
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5172bcc4-1496-4663-b009-2084ac771361.roa
File: 5172bcc4-1496-4663-b009-2084ac771361.roa (raw, json)
Hash identifier: S08pt9mPACfKqUWHAAV2lULVzAJVlGySFwGWDQ2zMJ0=
Subject key identifier: 38:D5:22:92:12:4F:37:9D:50:EF:C3:E1:75:14:AC:06:AA:B8:01:7B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 23F8511C0A4B5161F0AA60286726B93D0E9B02
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5172bcc4-1496-4663-b009-2084ac771361.roa
Signing time: Sat 21 Feb 2026 01:01:18 +0000
ROA not before: Sat 21 Feb 2026 01:01:18 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:f8:51:1c:0a:4b:51:61:f0:aa:60:28:67:26:b9:3d:0e:9b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 01:01:18 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=c3feb8dd8cde8ea91744e354995ff80aacb2634a09ab2e1408caff4b619bb17b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:3c:94:5a:a4:22:84:8a:91:2a:83:97:fb:
ca:e4:08:56:a2:df:46:8a:e2:89:65:4d:a4:11:50:
b0:30:71:66:a3:20:71:18:04:d0:3a:6f:36:bd:f9:
90:3a:b6:89:0b:77:bb:01:52:42:2b:ff:c2:e8:7c:
47:31:aa:65:41:ec:5e:eb:4d:25:37:19:08:be:9f:
72:d7:d6:23:4c:dc:72:db:99:7a:f4:70:51:57:49:
4a:8b:ff:5b:43:54:9f:d3:ea:de:0c:9b:46:4c:36:
d7:cd:a1:56:d7:69:e4:ca:2a:9a:79:6f:19:6a:fd:
d7:df:08:4d:d6:8d:03:fc:d0:57:e5:af:47:05:01:
c3:05:0e:fc:9b:cf:b5:9c:37:f9:43:2a:fb:06:96:
84:19:8b:44:bc:75:79:dd:e6:e3:a0:27:1f:ca:f0:
e7:3d:ef:6a:3b:9b:96:c9:8a:6f:88:db:31:d8:61:
db:41:77:74:9c:5d:82:48:23:f3:83:eb:f3:9a:2c:
2e:ad:2c:df:39:96:ad:3b:82:21:59:26:e7:11:2a:
ac:7b:db:63:67:f3:52:be:01:62:10:85:6a:c7:cc:
e5:c4:ef:86:8b:8d:cb:f0:fb:3c:52:b5:eb:79:c1:
cd:b1:d8:6c:0a:a8:b5:b6:d3:b3:21:1e:94:08:92:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D5:22:92:12:4F:37:9D:50:EF:C3:E1:75:14:AC:06:AA:B8:01:7B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5172bcc4-1496-4663-b009-2084ac771361.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.160.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:21:10:0d:1f:55:08:0d:79:40:56:88:54:35:fd:5f:c9:c5:
28:41:45:0c:3d:a6:a6:5e:9a:6b:c6:2f:27:d5:18:70:d1:c3:
c3:4a:49:d1:ec:4e:29:2d:e0:66:5a:63:34:69:9a:8c:e0:bb:
1a:9f:4e:c7:b3:a8:8c:a3:a1:d0:66:68:32:c8:c3:12:8b:19:
11:0f:b0:83:a4:b1:30:77:14:04:c5:2f:42:ad:f9:2a:c8:cf:
91:99:fb:09:4f:fd:cf:59:ad:b6:d8:44:7e:6a:f2:bf:88:b5:
57:a5:9a:33:e4:ee:7e:a2:75:fd:01:3a:e5:0c:d3:fa:b6:b9:
d6:9e:3b:57:b7:57:b6:11:50:54:3a:87:28:43:05:80:09:aa:
0c:b2:5a:2e:a2:6a:ad:1f:1e:ae:e9:1b:11:c3:a2:3a:3a:8f:
7c:7b:35:54:bd:0e:47:07:ff:40:cd:fe:01:73:e8:42:d1:29:
fa:cc:38:23:0c:d7:de:9d:a7:11:ea:c2:61:dd:65:80:e5:0a:
9e:d4:63:9c:92:77:cb:fe:00:53:a5:55:c6:85:70:ea:2b:43:
23:e2:42:b1:34:b5:45:a6:30:17:d0:58:f5:ee:23:9d:9c:cb:
fe:ff:13:c8:40:d2:94:6c:6c:6c:12:2b:d2:31:d3:21:6a:91:
51:22:5c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:44 2026 by rpki-client