
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c008bed3-c855-4b6c-a4ef-5cbd1acbf931.roa
File: c008bed3-c855-4b6c-a4ef-5cbd1acbf931.roa (raw, json)
Hash identifier: pzDfPqBRJ2f60fuuuHaGAlF8+S1ViuBsiYv2ovITUjg=
Subject key identifier: 30:A2:35:79:BD:AF:4E:CD:88:C2:CB:AB:90:B9:E6:74:E9:C4:9B:7E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5ACE5F96BF76B842F3C42078CD04DC543EA2D236
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c008bed3-c855-4b6c-a4ef-5cbd1acbf931.roa
Signing time: Fri 31 Jul 2026 01:00:06 +0000
ROA not before: Fri 31 Jul 2026 01:00:06 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ce:5f:96:bf:76:b8:42:f3:c4:20:78:cd:04:dc:54:3e:a2:d2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 01:00:06 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=95e58a0b558d49c3b86187befcfe0a8c55a6edeca5e48424ac78921f060bb9dd, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:78:81:54:5c:05:43:82:77:d6:1c:a5:a3:d9:
ea:23:95:ea:fc:98:f0:70:63:56:46:05:46:4f:a4:
81:46:0c:9b:ea:0b:f5:f0:07:0b:c1:22:2a:1a:8a:
65:65:c3:81:d5:2d:c4:d5:66:c1:93:1b:d6:82:49:
6c:df:a6:92:e7:7a:d0:4d:8c:9b:1c:b5:a1:12:4d:
ec:5f:b7:ff:b4:9a:2d:f1:85:df:f8:64:ed:05:8b:
21:5c:15:1f:e5:28:fe:b0:33:1e:72:b8:44:65:72:
79:2d:95:7b:c1:43:72:2c:c4:ac:79:ab:6c:e1:27:
9a:12:ed:73:a2:49:57:e5:9f:4c:3e:ea:a9:f6:98:
2e:fc:33:11:04:4a:d4:b1:b4:28:ab:2e:d3:36:24:
d6:fd:de:80:1b:b2:1e:09:f8:13:fc:37:85:81:cb:
e4:db:73:a1:58:fb:64:01:23:b7:d5:cf:28:08:9c:
2f:c7:ad:17:a1:18:b5:37:e9:b6:0b:4b:e3:7a:49:
8f:4c:11:fd:c4:14:73:16:cf:04:ae:81:47:89:70:
92:d6:c0:7d:7a:51:c2:48:82:fd:82:35:11:ef:1d:
b9:10:8a:19:42:d8:77:04:32:7d:a8:de:3c:e1:70:
8e:08:03:01:c4:17:e5:70:9c:9b:28:d1:b9:c0:45:
51:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A2:35:79:BD:AF:4E:CD:88:C2:CB:AB:90:B9:E6:74:E9:C4:9B:7E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c008bed3-c855-4b6c-a4ef-5cbd1acbf931.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.200.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b8:af:e1:49:03:34:55:67:00:7e:80:98:90:0c:5e:c9:49:
48:45:43:50:43:21:d7:28:5a:ac:78:f9:83:a8:4f:1c:8e:ec:
79:58:ae:a7:fd:63:bc:d1:4f:dd:fa:62:9f:fb:b9:f5:7c:55:
9d:02:85:5f:b3:72:6d:56:6a:07:21:2f:88:8c:8b:92:14:3d:
2a:ec:23:c9:08:f1:8e:a8:4d:f8:89:8b:4f:b4:6c:35:80:74:
0b:ba:1b:e8:26:7a:9f:82:14:d3:92:20:4b:a6:48:c0:16:3b:
30:28:88:96:6b:c8:61:d3:f1:45:21:c5:cb:0c:7b:0b:9a:ac:
ed:1e:a2:c1:86:f4:ab:76:f0:09:04:79:62:aa:b9:bd:c9:e4:
2d:9b:a7:f0:11:08:18:11:4d:ba:d9:40:3a:38:eb:c5:6c:76:
cc:46:3c:b8:77:88:fe:1d:96:b7:bd:56:43:18:4e:c9:4a:8e:
da:87:1d:98:f4:31:7a:54:a5:79:b4:56:f8:90:bd:db:9a:62:
84:a8:9e:e9:53:43:61:94:a6:c0:aa:f5:f8:72:0e:22:31:22:
19:4a:98:85:b1:5d:94:4f:ce:e6:62:84:4a:8c:a9:7b:29:16:
d9:f8:68:98:ff:c2:d7:64:18:46:e1:5f:2e:44:3f:c3:49:01:
41:58:d5:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 05:40:24 2026 by rpki-client