
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad669b1a-c728-435a-a665-56c15509d708.roa
File: ad669b1a-c728-435a-a665-56c15509d708.roa (raw, json)
Hash identifier: +PtSjfS1KeIljt0m04H4UrPFljSoVh1ntzf7+F3s75w=
Subject key identifier: CF:15:51:03:5F:DA:1C:9D:71:9F:30:B7:77:AE:EA:DE:6B:12:B7:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2CE90F12A3BE0293C4055962361EB661AB62BFB8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad669b1a-c728-435a-a665-56c15509d708.roa
Signing time: Sat 16 May 2026 02:10:44 +0000
ROA not before: Sat 16 May 2026 02:10:44 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:e9:0f:12:a3:be:02:93:c4:05:59:62:36:1e:b6:61:ab:62:bf:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 02:10:44 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=983e5f5ace444401271b73b3b16d8dffd17a8f94ea40e4cfeaf0ce70aacfaf5e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:4f:bb:ba:ad:8e:5c:10:91:09:61:3e:d5:
f4:70:5f:37:29:aa:51:39:cd:8c:87:47:9c:c2:48:
fc:f4:fd:e5:2f:ed:db:04:f3:b7:c7:b6:25:81:48:
89:29:0e:04:61:55:32:6f:f2:17:fe:6d:06:b0:2d:
7d:20:57:f6:7d:25:e6:14:25:7c:10:fd:7f:61:70:
9d:df:b3:f3:1d:aa:4b:c0:9c:ce:f6:ab:2b:87:b2:
0f:0f:11:9d:01:32:30:c8:8c:88:fb:c4:b7:15:99:
11:d0:e1:72:5d:8d:4f:b6:66:5c:21:3d:78:53:fb:
97:eb:ce:90:42:4f:78:71:a7:31:d2:e4:4b:8d:bf:
85:7d:04:b4:fb:89:f0:24:74:5f:a6:c7:13:3b:cf:
df:66:e7:f2:ae:42:5b:6f:69:56:d9:33:e5:85:28:
de:bd:83:ea:6e:8d:57:fe:be:7f:97:57:4d:f5:58:
96:4d:c1:eb:c0:52:ef:16:55:4a:e9:03:4f:43:83:
f7:eb:94:7d:78:20:4b:6c:64:01:4d:e5:ba:b3:98:
d7:4e:60:b3:cc:87:ca:94:0b:db:db:41:fe:50:c2:
31:e8:b1:ee:b8:fb:d7:38:45:ef:73:f6:ed:07:1e:
de:7c:93:d5:6a:64:df:98:e5:16:a4:57:b7:4b:52:
7e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:15:51:03:5F:DA:1C:9D:71:9F:30:B7:77:AE:EA:DE:6B:12:B7:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad669b1a-c728-435a-a665-56c15509d708.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.32.0/24
Signature Algorithm: sha256WithRSAEncryption
04:e4:fa:e9:0b:18:53:09:45:c0:59:51:7e:65:95:05:c9:0c:
c9:d0:dd:f7:8b:5f:e5:eb:4c:e0:ef:4f:91:9f:10:ee:72:d4:
93:92:a5:6e:25:34:9b:a3:af:44:2d:e0:b6:80:b6:e0:59:0e:
cb:7d:55:36:5a:8f:10:22:51:c4:cd:ab:88:64:1e:ac:06:ab:
cb:6b:a1:3b:4d:82:27:19:6d:0c:98:74:b9:66:60:af:4a:bd:
3f:1a:81:0d:99:ec:1b:93:b0:46:7f:1c:16:cb:16:67:d2:f8:
bc:d9:31:21:9a:b3:59:1d:60:e6:07:56:b0:67:fb:7b:35:3a:
ed:89:d1:44:91:07:7d:88:98:c6:6c:69:11:89:24:d3:42:61:
d4:f7:93:3e:14:b7:57:75:70:8a:49:c4:50:cc:ba:de:8e:21:
ca:92:6e:30:2e:2c:07:4f:0a:64:d3:46:5b:78:14:d3:cb:8a:
71:75:54:01:e5:fa:d5:86:e0:b6:1b:fb:d5:3b:d8:32:07:b7:
59:f4:39:a8:f3:50:b6:96:70:ed:82:e3:f6:d4:13:c5:ac:29:
b8:82:46:f5:9d:ea:90:d7:ed:96:bf:d6:7b:2c:66:0d:17:b4:
b9:fc:d6:79:4d:c9:d1:32:87:9d:b9:63:e5:57:0f:32:14:54:
43:0f:13:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:19 2026 by rpki-client