
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a486fcb-a78d-476b-bbf5-1401a111808f.roa
File: 3a486fcb-a78d-476b-bbf5-1401a111808f.roa (raw, json)
Hash identifier: uR18hxzA4KhFAWulri4za7tvPt3tymTObXUMoi+0H54=
Subject key identifier: E1:99:BD:59:C6:A2:73:C5:52:F2:17:EE:6B:53:72:17:92:AD:9C:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6FC3D2FA9DBC940AC71AF55CD9273F6BC7C11224
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a486fcb-a78d-476b-bbf5-1401a111808f.roa
Signing time: Fri 31 Jul 2026 01:31:43 +0000
ROA not before: Fri 31 Jul 2026 01:31:43 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c3:d2:fa:9d:bc:94:0a:c7:1a:f5:5c:d9:27:3f:6b:c7:c1:12:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 01:31:43 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=13d1535de1e4266bc789c78d234a274237ca2a7f22402077b2fbc9ca6c4717e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:93:49:96:d8:56:34:c3:48:4e:33:e0:4a:
1e:08:f7:e2:3f:cf:34:d8:02:da:b2:b9:84:4d:b0:
97:96:d9:77:10:a5:19:af:43:9a:51:3a:2b:1a:97:
74:e6:ea:2b:d2:8a:71:da:ef:d0:bb:40:22:ff:54:
b6:0f:d7:82:8f:85:3f:4e:8e:8e:67:b6:f2:cb:b9:
46:55:a2:28:4d:5d:6c:7a:7b:d7:88:9d:3a:f9:e0:
b1:02:eb:2c:26:0e:8d:f3:40:81:5a:fc:b3:a1:6b:
49:3f:d9:a1:4d:7c:52:d1:e9:75:fe:1d:c1:14:0c:
70:e7:dd:17:c3:b5:1e:74:eb:f2:d3:34:ca:f1:9d:
c3:f2:9b:e6:29:83:b0:e0:83:cc:53:ed:94:a1:77:
db:e6:10:1f:1e:d1:62:ed:d2:27:6c:50:d9:23:5a:
78:37:c7:1b:ec:43:46:46:a8:c2:ca:b7:ef:d1:77:
5f:16:74:62:b6:72:5d:f1:58:12:58:15:5a:4f:58:
2d:e0:24:d9:cf:28:a6:98:7f:87:c9:63:09:cd:c9:
af:f3:0e:d9:eb:03:15:ad:ec:7d:33:4a:87:ae:5b:
90:1f:e2:c3:ed:d2:5b:28:21:eb:56:87:5d:ea:44:
b1:2c:70:04:3e:c7:69:f0:88:98:f4:13:e0:c8:36:
12:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:BD:59:C6:A2:73:C5:52:F2:17:EE:6B:53:72:17:92:AD:9C:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3a486fcb-a78d-476b-bbf5-1401a111808f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.71.0/24
Signature Algorithm: sha256WithRSAEncryption
54:70:c9:09:3d:8d:13:03:86:2d:75:a1:0e:ce:04:df:e2:cc:
f4:08:8a:be:e7:01:98:31:28:f2:90:0f:93:fe:f0:2c:a2:fa:
88:51:c1:38:a4:e7:7f:7b:7b:dd:9e:0a:13:05:ab:05:fc:fa:
c6:80:8b:41:55:9f:83:20:58:32:6c:1b:ed:f5:36:b2:02:9b:
be:18:75:60:f9:1a:dc:97:85:e8:e3:83:b6:5b:5b:53:e6:86:
90:a4:07:20:fe:4b:2b:34:e2:e8:42:8a:7c:f9:fc:9b:ac:7c:
14:95:83:d5:ec:34:94:c3:26:ba:82:09:39:01:5d:7b:36:54:
b8:c4:8c:f8:0d:6e:1b:ed:f1:c8:24:f5:19:52:cb:44:6e:08:
e8:3a:0b:6b:e7:e3:06:d3:bb:b5:4a:70:0f:bd:a4:78:f1:b0:
8a:e7:68:f3:a0:02:ed:c9:23:be:ee:1b:c3:43:b2:bd:20:32:
5f:31:b9:d7:bf:63:13:0c:2e:ad:18:ad:01:c1:1e:13:4e:21:
3d:ad:88:d4:f8:d3:a3:a0:27:85:5c:9d:6a:f8:9b:a1:0a:77:
4b:e0:3c:70:0d:a8:ea:7a:52:d6:1e:c6:0f:a6:d9:ab:af:a3:
32:21:83:1c:28:ea:b1:ce:1b:90:5f:11:22:68:c7:3b:77:09:
00:ca:19:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 06:53:19 2026 by rpki-client