
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d3a7e21-d222-4417-ac92-5d8a72030ce0.roa
File: 6d3a7e21-d222-4417-ac92-5d8a72030ce0.roa (raw, json)
Hash identifier: IJKmlENG6AOve902lnmafeemVyjLMsZbRa8gz6krPN0=
Subject key identifier: 7A:5D:E2:8F:F9:FA:1E:C5:54:74:99:F9:C6:1D:40:6E:AA:14:83:6D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4D459A408B030D3D6F07ACA25254E5D0187699CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d3a7e21-d222-4417-ac92-5d8a72030ce0.roa
Signing time: Tue 19 May 2026 00:21:07 +0000
ROA not before: Tue 19 May 2026 00:21:07 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:45:9a:40:8b:03:0d:3d:6f:07:ac:a2:52:54:e5:d0:18:76:99:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 19 00:21:07 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=c8aa0519c892520d21dbb4dc9a81400742502d55bbe20e4bbf1a965a9c617cfc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:a9:c4:b5:71:46:52:a1:ba:b2:98:ec:cc:
fa:6b:93:fe:94:41:00:32:5a:f5:ad:6d:56:47:ed:
ef:2f:a8:e8:4b:8f:b1:7c:17:a5:f0:0d:95:be:c9:
e0:31:f0:91:0f:5d:fb:e7:2f:a3:ce:38:43:ba:1f:
d3:02:26:71:1e:2d:81:a8:f8:b2:75:3e:f6:a9:e7:
14:fd:bf:d2:b5:be:d2:54:87:e7:ca:70:9c:a2:6f:
23:9d:9e:d4:45:13:0f:7f:b4:af:5c:71:e4:5e:17:
f4:a3:12:74:26:f4:66:ac:09:13:5f:68:bf:cc:21:
a1:9a:48:d3:5a:ac:ac:11:23:85:d6:65:8f:f1:25:
c2:e7:ca:9c:d8:ef:97:47:a4:c2:78:91:be:95:f6:
86:d2:f2:10:ed:86:05:47:36:86:84:30:a2:35:e9:
01:0d:bd:2d:f8:de:33:a9:0c:c9:61:7c:28:89:c7:
1e:f7:c2:4f:b4:73:dc:35:7e:f8:64:a8:93:ac:3f:
b5:21:be:c9:b0:6a:10:ea:fd:cb:09:15:30:eb:2b:
68:1a:f0:d6:61:fe:6a:e9:da:5b:14:11:ef:c2:e9:
bc:b0:af:26:15:44:ab:39:90:1b:73:9f:8f:ec:04:
03:ba:1f:13:cf:48:89:b9:64:2a:8c:95:f4:a7:a1:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5D:E2:8F:F9:FA:1E:C5:54:74:99:F9:C6:1D:40:6E:AA:14:83:6D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6d3a7e21-d222-4417-ac92-5d8a72030ce0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.42.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8a:71:de:e1:c8:3e:24:f1:df:15:2b:52:e5:e7:9c:a8:01:
74:e0:f3:fc:87:e4:c1:92:bd:2f:28:ed:b4:38:de:29:61:2a:
9d:8f:39:c1:66:70:be:4a:cc:51:e9:2c:10:bb:fc:f4:e7:b8:
d5:03:ef:ba:82:12:22:f9:0a:37:fb:3b:7f:fe:72:15:67:2d:
ec:e4:c7:60:6c:76:3a:a6:0b:d0:f4:3f:3e:ff:ba:3d:9e:c5:
10:8f:b5:50:e0:1e:c7:d7:0e:45:a1:79:7d:48:de:ef:64:ef:
45:70:1e:0d:ed:d0:21:a7:64:7e:fb:a9:61:62:5f:9c:a7:e9:
ae:27:2f:9e:e4:91:09:43:a2:a6:57:5b:69:26:d9:32:09:d7:
6b:ce:03:7a:cc:c5:11:86:5a:8d:78:0f:b1:b1:a9:b0:bd:2f:
8b:7e:56:7e:38:e7:7a:d5:38:9d:01:73:a9:74:54:1f:fa:51:
e1:78:f4:60:cb:9c:bc:46:c5:89:d8:7f:d6:cb:8c:0b:23:20:
6f:86:5a:33:51:2d:82:bc:30:ea:a7:7d:d8:f9:b8:e4:85:79:
f4:aa:9c:2c:84:f5:eb:e0:d5:02:d1:f2:fa:6c:34:de:19:4f:
fd:42:4e:7c:c6:e7:3f:2d:2f:87:11:e1:94:bc:8d:82:18:e7:
3a:a7:2f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:05:10 2026 by rpki-client