
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dea059a-2086-40f3-a89a-e208e1b9945b.roa
File: 2dea059a-2086-40f3-a89a-e208e1b9945b.roa (raw, json)
Hash identifier: 4AK5IEOqWAb9+woouVsOVfaF7UfIlLEXZwAccyAj1/s=
Subject key identifier: 81:67:9D:3B:A6:8A:8A:EA:1F:35:31:59:25:FD:62:3E:81:DA:C8:3D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6CA3D0FB79328E5C8D7A16F5845E92A7C4162749
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dea059a-2086-40f3-a89a-e208e1b9945b.roa
Signing time: Fri 31 Jul 2026 01:10:47 +0000
ROA not before: Fri 31 Jul 2026 01:10:47 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a3:d0:fb:79:32:8e:5c:8d:7a:16:f5:84:5e:92:a7:c4:16:27:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 01:10:47 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=ad35c4918b5f4b9e745ba93715d9f0017f976c8ad798f3fbdcde9002a8ae9515, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:c8:4a:f7:c3:e5:1a:95:3f:27:18:b7:bd:
b0:e1:6b:64:7f:97:72:36:11:05:c3:fb:6f:b7:2e:
1f:c2:f4:b4:b7:98:64:0f:64:4e:da:e8:d1:d5:1d:
e2:ab:16:f8:d3:04:ad:d6:5d:64:d3:3d:0f:2a:8f:
39:ca:ed:46:16:80:4c:ba:7c:0e:5f:1d:d5:7b:15:
11:9a:7e:d6:07:72:29:a7:1f:80:fb:7d:ef:7c:09:
01:9d:d0:d9:5c:df:04:3d:10:79:4a:07:d1:2a:50:
1c:fa:d4:a3:68:0a:e2:35:91:bd:e9:bd:2d:86:29:
63:3f:fa:45:97:67:ec:ad:5c:09:a5:e2:ba:73:77:
3a:d5:db:f3:a4:5f:eb:d0:a3:71:24:55:c9:b4:4b:
8c:a0:c6:a2:4a:40:d9:b5:30:89:33:a1:1e:d6:3f:
a8:16:f9:1c:be:2d:8c:4a:f8:da:24:f7:6e:b7:b3:
f1:43:a1:34:6c:1e:0d:15:e9:0a:f9:a0:3d:e7:21:
47:65:82:b4:0f:ec:53:fe:29:e5:88:d8:b5:61:f0:
dd:de:89:02:9b:1f:4f:fb:a6:c0:e4:52:de:60:45:
7a:1b:e5:50:13:14:ba:c3:ba:19:39:64:3d:b9:31:
cf:f3:0a:50:9c:15:69:b7:a1:9b:a7:e1:a0:1a:4b:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:67:9D:3B:A6:8A:8A:EA:1F:35:31:59:25:FD:62:3E:81:DA:C8:3D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2dea059a-2086-40f3-a89a-e208e1b9945b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.158.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:9b:78:2d:ba:04:dd:6f:07:be:83:ad:00:a0:b7:dc:00:6d:
8a:a7:58:8a:b2:3e:5b:e3:de:8a:a1:89:53:9f:3c:34:55:7d:
2f:cd:1d:dc:8e:79:7c:6a:45:8b:12:58:f6:54:d1:f8:ea:79:
65:46:27:dd:df:8f:b5:a8:a9:b4:0e:3c:7c:21:53:e4:40:21:
ba:bf:f8:ed:71:1c:4c:ee:46:e0:89:02:78:10:7c:53:a8:85:
df:72:19:04:53:31:83:bd:f3:3e:2c:68:fc:c7:4e:72:2d:9e:
79:19:28:65:d8:2a:34:0d:aa:8b:6b:5a:38:6e:34:1f:a1:f2:
56:8c:5d:ec:13:5c:c6:82:27:98:e3:0c:ac:22:61:60:9b:5b:
41:8d:00:2e:0f:af:af:c0:e4:22:13:cb:31:63:7a:d6:24:f9:
cd:8a:2c:8c:73:a0:af:35:35:ff:a3:86:a4:17:06:94:2c:7a:
3b:2c:18:60:08:22:fa:c2:aa:15:cc:43:e1:a5:2c:db:47:50:
5f:38:7e:4f:83:0b:86:6f:63:b7:05:05:b2:3d:cd:73:03:b8:
54:dc:55:ff:18:d7:b9:45:85:b5:e8:fe:ca:00:79:be:35:6f:
dd:70:8d:95:fd:96:98:3b:d4:88:2d:c7:d4:f5:90:cf:91:a0:
42:79:15:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 06:42:31 2026 by rpki-client