
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4518589b-4a9c-4f44-b919-1d5752cced6a.roa
File: 4518589b-4a9c-4f44-b919-1d5752cced6a.roa (raw, json)
Hash identifier: ZZRvSV1HB2EnV4B1N0xkVsP6mRWengbt1T1uCO3SSr0=
Subject key identifier: 8B:04:7D:8E:91:A6:1E:61:16:DC:5C:85:23:AF:50:66:13:9A:9A:14
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 54ED27EB547BFF9A91D938D9AADCBB0179BCD851
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4518589b-4a9c-4f44-b919-1d5752cced6a.roa
Signing time: Sat 21 Feb 2026 01:22:04 +0000
ROA not before: Sat 21 Feb 2026 01:22:04 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:ed:27:eb:54:7b:ff:9a:91:d9:38:d9:aa:dc:bb:01:79:bc:d8:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 01:22:04 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=c8528f23820bd45882d247f8bffbe6e4eb25f0bb71028523a24e706a97801728, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:18:7d:04:93:20:19:d5:43:3e:12:88:e6:b4:
9e:9b:b7:f7:2c:7e:a6:5c:5f:2e:8c:d1:3f:d7:43:
1b:da:c9:15:2f:df:33:5a:cf:63:e3:e7:17:ef:8e:
02:39:54:ea:5f:3f:25:11:4f:30:85:e8:5d:19:70:
31:49:0e:69:bb:e4:d2:74:ee:4d:39:22:50:57:0b:
e0:9a:b3:58:c5:bd:0c:6e:07:ce:3f:bb:cf:43:d8:
92:28:cd:a3:55:ea:3f:f7:37:b4:db:5c:24:12:ad:
d8:07:2f:43:66:a8:88:43:e2:c0:05:91:ac:72:cd:
86:c1:7f:55:64:6a:a9:0a:56:3a:32:9b:78:42:1a:
15:d2:a6:e1:ec:95:8d:0f:25:d9:77:38:72:1b:2e:
f2:1e:87:2a:d8:fd:0c:10:70:d0:54:9b:88:6a:36:
9b:e7:c9:15:34:d3:f8:f7:8b:28:f6:c9:49:18:fc:
ee:02:0a:c8:97:19:09:81:8a:7e:07:a3:33:14:ac:
9e:7e:f1:30:5d:4f:2d:6b:67:d9:79:7d:50:1d:85:
35:8c:67:9a:5e:37:67:e5:a7:01:57:83:19:c7:35:
e1:c1:d3:13:cb:60:d4:c3:7d:4c:2b:f5:89:85:b7:
2d:eb:e6:ff:55:0d:a3:da:cb:df:2e:b8:f3:6b:d5:
b3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:04:7D:8E:91:A6:1E:61:16:DC:5C:85:23:AF:50:66:13:9A:9A:14
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4518589b-4a9c-4f44-b919-1d5752cced6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.29.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:3b:40:1a:a9:42:b1:eb:59:b9:4f:9e:7d:ae:62:ab:f2:2f:
5d:7e:ab:5d:e5:b5:fd:65:97:6c:0b:95:af:a3:33:2e:a6:56:
3a:06:53:2c:d5:9d:e4:a8:b9:d8:dc:c9:65:ea:40:ef:b7:3f:
d4:20:7f:fd:6e:6e:0e:b6:2a:6b:67:0b:55:b6:3e:0f:c9:f9:
8d:77:43:ed:be:69:ee:fc:4a:3e:6c:bc:fb:14:ef:9c:cf:8d:
f0:b4:4e:01:52:93:51:44:87:16:a7:9f:8c:07:b9:9c:e9:bd:
94:aa:9e:2c:b2:96:7e:e8:0d:fe:27:d4:15:6a:13:17:0d:82:
a5:ed:2f:0d:35:ae:4e:33:12:40:04:b0:78:5c:b2:be:31:75:
a6:6e:a4:91:6b:58:2e:e3:fa:2b:06:10:b1:53:5f:17:db:3c:
87:1f:4a:4d:37:17:89:87:9f:63:3f:55:ca:ea:aa:ce:3e:19:
0f:ed:b0:f8:ac:aa:e6:a3:55:ed:98:43:9e:a6:37:5e:26:40:
da:9e:da:19:ff:3c:f7:e3:26:d4:00:ca:b3:fb:39:ab:9f:27:
45:ac:58:f9:bc:99:89:39:ca:c9:a0:df:38:43:2d:a5:f6:95:
9d:86:af:1d:f1:77:79:6c:66:99:32:04:52:b5:e4:28:e0:78:
fe:f3:c1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:28:50 2026 by rpki-client