
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4528781c-1d52-4c07-bfa1-851c834694e5.roa
File: 4528781c-1d52-4c07-bfa1-851c834694e5.roa (raw, json)
Hash identifier: EIlHL2MvybhPeWaF6C/fp09iTO9MPHFtp4qVdPxKUg4=
Subject key identifier: FC:EC:72:6A:CE:DA:C0:4A:CE:FE:D9:1A:64:13:96:68:AA:8F:4D:66
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7E27ABD075EC01BA79CAC5D0261D975C2DA13D82
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4528781c-1d52-4c07-bfa1-851c834694e5.roa
Signing time: Fri 31 Jul 2026 01:01:26 +0000
ROA not before: Fri 31 Jul 2026 01:01:26 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:27:ab:d0:75:ec:01:ba:79:ca:c5:d0:26:1d:97:5c:2d:a1:3d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 01:01:26 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=e93131dc1304871e0eae9b70041297d3d09b50aa05804815700caebb2332f031, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0a:f6:6c:6b:40:b0:86:f4:50:d9:88:8c:8e:
f8:d5:d2:31:a5:50:df:47:b1:c5:05:3c:25:1d:33:
fe:15:0f:c9:9f:d8:dc:21:e5:50:ad:dd:14:e1:e7:
9a:9c:79:34:cd:ba:6b:8f:78:fc:ec:02:ed:3b:11:
f3:e3:2f:e5:8d:28:2f:07:5a:c1:85:52:c9:96:d4:
98:0a:e4:f0:7a:f7:c7:68:2c:d5:3e:a3:e2:5f:18:
43:40:10:e5:96:03:c8:c3:d1:d3:52:6f:e6:e5:34:
86:c5:9f:8f:0a:59:31:d5:8d:cf:e5:29:9c:11:62:
ab:ea:50:d2:63:38:82:ed:51:60:a8:4a:19:6a:14:
92:09:27:e6:1a:ea:26:c1:f7:08:d7:d2:e8:e3:a4:
f9:06:0a:83:c4:d4:cb:f0:34:80:7e:47:02:77:90:
5f:33:1d:ca:ef:3a:6e:b4:cf:81:e5:9d:70:8b:3d:
36:d3:29:e4:b8:2d:2c:7c:78:28:a5:b1:10:c6:5b:
c3:3e:14:d4:a6:7f:7c:18:fd:eb:f5:74:1b:03:4e:
fa:c2:69:50:b3:27:d2:06:4a:04:fa:84:36:dd:97:
e1:6e:f5:45:86:ed:e5:a2:d2:e1:f9:7d:79:10:57:
fb:6d:50:ae:e2:77:13:8a:a3:aa:bd:ec:e3:28:3c:
81:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EC:72:6A:CE:DA:C0:4A:CE:FE:D9:1A:64:13:96:68:AA:8F:4D:66
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4528781c-1d52-4c07-bfa1-851c834694e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.206.0/24
Signature Algorithm: sha256WithRSAEncryption
29:37:02:5f:a2:eb:93:75:ad:54:c4:1c:12:8a:a4:cb:d8:08:
33:2a:43:fd:49:c0:4d:47:8f:60:3a:41:8b:07:bc:87:94:4c:
63:8b:e1:55:6d:68:06:be:b9:8a:71:01:66:f0:b8:ac:eb:7a:
77:3d:54:16:4b:e5:31:c3:f2:54:14:c0:5c:77:d8:42:62:f7:
35:84:1b:82:53:d4:5a:38:7f:8e:a3:e1:98:23:cd:b5:46:93:
a0:23:f2:93:23:87:07:ae:8f:0b:ce:59:b1:18:ee:9a:d5:ec:
50:f6:10:1c:98:fe:e6:4f:aa:f1:e4:c7:27:00:59:a0:ec:60:
f5:b1:82:8d:af:3d:61:02:db:af:b6:55:24:0d:fd:1d:02:ca:
33:fc:07:dc:e9:88:ad:f6:0f:ef:25:f3:b4:02:0b:ba:19:7c:
3b:14:a6:ee:58:a7:33:53:6b:f0:5d:1b:14:d2:bb:71:0f:bd:
02:7f:c3:a6:21:16:fe:e9:ab:c6:83:a6:bd:e7:f1:b1:da:30:
88:68:41:40:96:b5:25:04:8e:ad:e2:6e:b9:fa:08:62:0b:5b:
64:31:f4:49:ab:54:f7:d7:f2:79:e0:26:52:84:11:f6:4d:50:
01:9a:2a:6d:12:7f:18:1e:f1:40:dc:06:7f:4d:a1:b6:62:d2:
26:50:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 12:47:15 2026 by rpki-client