
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d5a85e5-4a16-4d59-a391-e375b6ebe6e4.roa
File: 8d5a85e5-4a16-4d59-a391-e375b6ebe6e4.roa (raw, json)
Hash identifier: 9v72jmFglHyrTHiGmrmdK88IHL0IFzEEayXQUiJhq4Q=
Subject key identifier: CA:CC:D8:EA:E2:FE:5C:FB:A4:4E:F6:58:A7:E9:2B:13:65:F1:A5:15
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E4CE8EF36B74E80070839E70202946A590E9B33
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d5a85e5-4a16-4d59-a391-e375b6ebe6e4.roa
Signing time: Fri 02 Oct 2026 00:00:12 +0000
ROA not before: Fri 02 Oct 2026 00:00:12 +0000
ROA not after: Thu 31 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4c:e8:ef:36:b7:4e:80:07:08:39:e7:02:02:94:6a:59:0e:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 2 00:00:12 2026 GMT
Not After : Dec 31 23:59:59 2026 GMT
Subject: serialNumber=fbff51958100dc30c45babe05516ab6ffa926681e621ffb784ef9bff023133cf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:99:14:c8:10:c4:37:d1:ba:11:54:96:73:
2d:05:0f:d6:46:10:55:6c:e8:94:22:ee:ec:2f:76:
18:ce:a6:6a:b4:cc:91:24:a3:59:c4:16:ef:3a:81:
e8:3d:d7:e0:48:91:d1:1c:11:14:50:19:11:bb:f0:
20:de:b6:81:83:30:9c:01:99:4d:91:d8:8a:38:ee:
d4:8e:b1:8a:d4:62:e6:b7:bf:7b:56:56:1e:e6:b1:
11:ce:c3:6c:b7:4c:f7:ea:ee:2f:c6:29:45:c1:68:
cc:6f:a9:a0:7a:c9:9e:69:b0:5d:97:79:58:71:b2:
df:68:fb:b4:98:54:21:bc:9c:91:20:4d:af:db:22:
6e:e5:2e:e2:a8:be:b1:39:a8:1c:c7:05:1e:71:9e:
c4:98:1e:d4:ee:80:b4:03:0f:d8:7a:6b:3f:7b:fa:
07:f8:05:43:dd:b2:9e:89:33:e9:4f:fe:e5:9b:53:
93:e7:04:36:24:3f:54:b0:51:e1:60:33:12:45:a6:
e9:af:42:e2:bb:18:0a:2a:1f:8a:28:e1:45:50:23:
77:0a:d3:f8:e8:b1:9d:8c:93:14:54:b7:f2:fc:01:
e4:ba:b7:1a:48:c1:22:21:38:47:56:11:e1:c9:4f:
1d:33:f2:46:ba:9d:fd:62:b4:b7:74:32:a9:3b:58:
13:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CC:D8:EA:E2:FE:5C:FB:A4:4E:F6:58:A7:E9:2B:13:65:F1:A5:15
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/8d5a85e5-4a16-4d59-a391-e375b6ebe6e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.46.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8f:82:46:41:8b:28:1b:d2:21:4c:5d:9d:5b:95:ca:6d:a0:
69:5b:12:0a:b0:05:2e:f1:5f:a1:24:ac:94:74:10:35:21:07:
50:e5:08:06:b7:cd:05:5e:6e:18:cf:da:53:21:1a:7d:70:0f:
b6:ee:a8:38:b4:19:2d:76:82:09:a6:f0:c6:19:74:ad:9f:bf:
38:fe:47:eb:b6:21:44:01:05:db:73:1e:d2:8b:4e:90:95:dc:
7a:e5:e3:19:6b:af:71:89:ff:b7:7c:db:ad:af:6f:b6:99:e5:
97:92:f8:5e:41:02:59:48:d8:c8:d8:9b:8d:f3:0a:9b:30:a7:
46:db:cc:02:7a:98:ad:b5:74:01:f2:f6:58:ae:69:82:13:6f:
82:74:85:89:fb:76:e4:c1:7b:f8:d7:fb:41:38:0e:62:98:ac:
ad:a3:95:25:23:27:e6:9d:6b:fd:d5:db:a6:b3:b1:1d:f9:47:
2b:a2:bb:b7:8f:ba:68:a3:15:98:b9:d7:d3:94:3f:00:c3:8a:
bc:b7:cd:c3:7f:99:0f:57:b5:b9:66:23:21:07:0a:47:79:bb:
57:c2:ed:37:a9:66:bf:da:70:17:16:b8:1b:27:43:77:b0:a6:
13:b3:08:73:89:d5:15:7a:b3:4c:44:fa:f7:11:44:a7:58:8b:
31:bc:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 18:50:53 2026 by rpki-client