
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa
File: 132f73c3-a546-4296-a702-8a3aab70f706.roa (raw, json)
Hash identifier: AfduxWuHPSuQKiyeQuz7Y3RDTFqjfNGBegO7Vr9yR40=
Subject key identifier: 8D:45:89:B3:31:FB:0F:AE:C0:46:C0:C9:D9:74:B1:D3:06:F1:B2:1A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 55A2B9F8268784823E0E0CAC2DD69B51E1F23580
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa
Signing time: Wed 18 Feb 2026 00:20:34 +0000
ROA not before: Wed 18 Feb 2026 00:20:34 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 121.93.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a2:b9:f8:26:87:84:82:3e:0e:0c:ac:2d:d6:9b:51:e1:f2:35:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 18 00:20:34 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=a2c88dee37e9a52e9059a375f6ebb66efd66d9651aae269deacaf1139cb7f802, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:1e:4b:40:93:b7:90:3d:bc:52:85:22:70:
04:e3:ad:2e:ba:05:2f:6b:f7:c0:22:2f:a3:e6:93:
32:13:e0:1f:2b:58:eb:75:86:27:18:e1:7b:54:2b:
da:f0:dc:ba:fa:0e:1f:ba:ca:ea:71:b0:28:91:69:
49:af:1f:90:c5:e1:af:c4:c3:5c:af:9c:cd:b1:8b:
42:d9:50:ec:b4:ac:76:3d:0e:5d:d6:b3:84:8a:74:
e4:2c:63:42:16:c9:af:fd:6f:e3:3e:ef:01:a8:68:
e8:19:13:d6:ec:ad:f1:58:07:9c:f9:03:d7:40:e0:
0d:5b:9d:4b:32:b6:7e:40:7c:75:8e:74:47:2a:b2:
5d:6f:85:5e:1a:0e:61:c8:c3:a2:f3:9b:32:82:23:
b6:86:5a:9d:83:e7:c3:64:35:aa:94:d5:44:be:70:
38:9b:7d:bc:f0:64:5e:89:1b:f5:bf:86:28:a1:44:
f8:e1:4e:3a:64:57:fb:ef:de:a2:9a:98:74:d2:11:
f1:98:8c:27:2b:f1:ee:ed:3b:c4:42:2a:80:ab:d1:
a5:37:c0:ac:9a:19:07:d2:8d:d0:ab:a5:a5:45:45:
f7:4c:ae:99:79:ed:28:e7:26:83:d7:92:5f:c0:87:
cb:c9:cc:db:d4:cb:79:13:f4:d9:2b:43:e3:67:57:
12:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:45:89:B3:31:FB:0F:AE:C0:46:C0:C9:D9:74:B1:D3:06:F1:B2:1A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/132f73c3-a546-4296-a702-8a3aab70f706.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.93.0.0/17
Signature Algorithm: sha256WithRSAEncryption
7a:46:d7:73:72:b8:31:34:01:4a:71:de:99:80:b4:11:f2:3c:
f7:0a:e3:5b:4d:1b:df:de:a9:62:a2:e8:e9:86:5d:31:8f:f9:
2d:15:35:ce:35:14:cf:30:19:e3:c8:e1:aa:43:e3:06:68:25:
64:55:c8:5b:01:56:84:11:72:e8:90:ea:ed:22:c6:05:42:c5:
dc:3b:be:c6:29:5c:a3:6e:01:c4:52:2a:d6:41:c0:cd:19:e3:
b1:0b:15:91:23:e0:b0:52:55:9e:f7:e9:88:24:f1:38:c2:c7:
62:af:03:8a:63:8b:e3:44:be:b3:57:48:11:38:ca:d7:dd:3b:
10:f6:86:44:4f:cb:c6:dc:42:ef:5b:3c:5c:6a:87:af:35:b6:
34:2a:a4:03:5f:32:66:e4:90:8e:68:70:8f:54:f7:2f:27:16:
27:ce:7e:bc:10:ef:dd:f7:55:22:fb:70:2b:f9:9a:0b:bf:36:
58:56:29:26:4a:ee:64:34:66:be:05:10:88:ac:10:a1:fb:0e:
52:07:d6:73:b0:52:d8:50:c7:57:0b:ee:4d:18:48:ee:63:44:
02:62:42:b1:33:b1:d1:25:ed:a2:72:3b:18:28:79:63:d0:77:
f0:b4:bf:1d:96:44:17:95:53:07:6a:2a:8a:79:79:91:af:9d:
ef:3e:65:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:33 2026 by rpki-client