
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa
File: 42b647a3-df86-48ab-9aef-85d200253272.roa (raw, json)
Hash identifier: 3xBktT3Y/XU6lJaD8mvxbaJ0Qw26ZKDnFPqfBk8CG/w=
Subject key identifier: 6F:44:DA:91:A3:38:FA:CA:A1:05:FE:83:11:1E:1F:61:E2:5B:16:AE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 703298A2B1A5B4EA0BCE46F6B611A80703677402
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa
Signing time: Mon 19 Oct 2026 01:10:09 +0000
ROA not before: Mon 19 Oct 2026 01:10:09 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:32:98:a2:b1:a5:b4:ea:0b:ce:46:f6:b6:11:a8:07:03:67:74:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 01:10:09 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=88c0460303f2eff2a18593db96ae4480c55eee26df28697ad2d0d28df5de628e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:51:b3:67:aa:30:cf:1c:f2:88:98:2b:1b:13:
f8:2c:c5:99:e3:2a:5b:6f:7e:c4:85:7f:d0:48:36:
5b:af:9b:82:54:6f:21:44:b9:2b:ce:b4:e1:e2:57:
5e:88:ce:bb:25:92:09:0d:66:21:6a:09:c4:fa:b0:
98:33:88:f3:45:27:99:60:94:45:ab:6f:a4:b8:cf:
19:98:2b:80:93:c9:14:4f:12:7a:f0:60:85:da:34:
e9:14:cb:ba:66:99:6d:fa:7a:24:9d:27:2a:0e:f7:
57:c0:27:bf:b3:88:04:e7:c9:09:98:5b:66:96:b8:
e3:48:98:ad:55:12:4e:35:2b:c4:5a:c0:75:75:88:
c8:fd:0b:5f:c1:c3:21:cf:f1:c3:33:43:de:23:85:
03:f1:95:94:89:14:65:a5:a9:03:93:72:d5:e7:7b:
26:80:56:13:67:0f:ad:af:79:fe:cc:f6:3b:05:64:
d0:7e:0f:03:39:86:6a:f1:75:f8:bc:5a:08:a7:ac:
0a:52:9b:95:57:35:12:0c:12:b8:a0:23:7e:21:3a:
0c:ec:6d:10:53:2d:30:e6:4b:52:9a:21:22:18:2f:
37:90:db:c1:f1:27:aa:a9:b2:e7:56:b5:0e:83:22:
f7:92:cc:ee:56:df:b1:95:21:e7:25:c2:ab:81:47:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:44:DA:91:A3:38:FA:CA:A1:05:FE:83:11:1E:1F:61:E2:5B:16:AE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42b647a3-df86-48ab-9aef-85d200253272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.67.0/24
Signature Algorithm: sha256WithRSAEncryption
10:da:6c:27:a5:84:ea:83:d1:39:b8:73:a0:23:34:66:76:97:
6d:34:38:d4:18:73:d9:c9:50:45:a8:55:be:ce:c2:07:01:f5:
b1:47:98:14:53:8d:c9:d4:ef:6b:92:22:42:25:b1:5a:14:ef:
50:bc:38:30:47:a1:99:e1:4f:c2:25:32:83:7a:6e:cc:7d:cf:
70:9f:99:3b:84:fe:87:87:5c:cd:c6:e4:37:de:a0:5a:4f:f8:
45:75:16:28:49:d1:dc:94:54:8f:1c:a2:51:3c:d2:21:a0:69:
ed:fc:55:63:4b:cf:f2:d9:61:54:64:51:fd:fa:49:5c:af:bd:
2e:cc:85:2e:4b:24:f6:02:f2:ee:6d:d2:f7:97:5f:00:24:16:
c4:e4:a9:c3:b3:25:9a:42:78:66:2d:7e:94:a5:a5:79:fd:99:
bf:c9:a7:c0:a7:83:28:94:24:2d:f4:08:57:90:25:18:45:23:
75:81:11:03:02:e8:2e:bc:d6:af:36:a1:c4:99:bc:d2:1b:4e:
78:a3:a1:b1:d8:b5:07:df:4e:d8:c4:9e:3f:b9:8e:92:1b:f1:
2b:02:af:ab:43:98:2f:73:d6:fd:7f:db:6e:8a:99:cd:0d:c6:
f7:3c:7e:e9:4e:eb:69:c1:3b:32:4d:bc:2f:3e:b5:bf:0a:3e:
41:04:82:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:11:07 2026 by rpki-client