83:c2:a9:08:78:c9:bc:44:
2f:1a:f4:f8:6d:c8:c9:a0:b8:82:0f:07:3b:ea:ac:a9:e6:3c:
6c:9c:f5:3c:26:24:30:1a:09:da:69:fc:a1:c1:2c:9c:de:d0:
76:47:bc:63:7c:1f:61:dc:43:6a:bd:3f:19:cf:dc:64:ed:ce:
f0:06:00:0a:ff:e2:76:43:d5:e2:2f:98:83:ee:98:8f:f5:38:
65:a3:43:2d:28:a3:d9:84:c5:2c:c6:a3:0d:6e:d8:3b:fb:be:
12:49:87:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:34:38 2026 by rpki-client