
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d44ff17-5bc1-4611-8a19-bea766316aca.roa
File: 4d44ff17-5bc1-4611-8a19-bea766316aca.roa (raw, json)
Hash identifier: 8tDjvalLzt4wGRzQ4S1ymo0If4SxAr0Ad3szRHLwOec=
Subject key identifier: CE:E5:57:C7:72:01:D5:A7:D0:5D:55:D1:95:CB:EE:B3:32:1C:B5:E8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5731C9DD0F9A5B5C695B0AFE00424EDFCE8EEAF7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d44ff17-5bc1-4611-8a19-bea766316aca.roa
Signing time: Fri 31 Jul 2026 01:20:57 +0000
ROA not before: Fri 31 Jul 2026 01:20:57 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:31:c9:dd:0f:9a:5b:5c:69:5b:0a:fe:00:42:4e:df:ce:8e:ea:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 01:20:57 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=b9ebd731bb42fa4939bf794781bb7475eff46117fa779ae45be58ce0022a871c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ee:72:24:11:c0:95:5d:b1:f5:1c:58:38:13:
65:e6:50:ef:11:7a:f2:5b:01:93:f1:5f:b3:e2:dd:
94:4b:36:da:4c:06:0c:39:1f:a2:8d:3e:b2:be:14:
c4:4e:7f:b6:69:6c:e9:e7:9a:3c:60:1a:3b:db:a6:
ef:0b:bb:60:9c:d3:c4:c3:a9:74:b6:75:cd:37:f5:
74:ab:93:3d:99:95:20:aa:0c:5e:41:78:c7:34:2d:
69:17:6e:07:30:a9:7b:61:bf:bf:a4:bf:26:c5:b2:
94:ea:34:22:58:89:b1:7d:39:df:2e:7d:99:ea:b6:
28:56:8d:9d:87:65:89:10:8f:88:7a:3e:3a:62:ad:
80:46:71:0a:3b:83:db:3d:6c:f4:bd:f9:26:60:c0:
91:19:7a:a5:86:5c:e1:46:84:b4:26:0b:01:ab:8b:
38:01:c6:32:fe:17:5e:35:84:ad:9c:fb:b1:72:9d:
9d:e8:dd:58:9a:4c:82:0b:22:65:38:31:95:e2:f4:
9f:51:c0:50:de:0e:f4:24:04:cf:85:6b:e0:1c:f6:
fb:34:25:80:0e:d9:95:cc:cc:bd:64:21:94:e7:d2:
b1:c2:1b:22:6f:7a:ec:d9:b2:51:95:44:a5:00:b7:
ad:5e:90:df:13:e1:34:96:18:41:68:61:c6:81:10:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E5:57:C7:72:01:D5:A7:D0:5D:55:D1:95:CB:EE:B3:32:1C:B5:E8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4d44ff17-5bc1-4611-8a19-bea766316aca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.236.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9d:9b:15:3e:5d:89:b9:ec:07:fa:9f:e2:36:37:bc:a9:c1:
99:68:19:e4:8d:4e:84:33:2d:d8:b4:6f:c3:6d:df:0e:19:c6:
6e:88:64:7d:34:7a:18:cc:2b:be:58:cb:c4:8c:b0:70:7c:42:
8a:32:96:50:b7:a0:0e:7f:3d:bd:59:c9:19:52:b6:75:07:2e:
83:ed:6e:20:cf:5f:3d:87:f1:8b:ac:f0:7e:3e:d7:20:99:86:
3d:ce:b1:a7:13:c5:8a:e5:63:bf:c1:da:87:a7:ab:1c:c5:27:
6a:cf:6e:d2:41:4d:e2:ce:7b:87:c8:63:43:21:07:d9:2a:81:
80:07:54:08:1f:6f:69:9f:2a:02:86:94:f3:1d:c4:72:2d:c3:
fb:c2:80:0f:df:47:23:a6:28:d2:25:ce:5c:73:9d:6a:e0:d9:
fe:27:bc:fb:3f:1b:65:13:22:ee:52:57:ff:c2:aa:cd:0e:0c:
e9:1a:ac:d1:8d:6b:a5:be:42:bb:91:7b:4c:1c:5c:6c:75:da:
e8:af:39:2d:85:50:2d:db:14:ce:a5:63:58:50:d9:0c:38:a7:
03:b0:2d:68:73:cb:24:8a:c3:f1:5b:fd:1f:0b:9b:38:e0:42:
a4:72:75:b6:9a:6d:22:9f:10:c4:61:38:59:4a:dc:d8:8d:20:
0a:66:63:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 13:23:57 2026 by rpki-client