
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/022e9895-00ba-4757-9163-fc620b40556d.roa
File: 022e9895-00ba-4757-9163-fc620b40556d.roa (raw, json)
Hash identifier: b3j+6SeMQnNeNzM0hHqmq8gcEtBe8ZC02kvMSYHLQBw=
Subject key identifier: 28:AF:B4:84:7B:62:1C:15:40:4A:6D:DF:46:B3:38:9A:AF:F7:C5:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A0A7AFA44B768FFEE020F7D1A897303617D49F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/022e9895-00ba-4757-9163-fc620b40556d.roa
Signing time: Wed 25 Feb 2026 00:40:06 +0000
ROA not before: Wed 25 Feb 2026 00:40:06 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f36:3400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:0a:7a:fa:44:b7:68:ff:ee:02:0f:7d:1a:89:73:03:61:7d:49:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 00:40:06 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=203870821d62416899659bde27006d204f99d7b163da07fd75ccb25445175adc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3b:dd:90:dd:e5:20:0a:29:72:e3:a9:f8:1a:
b1:d4:70:3c:c9:1f:e2:36:37:cc:65:1f:3c:a3:ad:
d1:ce:66:e3:d8:8a:22:3b:0d:fc:4f:43:b1:80:09:
59:06:28:03:45:3c:e4:f4:1a:c4:43:47:2b:b5:0e:
0f:73:be:31:8f:96:35:d9:37:49:a6:37:3e:08:c4:
b4:ed:ba:5e:b6:36:94:89:28:20:cb:b4:48:b0:67:
00:98:ea:50:bb:0a:21:01:7e:78:df:7d:2b:62:cb:
15:90:0f:da:ff:f0:60:a8:4b:42:4c:7d:e4:2c:34:
f3:13:21:aa:f4:61:19:d7:4a:34:0d:7c:f4:a0:11:
87:87:53:56:4c:f5:c9:e6:6b:32:a9:ed:eb:cf:6d:
9c:4f:87:61:ee:72:51:c4:87:23:6c:14:3c:5b:87:
d2:6a:4c:4e:86:fe:8c:e5:bd:da:22:f2:a1:82:14:
da:d0:dd:a3:4f:c6:b1:ed:52:e5:61:bd:c7:66:3a:
29:54:be:cd:3d:f2:7d:1a:b3:d5:81:30:fd:42:04:
10:6b:80:e8:51:72:a2:cc:ed:98:48:b3:ae:2e:6b:
ba:1a:3a:29:0a:f0:3a:c3:70:9d:a6:6f:9e:ad:90:
5e:78:2c:d7:55:14:0c:07:93:9b:60:30:41:70:a8:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AF:B4:84:7B:62:1C:15:40:4A:6D:DF:46:B3:38:9A:AF:F7:C5:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/022e9895-00ba-4757-9163-fc620b40556d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f36:3400::/40
Signature Algorithm: sha256WithRSAEncryption
34:f0:3d:b6:47:d7:67:62:ca:1f:5a:9f:b6:92:a1:b4:ca:05:
03:73:4e:26:35:33:ea:ee:e5:8d:01:8c:f5:3d:0a:2b:09:0f:
a6:cc:2e:20:b8:b6:4d:5b:4b:ca:5d:29:1b:1f:6e:e7:f9:22:
fb:02:68:4b:c4:ad:f4:1b:a3:4b:40:44:d6:0e:ed:0b:1a:b8:
9e:e1:be:2b:3f:9c:d4:fe:a3:0c:6d:87:8d:d2:28:34:2a:98:
28:a6:62:60:af:e7:cc:75:3b:95:92:4a:0d:52:a9:41:06:86:
37:aa:3d:35:4c:c5:96:1b:b0:bd:0c:1e:0b:3b:c6:22:1a:14:
5d:2f:da:57:16:29:e5:1e:c9:94:fc:86:a0:c1:d6:f4:f0:cf:
38:8a:0b:30:28:fc:9a:9a:13:69:0a:fa:60:ef:19:b6:ec:83:
df:71:55:27:af:d7:19:e3:33:36:c2:34:f7:33:87:e1:57:62:
41:b5:b1:bd:1d:c2:5c:d9:f2:03:d1:d7:f2:b4:c4:50:3e:17:
31:ac:e1:91:d0:cd:6a:5b:e6:38:b4:b1:5e:99:8d:9f:3e:ba:
dd:8a:f1:1d:e3:33:45:2a:d2:06:af:1a:4a:fa:ea:fa:50:e4:
ce:f5:3f:f8:4d:32:82:d2:6d:e8:42:3e:50:4d:ed:5b:02:4d:
a6:a7:7d:1a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:52:52 2026 by rpki-client