
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e046548-588d-4437-b4a8-e45db59e9069.roa
File: 3e046548-588d-4437-b4a8-e45db59e9069.roa (raw, json)
Hash identifier: LTAG5EN8ca7F1snpJA/mH6E3yAu3ZF9bkdp3gJkcLzg=
Subject key identifier: 2C:DF:FA:36:DA:C5:0C:5C:79:AB:F8:AB:44:2F:9E:EF:17:55:4B:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14D12D2F1F145CBAEAD1CEA454DE6BC0027C57B7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e046548-588d-4437-b4a8-e45db59e9069.roa
Signing time: Sat 21 Feb 2026 00:50:35 +0000
ROA not before: Sat 21 Feb 2026 00:50:35 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:d1:2d:2f:1f:14:5c:ba:ea:d1:ce:a4:54:de:6b:c0:02:7c:57:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 00:50:35 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=0f48f95ca950d09d7d7c3c5c94d9d223cd009a95b4b5c795dcf439d16645e6c9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:95:6f:00:19:79:b0:56:81:ed:81:9c:a4:bc:
f3:9d:9d:6a:81:10:13:82:a5:45:5f:bd:ab:69:b0:
e2:00:97:1c:84:61:b3:cb:82:6e:6a:21:1a:8c:61:
0f:d4:60:1f:13:e2:f2:53:12:fe:92:f0:03:3a:e8:
67:f0:f6:13:46:cf:f7:8e:32:7d:c1:e8:0b:6b:72:
98:49:2b:c9:c1:f0:3f:e6:06:a4:5f:93:92:7c:f4:
6e:d9:5f:9a:20:70:09:7f:65:12:2a:0e:f1:ea:b4:
c6:e6:2a:b0:7a:cb:4e:83:8d:f8:0f:ac:ea:56:0c:
6e:65:8f:ce:fe:c8:0e:b0:0c:f9:e1:9a:17:e1:57:
e5:7c:de:5f:56:27:da:82:87:e2:6c:c5:c5:52:4a:
35:bb:74:64:3d:0f:cf:5d:e8:6d:c0:5b:34:8d:0b:
25:ea:4a:55:b1:6d:6f:f9:89:db:44:e7:60:ba:98:
52:e1:85:79:51:f8:88:e4:1b:b0:5b:d3:e0:88:dc:
0f:b0:14:58:4d:a9:98:82:af:4c:6a:98:e9:4d:53:
76:f2:31:4c:8a:b0:fc:fa:30:3e:00:6e:40:4d:66:
ab:11:77:99:d9:53:5f:39:9a:06:e5:f5:de:7f:a7:
cf:56:d4:3a:fc:41:87:12:96:79:6f:5d:d8:db:f2:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DF:FA:36:DA:C5:0C:5C:79:AB:F8:AB:44:2F:9E:EF:17:55:4B:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3e046548-588d-4437-b4a8-e45db59e9069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.132.0/24
Signature Algorithm: sha256WithRSAEncryption
82:4e:7e:32:35:47:06:ec:9b:49:db:bc:f7:be:0b:2d:3e:60:
58:d4:b8:63:1e:2e:8f:8a:ce:6d:6c:09:59:d7:45:04:cf:0a:
38:56:cc:a3:58:04:16:61:08:16:f1:d6:11:2f:ca:17:d7:59:
a3:b0:12:74:a8:e6:9d:e2:4a:01:42:37:69:83:90:83:26:4b:
39:a6:3d:d7:aa:cd:11:c5:e1:55:37:6a:05:55:e8:29:35:a4:
3c:2c:d1:8e:4a:4c:14:d2:a2:23:b6:72:95:ce:42:ae:cd:da:
f7:12:0d:5f:d9:ff:71:c2:6c:db:55:21:b6:0a:0e:07:91:61:
5f:e0:af:af:a0:f4:ec:d5:07:c5:e0:54:40:7f:3d:fc:c0:be:
ed:79:d6:1a:1b:55:fd:75:4a:74:89:95:8c:9a:88:9d:22:a4:
ae:20:47:3d:e6:8d:f9:f8:35:bf:c9:24:5c:e7:4b:c9:48:3d:
39:30:2d:70:eb:ce:34:07:75:c1:ae:20:09:fb:04:2f:57:6c:
e5:b5:c9:17:4d:52:f4:36:4b:d6:9b:e4:49:9d:00:8c:70:98:
e7:7b:47:98:d3:0d:a2:95:04:39:55:db:10:68:75:0d:9d:e4:
1f:66:17:a0:20:eb:60:02:dc:ad:cd:db:5f:a9:e5:8c:8d:07:
9f:5e:ce:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:07:15 2026 by rpki-client