
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e5768b0-d230-4f28-b5ea-094649f001e8.roa
File: 1e5768b0-d230-4f28-b5ea-094649f001e8.roa (raw, json)
Hash identifier: tt+Jvpm8UFG2euxS0wJj1q5y3NDwpshCWs6ElIIdC04=
Subject key identifier: 3D:AB:DE:2B:C3:6A:72:B1:B5:5A:AF:35:03:77:DF:60:49:18:4C:65
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 108EE44343DE0692D6791769A4B88076257067F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e5768b0-d230-4f28-b5ea-094649f001e8.roa
Signing time: Sat 21 Feb 2026 00:41:57 +0000
ROA not before: Sat 21 Feb 2026 00:41:57 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:8e:e4:43:43:de:06:92:d6:79:17:69:a4:b8:80:76:25:70:67:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 00:41:57 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=a9e00aaff8c49b4fa60dcfc6f5b7172b0e761b31f3c594bf4a06d8a11fa07fa7, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:0b:08:df:92:2d:96:4f:98:35:dc:e7:0f:
b0:3f:08:89:c0:d0:6d:78:56:2c:68:65:80:73:97:
b8:ab:d3:64:ea:91:c7:c9:eb:f6:e9:12:90:1e:b3:
a7:43:9f:45:24:94:ea:b1:7c:58:aa:c7:6b:e3:da:
f3:24:b4:3f:ef:69:24:be:b4:92:b0:1c:73:9c:35:
eb:d6:90:5b:25:1f:62:9e:8b:1a:47:7c:62:6b:3d:
69:df:29:ec:4b:92:45:6b:43:98:6a:11:c1:75:97:
15:89:2b:a2:90:4e:fa:eb:29:da:6e:60:4c:31:1b:
21:b6:f9:3a:32:da:96:12:80:1c:a9:bf:89:ab:9e:
d6:65:c2:8f:17:8c:bd:9e:49:82:07:17:6a:bb:e4:
31:c0:0d:90:b9:71:8c:3d:90:4e:34:eb:93:fb:e8:
80:42:a1:3e:7e:2c:bc:71:90:64:d4:71:d3:05:4b:
25:0a:74:fd:74:ae:55:31:d9:dc:1d:ae:fe:1d:ba:
26:fd:bf:86:d7:81:98:10:cf:e3:42:3d:6a:b6:f3:
99:68:61:57:72:92:5d:cc:af:b5:1c:34:e2:b1:cc:
46:ed:4b:3e:09:25:3e:4d:cb:2d:dc:c0:20:fb:a6:
c1:9a:23:a4:b6:36:61:d6:98:71:30:b5:20:7e:cf:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AB:DE:2B:C3:6A:72:B1:B5:5A:AF:35:03:77:DF:60:49:18:4C:65
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e5768b0-d230-4f28-b5ea-094649f001e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:c5:88:26:8d:4c:60:30:d6:1d:ab:b4:3a:29:de:b2:0f:08:
0f:8c:15:32:c5:1f:ea:44:f2:87:62:a2:05:d6:82:b0:c7:6c:
1f:fd:51:ec:4a:d0:63:49:82:b5:6c:0b:f0:a5:99:d3:da:82:
24:4c:58:2e:78:a5:4e:cb:73:cc:eb:2f:e1:d7:c9:c6:11:e7:
44:ec:9b:ec:0f:9d:da:59:1f:8a:d0:f4:ff:a6:49:62:17:31:
3b:b6:ca:96:65:ac:b7:4a:54:cc:2d:a4:00:6c:49:5b:13:ef:
0f:a5:53:76:df:e9:79:79:9f:90:63:e0:e5:26:82:0b:bb:7f:
df:14:38:84:8e:ca:56:45:02:e3:7d:91:d9:94:ce:b4:ce:d5:
fb:53:44:bc:d4:20:e0:38:3f:80:c4:36:fd:00:10:1a:1c:48:
bd:20:a9:57:f5:bd:34:ef:08:1f:49:8d:d5:00:85:69:76:f9:
95:a2:1f:91:16:9a:d1:88:b6:35:de:a4:43:12:e8:44:0d:a4:
8c:7f:87:15:ed:de:c6:46:3d:20:70:43:1e:dc:3d:76:f7:ed:
6f:9a:48:71:0c:a6:dd:b3:45:3d:e3:4b:f1:9c:98:5f:56:1d:
69:ec:99:c5:8a:0f:3b:5e:4a:31:57:1e:9b:2f:90:83:30:90:
61:7c:3d:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:20 2026 by rpki-client