
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657ed8bc-4347-4faa-9c0d-9be4f914c6be.roa
File: 657ed8bc-4347-4faa-9c0d-9be4f914c6be.roa (raw, json)
Hash identifier: 8CauXHppTuIsVlqBUsiHoJGBr2IoIyzXWXz68xCLhgA=
Subject key identifier: B3:56:B7:F5:27:B8:E6:78:75:46:3E:D3:A7:A0:52:B9:C1:55:B1:44
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 72AFF7E9B5AAE044021957ECB30F2B0CA90050C6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657ed8bc-4347-4faa-9c0d-9be4f914c6be.roa
Signing time: Sat 21 Feb 2026 00:40:11 +0000
ROA not before: Sat 21 Feb 2026 00:40:11 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:af:f7:e9:b5:aa:e0:44:02:19:57:ec:b3:0f:2b:0c:a9:00:50:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 00:40:11 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=1ab66a3214a19c472e6359a802f3027b177cc985d3550e9039e20a4e1b00822c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:65:cb:37:d8:70:9c:1b:95:a8:e4:b1:60:
19:e9:40:43:4a:bb:7d:83:ca:42:c6:51:8d:64:79:
64:da:ab:3f:97:59:2f:c3:ba:10:38:f2:47:9a:83:
e6:90:3e:ed:74:57:a7:c1:80:ea:4d:50:20:88:e1:
7f:1f:58:c2:4e:cc:8c:2f:55:f5:8b:5b:a2:0b:c3:
3e:0f:7d:f7:f9:bc:ac:9b:00:5a:78:64:40:4c:a0:
8d:4f:7e:f4:fc:d5:ff:c7:ad:e6:96:2e:3a:a2:5d:
4e:0d:e6:83:fa:4e:72:c3:bf:9a:c1:15:a4:45:c9:
98:51:38:65:b9:fb:88:d1:5a:0a:b8:36:66:a0:28:
ec:cb:61:1c:32:8d:57:30:4d:a6:be:79:65:be:fc:
0f:65:0c:f0:66:58:05:f6:f9:6e:cb:db:ca:61:7a:
a1:5c:93:3b:42:d8:88:23:26:b6:fc:ca:0e:1e:90:
19:dd:ab:eb:a4:b2:61:fd:58:7a:a6:ef:aa:c5:be:
dc:f9:9f:7e:fe:f7:1a:9e:d4:f0:4f:50:9d:1e:42:
68:ee:e5:21:bc:a2:83:74:4a:5f:9a:17:ad:de:89:
fa:07:34:d7:b2:94:7b:23:c1:9f:0e:93:56:d1:f9:
97:fd:a7:0d:1e:87:c1:33:ae:d1:51:9f:7a:58:ac:
5e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:56:B7:F5:27:B8:E6:78:75:46:3E:D3:A7:A0:52:B9:C1:55:B1:44
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/657ed8bc-4347-4faa-9c0d-9be4f914c6be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e1:17:81:ef:53:9e:76:ea:da:84:67:40:98:b9:20:cd:6f:
b4:8c:9d:5a:08:a3:1d:0a:bf:01:27:bf:83:b3:77:d0:39:66:
e5:48:dc:26:08:47:e2:c9:61:08:bf:78:10:c3:49:2c:5e:2c:
c6:fa:cc:59:c2:44:4c:e8:a0:36:5c:73:e7:b7:9d:10:36:e4:
48:99:97:f3:7f:d5:46:43:64:64:f8:a1:13:3d:fc:46:74:2f:
2c:fa:f4:58:b8:a7:e7:fc:03:5b:9f:94:2b:00:1f:1d:13:42:
51:1a:e5:a7:26:0a:3f:75:78:b3:a0:c2:15:95:c0:17:a9:90:
5b:32:ea:f9:b6:b8:38:f6:2a:31:50:25:30:d3:6e:32:e5:05:
e6:34:38:45:b5:97:c9:d5:82:1a:82:0b:14:47:d7:8d:63:23:
9b:d4:3f:7b:60:9a:08:47:6a:f5:43:8d:43:66:a6:cc:12:bc:
53:26:ec:4a:e9:01:96:2d:13:62:a9:ea:3a:83:fc:a8:bf:9d:
95:5c:e9:f2:cb:26:12:51:0e:67:78:61:05:39:d2:18:f6:d3:
9c:25:34:8a:7a:e7:9b:d6:22:4a:30:2b:68:e7:69:b8:40:6c:
6b:a2:7a:80:a1:86:d4:47:30:0a:19:b8:6e:a2:32:ae:d8:58:
ea:c5:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:54:58 2026 by rpki-client