
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa
File: b3605182-73be-4b14-a693-b70c018bdd57.roa (raw, json)
Hash identifier: bJEQwMiYilKZUNWNdYbYNGA+ZZhGAi+ryvsVAsdrf8s=
Subject key identifier: 44:71:41:CD:B3:C7:FB:AC:9B:17:94:7A:AF:92:84:69:3B:12:2C:98
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B82E4F9C3DAF191BEDA26AC9B886030D97D8794
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa
Signing time: Sun 08 Feb 2026 00:50:34 +0000
ROA not before: Sun 08 Feb 2026 00:50:34 +0000
ROA not after: Sat 09 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.171.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:82:e4:f9:c3:da:f1:91:be:da:26:ac:9b:88:60:30:d9:7d:87:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 8 00:50:34 2026 GMT
Not After : May 9 23:59:59 2026 GMT
Subject: serialNumber=0cce92c3ae06c158f397a6ec1a345f3e5ae802e1e04a70fe115a4f0df0fb6577, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:b3:16:d3:be:2f:4b:68:d4:fd:ef:53:8f:
61:6c:e5:96:03:f5:e2:f6:3b:ce:f9:33:81:61:6f:
ee:da:70:bd:aa:23:ef:1f:e5:1f:5c:ff:ed:99:1f:
a8:1f:c1:c1:9d:34:4c:f7:ff:38:d0:80:87:dd:cb:
c8:b5:68:78:4e:2f:d7:ac:c9:7d:59:0d:4c:b9:c6:
ea:22:d6:7f:9b:00:13:70:61:be:f3:db:dd:76:de:
2f:e3:5e:3f:d5:30:b2:81:bc:cf:72:01:d0:04:bf:
08:c4:c5:87:43:1d:a1:96:33:00:70:cf:3d:ed:04:
5f:0b:15:98:1e:8f:3d:55:19:82:25:0b:73:12:af:
69:d2:a4:43:0f:42:b0:a8:e1:35:a7:7a:22:4e:77:
ea:5e:ff:eb:5a:7c:ca:74:6d:cf:21:74:6c:1c:82:
b4:c6:99:bf:35:fb:ca:5e:3d:ef:97:40:c2:3f:d5:
8a:43:f5:9a:a6:c0:0c:10:49:df:21:ab:ab:d4:6e:
6a:e8:99:2b:c5:c0:8b:c0:c9:9f:fc:db:00:15:05:
a5:bc:a6:df:9d:cb:81:0c:8c:2c:1c:0e:03:5a:16:
41:59:11:34:cd:3a:45:c0:87:ac:f3:2c:a8:7a:79:
a0:9b:39:81:45:06:3d:e3:9b:d2:bb:4b:a3:b9:26:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:71:41:CD:B3:C7:FB:AC:9B:17:94:7A:AF:92:84:69:3B:12:2C:98
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b3605182-73be-4b14-a693-b70c018bdd57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.171.0.0/16
Signature Algorithm: sha256WithRSAEncryption
69:87:d4:a7:3a:fc:d6:73:59:30:dd:68:15:28:5a:f1:9e:63:
14:fe:df:c7:49:bc:8f:96:95:b9:44:d6:c3:29:bd:5b:1a:9c:
4a:86:ef:28:6a:bc:73:b5:67:13:3c:64:fc:cd:e3:a5:f1:cd:
c8:09:41:1b:0b:07:b0:1f:57:8d:ae:3f:93:a5:71:8c:38:ad:
08:33:e2:bc:03:2d:4e:16:54:b3:84:3f:08:9e:f6:0c:c8:ee:
73:d6:22:7b:30:b4:32:21:46:8f:41:14:05:f4:4e:04:80:1c:
01:4f:55:e1:00:f0:16:22:5b:aa:21:93:8d:d6:a0:95:06:1c:
45:78:bd:32:04:24:13:bc:fe:c9:a9:fb:fa:6d:95:9c:34:ba:
c4:30:25:7f:d4:4f:3c:91:4e:54:e3:61:40:3f:e9:de:86:ab:
d3:ac:35:b0:39:ca:88:3e:8d:01:1d:d1:5a:2d:db:e3:b3:86:
4d:b5:80:1e:42:df:cb:a6:f8:81:63:8f:09:81:ba:0f:95:66:
b4:ec:c5:74:d7:0c:40:c3:76:15:14:20:6d:e2:d3:02:8e:53:
78:82:c1:32:e5:88:49:b1:66:d1:8d:7d:03:81:9a:a5:7d:5a:
44:27:56:9d:4d:40:da:dd:78:ae:4a:15:ff:9a:f0:df:d6:04:
cd:2e:e3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:02 2026 by rpki-client