
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b13762-4678-4f16-9e39-c450b417d2c4.roa
File: 67b13762-4678-4f16-9e39-c450b417d2c4.roa (raw, json)
Hash identifier: KY5y2YlNFiSD5aTNLiXkgptygykr1b8RI+Gs9gMSexY=
Subject key identifier: ED:B1:86:B8:C4:E2:E3:5C:EE:E2:4C:BF:9C:95:51:0A:2F:87:3E:C1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 251666D71117832D1065A1FF94A713524EECE4EC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b13762-4678-4f16-9e39-c450b417d2c4.roa
Signing time: Mon 19 Oct 2026 00:50:31 +0000
ROA not before: Mon 19 Oct 2026 00:50:31 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:16:66:d7:11:17:83:2d:10:65:a1:ff:94:a7:13:52:4e:ec:e4:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 19 00:50:31 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=ad80e8cc7ccec1145389eb9c4d03ee4d840e73818c2759dd2465a228a2f8c6ec, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:bc:53:53:28:0c:26:a2:c3:61:19:95:6a:
19:b5:2c:1c:8f:e5:dd:ec:63:6b:82:e4:5a:72:b8:
c8:26:68:88:9f:f4:b0:5e:ff:ab:4a:38:a4:bd:d5:
d9:67:a8:3a:c9:d0:a9:af:a2:de:4e:05:45:82:b0:
94:c3:64:1c:99:b7:7c:90:e4:c3:f4:17:33:ea:9a:
27:0a:ea:73:42:f2:9e:5a:d1:3b:b0:66:f2:2d:07:
a7:8f:74:7e:c8:06:b8:0a:d6:f8:16:3b:6e:34:db:
b5:5c:69:4f:c4:68:ec:68:69:da:82:3a:7e:f2:ec:
f4:7f:65:b1:f2:94:de:49:c8:ab:ac:cc:fa:48:21:
ad:10:d1:8a:ca:f3:4f:ed:f9:eb:02:96:71:16:58:
84:0e:a2:3a:57:25:68:63:90:bf:41:9b:e5:bd:ce:
4c:55:72:0b:a9:13:f5:67:f9:54:15:86:8e:a8:2b:
db:aa:11:c1:53:58:68:a5:00:3b:f5:51:64:a0:60:
ca:a7:2c:9e:00:3d:91:02:04:e8:22:d5:aa:bd:a5:
b9:91:dc:19:ab:29:64:a7:e0:fb:8b:b3:a6:d7:9f:
e5:aa:74:62:33:93:ac:cb:6d:56:c9:ce:f4:38:34:
89:7b:41:7a:48:b6:95:05:2c:12:84:59:61:d7:fa:
07:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B1:86:B8:C4:E2:E3:5C:EE:E2:4C:BF:9C:95:51:0A:2F:87:3E:C1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67b13762-4678-4f16-9e39-c450b417d2c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.153.0/24
Signature Algorithm: sha256WithRSAEncryption
80:3c:7c:59:87:6d:73:26:e9:e7:11:5e:8e:84:1d:1a:6d:44:
39:58:fb:9b:47:34:cb:10:1e:7b:e9:c3:be:d0:23:2a:1b:69:
8c:63:2c:67:f4:c7:12:45:78:5b:25:3b:b2:90:69:77:df:b3:
50:75:20:74:d1:2a:af:09:1d:86:fe:75:39:0c:49:e9:a7:00:
d2:86:2e:69:84:ef:ba:2a:54:26:6e:a7:0b:c2:da:8e:7f:66:
a6:1f:d9:fe:0d:fa:2a:c0:5f:91:0e:58:18:7d:28:0a:98:53:
2f:f8:56:0d:9a:35:98:a3:e2:21:09:3d:f4:5d:7c:17:f7:ed:
d6:30:6e:cb:33:b6:e0:4a:c5:9b:23:77:7b:b7:28:ce:6d:bc:
1b:db:36:f5:27:da:aa:c7:b4:2c:c6:e2:d3:3d:3c:9a:43:e8:
1a:bf:90:9c:44:3f:a4:be:e1:eb:5a:31:e0:aa:76:39:eb:e0:
23:ef:f1:2d:f4:13:41:f8:98:59:27:f9:22:24:e3:5f:c8:00:
9b:37:fc:67:5c:47:f1:5c:b6:8c:b3:45:5a:c6:8d:df:f1:da:
6e:bb:fa:11:82:11:e6:8b:1a:ac:9d:3a:92:33:3a:bc:2f:fc:
8f:67:6b:ac:70:57:96:83:a0:b2:6a:1a:b6:b9:c4:fe:68:94:
7f:49:04:34
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUJRZm1xEXgy0QZaH/lKcTUk7s5OwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDE5MDA1MDMxWhcNMjcwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZDgwZThjYzdjY2VjMTE0NTM4OWViOWM0ZDAzZWU0ZDg0
MGU3MzgxOGMyNzU5ZGQyNDY1YTIyOGEyZjhjNmVjMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCtarxTUygMJqLDYRmVahm1LByP5d3sY2uC5FpyuMgmaIif
9LBe/6tKOKS91dlnqDrJ0Kmvot5OBUWCsJTDZByZt3yQ5MP0FzPqmicK6nNC8p5a
0TuwZvItB6ePdH7IBrgK1vgWO24027VcaU/EaOxoadqCOn7y7PR/ZbHylN5JyKus
zPpIIa0Q0YrK80/t+esClnEWWIQOojpXJWhjkL9Bm+W9zkxVcgupE/Vn+VQVho6o
K9uqEcFTWGilADv1UWSgYMqnLJ4APZECBOgi1aq9pbmR3BmrKWSn4PuLs6bXn+Wq
dGIzk6zLbVbJzvQ4NIl7QXpItpUFLBKEWWHX+gdzAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU7bGGuMTi41zu4ky/nJVRCi+HPsEwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzY3YjEzNzYyLTQ2NzgtNGYxNi05ZTM5LWM0NTBiNDE3ZDJjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsJkwDQYJKoZIhvcNAQELBQADggEBAIA8fFmHbXMm6ecRXo6EHRptRDlY
+5tHNMsQHnvpw77QIyobaYxjLGf0xxJFeFslO7KQaXffs1B1IHTRKq8JHYb+dTkM
SemnANKGLmmE77oqVCZupwvC2o5/ZqYf2f4N+irAX5EOWBh9KAqYUy/4Vg2aNZij
4iEJPfRdfBf37dYwbssztuBKxZsjd3u3KM5tvBvbNvUn2qrHtCzG4tM9PJpD6Bq/
kJxEP6S+4etaMeCqdjnr4CPv8S30E0H4mFkn+SIk41/IAJs3/GdcR/FctoyzRVrG
jd/x2m67+hGCEeaLGqydOpIzOrwv/I9na6xwV5aDoLJqGra5xP5olH9JBDQ=
-----END CERTIFICATE-----
Generated at Tue Nov 3 12:01:59 2026 by rpki-client