
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
File: 1b5753b0-d542-44ed-a4ed-def12dec14c4.roa (raw, json)
Hash identifier: bMiC8CL6M5OtCz69c4jT6vfqyDSFV+YdyA7AnPizMzs=
Subject key identifier: FB:E1:D9:E5:AE:B5:45:6B:7D:1D:E4:21:CA:3C:32:75:67:F3:17:E6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1367CA2D073C30E932DC712EE88E06292ACA4306
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
Signing time: Sat 21 Feb 2026 01:41:45 +0000
ROA not before: Sat 21 Feb 2026 01:41:45 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:67:ca:2d:07:3c:30:e9:32:dc:71:2e:e8:8e:06:29:2a:ca:43:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 01:41:45 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=3bf780d94642b313627d34a1db6ed55b6949302a5964d20448e010eab6955569, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ac:ea:23:36:04:9b:95:21:f6:ac:55:3c:a2:
1c:a8:37:1c:51:1e:2d:8c:05:33:49:96:06:74:79:
d9:e8:18:b2:62:84:e7:ba:70:54:20:4f:0d:60:1f:
6e:3b:a7:35:69:f9:cf:a5:2d:8c:85:30:a7:6c:1f:
85:cd:b0:e7:08:f7:54:fc:8c:b6:f7:9f:af:53:b6:
e7:37:b5:c5:8a:d9:44:f4:9d:d9:56:3e:c5:80:52:
35:fa:04:f4:29:8e:62:0b:33:37:7e:73:f9:a6:be:
35:c2:f9:be:89:08:6a:c3:12:b7:e5:cd:7a:fb:0b:
83:81:0b:10:10:75:e8:c9:20:cd:50:8b:b4:9a:4d:
00:f7:67:e8:8d:a8:5a:5c:1a:68:9e:7d:07:16:72:
b6:e4:3a:fc:9f:1d:83:ee:af:8c:74:e8:4f:fe:36:
ad:f4:98:c3:e6:60:d2:be:6b:1d:79:98:ea:ab:75:
72:dd:67:4e:dd:70:8d:e9:97:d2:2b:23:4f:04:6d:
9b:16:b2:50:f2:62:a5:ed:c6:27:80:ed:4b:9a:f8:
df:3e:7e:0d:d1:e0:91:ff:c0:42:59:ef:df:0c:6f:
c0:8c:ed:eb:8d:4f:69:76:b0:15:c3:78:3b:d6:95:
1c:ed:e0:9c:83:1c:a6:e5:64:11:33:f7:d6:f7:f0:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:E1:D9:E5:AE:B5:45:6B:7D:1D:E4:21:CA:3C:32:75:67:F3:17:E6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1b5753b0-d542-44ed-a4ed-def12dec14c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:9c:36:ed:29:6a:4a:bc:36:c6:4a:bd:5f:73:56:c0:54:e0:
62:40:b0:6d:8c:c5:f7:ef:e6:69:24:51:41:f8:0d:0e:d2:22:
96:6e:d3:e0:e8:50:95:f4:47:5b:77:e5:85:18:9a:40:61:e5:
1d:6c:32:fd:f4:1b:ba:61:ad:ef:7e:92:6b:1b:a6:f3:2a:e1:
56:45:6e:ae:57:dc:8d:b4:c4:8d:d1:da:27:df:d3:b4:7c:d5:
b2:6e:87:dd:86:aa:8e:b3:40:ec:e9:56:28:db:06:cb:d0:b1:
db:11:a5:1e:88:38:a5:f0:5e:92:ba:0a:3e:7c:31:0b:c3:25:
dc:58:e6:9b:ff:da:f4:f4:5c:67:77:1d:85:e6:ca:0a:59:3f:
71:40:dc:40:c7:d8:38:5d:90:d1:cb:7b:08:4d:6c:99:04:66:
6c:a8:98:66:fc:78:38:94:ad:52:01:43:a6:eb:16:52:0f:a5:
5b:48:81:96:ea:52:b8:86:7a:a2:f9:e7:b2:2c:1f:08:f5:4c:
27:90:92:a0:85:72:9a:b1:f8:1c:27:9e:96:8f:79:41:77:8a:
72:d2:30:60:8b:36:64:e8:a4:f8:1f:95:7c:90:c0:44:3c:1d:
98:86:df:58:8d:66:f3:5d:aa:c8:d9:24:6c:29:ea:bc:69:88:
e3:b6:65:7a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUE2fKLQc8MOky3HEu6I4GKSrKQwYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDE0MTQ1WhcNMjYwNTIyMjM1OTU5
WjB6MUkwRwYDVQQFE0AzYmY3ODBkOTQ2NDJiMzEzNjI3ZDM0YTFkYjZlZDU1YjY5
NDkzMDJhNTk2NGQyMDQ0OGUwMTBlYWI2OTU1NTY5MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDQrOojNgSblSH2rFU8ohyoNxxRHi2MBTNJlgZ0ednoGLJi
hOe6cFQgTw1gH247pzVp+c+lLYyFMKdsH4XNsOcI91T8jLb3n69Ttuc3tcWK2UT0
ndlWPsWAUjX6BPQpjmILMzd+c/mmvjXC+b6JCGrDErflzXr7C4OBCxAQdejJIM1Q
i7SaTQD3Z+iNqFpcGmiefQcWcrbkOvyfHYPur4x06E/+Nq30mMPmYNK+ax15mOqr
dXLdZ07dcI3pl9IrI08EbZsWslDyYqXtxieA7Uua+N8+fg3R4JH/wEJZ798Mb8CM
7euNT2l2sBXDeDvWlRzt4JyDHKblZBEz99b38LzpAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU++HZ5a61RWt9HeQhyjwydWfzF+YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzFiNTc1M2IwLWQ1NDItNDRlZC1hNGVkLWRlZjEyZGVjMTRjNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsFUwDQYJKoZIhvcNAQELBQADggEBALKcNu0pakq8NsZKvV9zVsBU4GJA
sG2Mxffv5mkkUUH4DQ7SIpZu0+DoUJX0R1t35YUYmkBh5R1sMv30G7phre9+kmsb
pvMq4VZFbq5X3I20xI3R2iff07R81bJuh92Gqo6zQOzpVijbBsvQsdsRpR6IOKXw
XpK6Cj58MQvDJdxY5pv/2vT0XGd3HYXmygpZP3FA3EDH2DhdkNHLewhNbJkEZmyo
mGb8eDiUrVIBQ6brFlIPpVtIgZbqUriGeqL557IsHwj1TCeQkqCFcpqx+BwnnpaP
eUF3inLSMGCLNmTopPgflXyQwEQ8HZiG31iNZvNdqsjZJGwp6rxpiOO2ZXo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:06:29 2026 by rpki-client