
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062d9d6d-7664-4130-90d5-11baa299983d.roa
File: 062d9d6d-7664-4130-90d5-11baa299983d.roa (raw, json)
Hash identifier: 853He06RQWt5LucQNip2vZq9odTKk+B6oVKUgd5K/D8=
Subject key identifier: 84:2C:CC:69:8A:4A:1F:21:C4:D3:3E:E4:0D:DD:A7:41:29:4A:61:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0767258BB3FEEF7386A6C7358453C64FA27062C9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062d9d6d-7664-4130-90d5-11baa299983d.roa
Signing time: Sat 07 Feb 2026 00:01:10 +0000
ROA not before: Sat 07 Feb 2026 00:01:10 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.185.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:67:25:8b:b3:fe:ef:73:86:a6:c7:35:84:53:c6:4f:a2:70:62:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:01:10 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=258f54b2c5a6508f2575d7966dd2c3f0150b5b0aa561d23f253e8a0d02c8971d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:05:c0:a8:48:90:b5:b6:0e:be:38:cc:54:
86:2f:69:30:00:03:c1:7f:11:02:65:c9:c7:dd:1d:
bc:7c:e3:03:99:7a:68:16:7a:83:6d:a9:a1:2c:30:
43:b5:16:ca:ec:28:b2:12:9c:02:68:ed:1a:9e:35:
9a:70:1e:3d:df:a9:08:8c:81:f3:e2:d2:8b:91:4c:
e0:cc:ce:35:51:e3:44:16:21:0b:5c:4a:71:dd:19:
5a:c0:06:72:fd:94:8c:43:77:f4:c3:12:15:bc:3c:
41:a6:9d:2a:41:6d:41:cc:4c:6f:14:58:a1:9c:04:
a3:0e:de:ef:3d:b0:14:6b:01:6c:74:85:4e:58:5e:
25:0a:2e:55:a6:46:98:b9:1b:58:03:d2:f8:d7:d9:
bc:04:9b:bc:9f:f9:dc:3b:ec:17:db:1a:59:24:07:
4b:c2:ee:bd:dc:d0:8c:43:65:e2:da:bc:6f:40:47:
d0:59:6f:f7:9c:08:a3:0f:77:96:cb:84:cb:26:5f:
ef:de:0d:b1:95:96:ac:f8:61:04:b4:45:27:a4:92:
04:ea:16:c9:9e:ec:bf:5b:cb:64:e1:8c:f2:d5:17:
03:93:d2:3e:6b:98:e0:6b:5c:e2:da:43:61:fb:53:
d8:65:be:61:10:b8:25:0c:e8:cb:c2:e2:86:b8:35:
99:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:CC:69:8A:4A:1F:21:C4:D3:3E:E4:0D:DD:A7:41:29:4A:61:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/062d9d6d-7664-4130-90d5-11baa299983d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.185.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0c:ab:dc:29:1c:bc:78:2a:44:1c:c6:9b:70:be:e3:5e:e7:89:
38:72:8f:f6:12:c0:a1:a3:92:44:8e:7e:06:a0:0c:12:fd:36:
79:f8:2a:9d:f5:e3:71:35:27:0a:04:a1:dd:7f:fb:0e:4a:ea:
a3:6a:19:20:fc:4d:f9:33:4c:3a:94:5e:3e:50:9d:f4:f0:32:
51:82:c9:74:fa:80:63:9c:80:23:ab:f1:eb:d8:44:36:37:c9:
94:e5:16:48:0d:c2:ad:5c:3e:33:20:d5:37:f8:1f:f6:74:13:
58:70:96:fc:98:3a:5d:99:9b:85:f8:73:5b:e4:fe:55:4b:f6:
fa:94:ce:cd:aa:58:3a:d1:4b:c5:2f:9d:18:46:12:c2:30:aa:
78:e1:4a:2e:9f:6c:49:c5:79:1d:ac:13:1e:cf:67:ec:b0:7c:
91:f2:1f:2b:56:b2:78:33:1f:74:e0:5b:85:b3:b4:89:c4:34:
92:da:18:c1:c4:36:76:e4:84:18:e4:a0:d4:ad:63:02:ee:90:
b8:05:77:f1:82:8c:d6:9e:2d:fd:51:7d:11:33:65:ef:9f:42:
8f:e5:87:88:53:7f:00:b4:c8:e6:62:a9:cc:85:b9:f7:3b:ef:
b0:cc:7b:05:30:ff:75:8e:94:ec:98:ab:fd:76:24:ad:6d:3b:
8f:f8:3b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:35:40 2026 by rpki-client