
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa
File: c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa (raw, json)
Hash identifier: W5qjTL9EDgYdV5DzCBNi4TadnHyfwqPiHxLgosoPF0A=
Subject key identifier: E9:5A:73:11:A2:80:F2:F4:81:96:48:D5:17:12:04:89:45:21:F1:86
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 615E48ADE25D36A353B8E0A32319B77211BB513B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa
Signing time: Sat 21 Feb 2026 00:41:57 +0000
ROA not before: Sat 21 Feb 2026 00:41:57 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5e:48:ad:e2:5d:36:a3:53:b8:e0:a3:23:19:b7:72:11:bb:51:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 00:41:57 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=c72806d01d18007b8c77a59272158b32eeb1a9318c9f0c1960c2233319fb2919, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b2:92:3f:12:05:39:31:09:48:53:30:16:31:
77:bd:d9:c9:08:bd:c5:fd:b1:a7:6e:a9:e9:ff:4d:
0a:57:e4:5b:22:d6:16:27:18:9d:d0:48:5a:de:d7:
34:19:64:57:d5:19:be:5e:d5:aa:24:e5:a6:3a:b4:
e6:b3:a3:66:22:42:bb:29:e9:d0:75:8e:5d:84:83:
41:6e:bd:a5:61:e8:22:87:d7:75:73:68:6b:8c:b4:
a8:92:91:f8:a0:c7:23:03:d4:9d:65:a6:86:2c:f1:
eb:7e:1d:94:e9:2e:7d:7b:20:1d:38:d6:14:85:dd:
ec:49:00:73:ad:1e:2b:24:1b:d5:01:ca:c7:cb:85:
09:f4:52:a3:4c:d7:f3:c1:a6:4b:6c:d5:29:8b:20:
c9:48:e3:80:7e:d4:3a:59:61:70:f2:73:47:3f:a0:
d5:ac:da:03:5a:e0:e5:33:8e:22:31:ca:d4:04:f1:
ff:3a:8c:ea:21:40:16:b9:cb:7c:8b:cd:0b:22:12:
34:06:5b:d8:34:e6:ea:b9:7a:11:2a:79:13:40:69:
2f:e5:d9:44:16:dd:7e:f7:3e:52:98:9a:85:ed:85:
64:ef:f4:43:70:f7:19:e4:a7:e6:7f:b8:9d:ae:b7:
24:a4:bd:b7:ec:8b:5f:d0:bd:ea:15:ec:6a:f6:df:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:5A:73:11:A2:80:F2:F4:81:96:48:D5:17:12:04:89:45:21:F1:86
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c65c37c1-97c6-4cfe-ac24-10e474d1d380.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.208.0/24
Signature Algorithm: sha256WithRSAEncryption
20:34:ca:79:50:8c:e6:19:87:1c:63:1d:dc:8e:e7:e1:c5:f2:
8b:b8:60:a3:47:60:d3:30:06:13:e2:cf:6b:ff:f4:ae:f8:6e:
eb:d3:4a:c4:f8:fd:b7:57:05:53:c8:71:59:8b:49:23:de:34:
41:8f:d9:93:f8:70:3a:4d:6f:fd:5e:da:40:b1:5d:e1:7b:29:
a2:e4:5f:2c:16:5f:f1:96:86:2c:20:24:b5:89:0b:64:e9:97:
bd:60:57:7e:25:cb:9a:79:09:f0:ab:bc:fe:bb:2c:c7:0c:87:
e6:5b:68:d7:eb:32:22:a3:7c:16:56:85:f0:0d:af:98:e6:98:
15:22:8b:57:78:db:ff:a5:63:30:76:d8:37:01:70:62:e1:5a:
ed:11:52:a5:f7:a1:8b:91:37:1d:06:76:06:a2:33:08:8e:99:
3b:f0:83:90:08:fc:67:d9:4c:56:1d:39:7c:12:ce:54:e0:f0:
bd:5b:a2:fc:4a:29:42:1d:9e:53:b0:85:9b:fc:57:e2:4b:53:
3c:d0:e7:8d:f5:83:9e:b7:8f:96:6c:83:e4:3c:5c:23:01:92:
65:6b:e7:a5:69:ec:09:04:2c:5f:7f:58:30:f6:d8:8d:c6:99:
eb:18:29:fa:3f:ae:04:fa:2c:80:0b:2f:87:51:2e:21:ee:93:
07:fc:37:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:31:06 2026 by rpki-client