
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16889b9f-4802-4878-acb6-30fbe113411c.roa
File: 16889b9f-4802-4878-acb6-30fbe113411c.roa (raw, json)
Hash identifier: 4S1BbZVsSEd9+lcXNPh35Ea260vaer8KX4JrTTDWyFY=
Subject key identifier: 8D:66:2B:A9:C4:72:6C:BE:E8:AD:1E:81:A4:7F:F8:F3:E3:E1:61:DF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 154C9E463DDBB3219149512EE8AF4D22C19462C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16889b9f-4802-4878-acb6-30fbe113411c.roa
Signing time: Sat 21 Feb 2026 00:51:05 +0000
ROA not before: Sat 21 Feb 2026 00:51:05 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4c:9e:46:3d:db:b3:21:91:49:51:2e:e8:af:4d:22:c1:94:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 00:51:05 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=9b0ac3f72e2fd128fb2376bafc8356ca527e153fc3087603fff91ac45c88345d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2c:84:0e:93:d6:fa:e5:c3:87:f7:d0:fd:f7:
4b:82:0b:15:48:c1:16:f1:a2:42:9f:6a:b9:b4:a2:
a9:91:56:5a:fc:e0:93:14:81:ed:31:86:4a:32:1a:
82:fb:f9:1a:c7:b8:8d:34:8e:0b:aa:4e:df:f7:b0:
80:d4:7d:60:b7:eb:e0:84:a9:df:f0:68:56:14:51:
4a:72:1e:c3:7d:e1:10:f6:4a:fe:7b:61:01:85:4d:
ba:c7:c7:0e:6c:1a:87:6e:a1:c1:92:c6:fa:6f:df:
f8:19:57:21:d1:cd:45:0a:99:e7:19:05:18:65:c6:
b1:29:81:6d:dd:36:19:a0:a9:0d:c4:bd:53:7d:d0:
f4:08:10:18:b4:a5:29:fd:36:a6:47:e2:4b:e3:d5:
50:07:0d:5f:ed:4e:9e:a1:57:43:cf:28:c3:5f:00:
a0:f5:9f:c5:b4:c1:20:cf:7f:2e:04:e3:08:91:fb:
8a:f6:f8:b7:1c:f4:42:cd:73:01:85:71:95:4a:39:
40:67:92:ca:17:14:a1:9d:51:44:7e:6f:5f:5b:1a:
35:39:b6:b6:a2:6e:0b:fb:40:af:99:db:2b:0f:a7:
1a:36:84:95:c6:95:69:4a:4a:b2:a8:94:d5:64:c4:
df:38:95:80:a7:c0:c3:c3:70:c1:e7:6a:15:f8:b5:
bd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:66:2B:A9:C4:72:6C:BE:E8:AD:1E:81:A4:7F:F8:F3:E3:E1:61:DF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/16889b9f-4802-4878-acb6-30fbe113411c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.114.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:1c:29:a3:af:9f:70:e4:f3:40:19:a7:ab:05:46:f1:19:1a:
e3:52:2a:08:df:d5:7c:55:4e:f9:76:50:cc:85:4c:b6:41:25:
c5:79:f7:ea:41:b0:6f:6c:03:5a:21:5d:29:03:b9:d0:7b:c3:
10:9e:5c:15:81:5e:33:79:4c:84:2b:7b:3d:07:49:1f:5e:d0:
14:dc:1e:fb:07:54:71:7d:21:b5:c4:0e:a7:0e:85:02:e7:fb:
e4:ff:53:eb:d2:f5:8b:5f:48:2e:bf:97:56:86:be:dc:51:76:
9a:49:59:da:81:66:4d:2d:a4:de:2e:4a:5a:1a:f2:d5:2a:47:
f8:33:7a:70:19:76:29:60:4e:7e:60:2e:d0:d6:2f:c6:65:cd:
79:91:2b:c0:7a:22:82:ac:53:e9:2d:9a:10:65:09:44:7f:8c:
04:f6:c4:5a:77:89:70:9b:02:ce:68:bc:52:e2:45:ed:ca:a7:
18:20:94:c4:ca:62:34:02:c4:8f:fd:80:b8:38:c0:af:f7:05:
8c:d7:1d:36:4d:2f:8a:f5:fc:aa:91:95:37:a2:5b:04:59:a0:
8c:f9:45:90:c1:a4:2a:57:9a:d1:f6:a3:71:22:a0:c0:e5:65:
73:1f:81:f2:c0:76:54:d3:65:73:b6:40:c7:64:71:1a:08:08:
86:40:a8:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUFUyeRj3bsyGRSVEu6K9NIsGUYskwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDA1MTA1WhcNMjYwNTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0A5YjBhYzNmNzJlMmZkMTI4ZmIyMzc2YmFmYzgzNTZjYTUy
N2UxNTNmYzMwODc2MDNmZmY5MWFjNDVjODgzNDVkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCsLIQOk9b65cOH99D990uCCxVIwRbxokKfarm0oqmRVlr8
4JMUge0xhkoyGoL7+RrHuI00jguqTt/3sIDUfWC36+CEqd/waFYUUUpyHsN94RD2
Sv57YQGFTbrHxw5sGoduocGSxvpv3/gZVyHRzUUKmecZBRhlxrEpgW3dNhmgqQ3E
vVN90PQIEBi0pSn9NqZH4kvj1VAHDV/tTp6hV0PPKMNfAKD1n8W0wSDPfy4E4wiR
+4r2+Lcc9ELNcwGFcZVKOUBnksoXFKGdUUR+b19bGjU5traibgv7QK+Z2ysPpxo2
hJXGlWlKSrKolNVkxN84lYCnwMPDcMHnahX4tb2jAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUjWYrqcRybL7orR6BpH/48+PhYd8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzE2ODg5YjlmLTQ4MDItNDg3OC1hY2I2LTMwZmJlMTEzNDExYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsHIwDQYJKoZIhvcNAQELBQADggEBAG0cKaOvn3Dk80AZp6sFRvEZGuNS
Kgjf1XxVTvl2UMyFTLZBJcV59+pBsG9sA1ohXSkDudB7wxCeXBWBXjN5TIQrez0H
SR9e0BTcHvsHVHF9IbXEDqcOhQLn++T/U+vS9YtfSC6/l1aGvtxRdppJWdqBZk0t
pN4uSloa8tUqR/gzenAZdilgTn5gLtDWL8ZlzXmRK8B6IoKsU+ktmhBlCUR/jAT2
xFp3iXCbAs5ovFLiRe3KpxgglMTKYjQCxI/9gLg4wK/3BYzXHTZNL4r1/KqRlTei
WwRZoIz5RZDBpCpXmtH2o3EioMDlZXMfgfLAdlTTZXO2QMdkcRoICIZAqIU=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:24 2026 by rpki-client