
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8419442-0aa9-4459-b5f1-134a3a97de62.roa
File: e8419442-0aa9-4459-b5f1-134a3a97de62.roa (raw, json)
Hash identifier: 5awPvkEnCHRAYb5+ORXVP3z6JI9zfwNiLKGl3IxgqH4=
Subject key identifier: 18:21:02:19:1E:EE:F9:01:A5:F1:B1:71:73:DB:92:A8:D6:0D:82:46
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7F3AF673A74837B6CA4BF921305D0EAD17F5EF61
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8419442-0aa9-4459-b5f1-134a3a97de62.roa
Signing time: Sat 21 Feb 2026 01:01:18 +0000
ROA not before: Sat 21 Feb 2026 01:01:18 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3a:f6:73:a7:48:37:b6:ca:4b:f9:21:30:5d:0e:ad:17:f5:ef:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 01:01:18 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=cd4c1b950be36b06a90eefb8922e75f8823b918c0e361feb32a22ad3ae22c488, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:de:17:bd:2b:e0:57:9e:65:ad:a2:71:4b:
a5:21:a5:e5:a0:d0:b0:dd:68:cf:d6:68:87:c5:cc:
fc:04:b2:08:2d:8b:85:3f:52:3f:41:5f:25:86:f7:
14:bd:74:5a:32:75:8e:ad:83:58:23:6f:42:87:18:
02:dc:e8:bd:8e:8e:b8:98:1c:1b:50:2b:f2:e2:6d:
61:71:5c:55:b5:a8:9b:c4:bb:b9:a2:58:5b:04:40:
66:93:0c:68:8e:ca:1f:88:f2:47:c6:1b:76:4f:5d:
30:a2:d9:25:81:dd:27:33:ab:12:fd:b8:c7:70:ed:
5b:6c:12:96:5a:5d:f8:e0:76:ce:d6:a9:d4:81:1e:
34:65:3b:a5:e3:d8:33:45:e8:69:81:c3:f2:da:d2:
7b:25:b3:49:2a:36:59:7f:25:8b:c4:81:64:a6:e5:
87:28:93:94:dd:64:94:84:c1:46:52:29:5e:dc:c5:
65:aa:c0:b5:32:c0:d5:60:0e:d9:f3:51:8b:ac:11:
8c:d1:82:1f:0f:8c:5c:6e:73:da:97:9f:bc:cb:71:
30:65:cb:41:b4:69:b0:1b:5c:15:20:ac:75:42:0b:
3f:d2:ca:24:32:ca:5b:6f:14:ec:7e:bc:d7:12:c8:
cc:cb:c8:e7:95:ae:67:3a:82:ff:37:9a:21:25:16:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:21:02:19:1E:EE:F9:01:A5:F1:B1:71:73:DB:92:A8:D6:0D:82:46
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8419442-0aa9-4459-b5f1-134a3a97de62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dd:44:6c:43:6c:4c:05:ea:2f:86:a2:09:dc:f1:ca:5a:95:
cc:24:9b:00:0d:08:b2:6c:93:9d:17:df:cd:37:5c:e6:8a:de:
1b:fe:91:64:86:32:89:ad:49:12:e0:52:f9:3b:95:ee:b2:a9:
81:8e:6e:df:4d:63:ea:d7:ec:2b:b7:01:6f:ca:79:05:62:f3:
e9:25:39:2a:e2:a7:36:d3:3b:ca:ab:59:43:63:ad:da:b9:01:
8a:8a:ca:f3:ae:f0:18:f6:b3:3b:42:97:cf:28:db:06:b7:ae:
e2:7e:8c:ab:92:8a:ae:88:bf:47:e1:f7:17:57:ea:0a:52:32:
12:44:a6:77:8e:9e:42:a9:f2:92:a4:b1:e1:90:de:29:3c:6a:
19:18:b1:69:40:de:16:f5:74:a1:be:b8:3d:01:5d:06:eb:64:
e2:d4:97:a4:3e:3b:df:ce:96:6b:88:d6:ee:90:f8:22:0b:08:
66:8f:85:9b:c7:33:61:1e:d7:47:6b:40:56:57:a3:0e:8d:7a:
73:ce:73:47:a7:f2:2e:ca:e8:bb:51:7a:77:6d:0a:47:93:12:
87:c1:92:17:b0:6c:94:13:51:48:fd:4b:db:7e:df:49:26:8a:
95:a2:72:54:30:c0:01:0d:83:63:6a:27:b6:92:eb:f7:fe:ae:
28:76:34:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:39 2026 by rpki-client