
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
File: 0646c84a-66ad-4774-8199-e2472141283a.roa (raw, json)
Hash identifier: YDokwa3k1CYflcjleZacI9kteTZ3b5UDeP9kzK3p/kY=
Subject key identifier: D9:82:36:03:34:D5:B3:7F:06:66:7F:AB:27:56:AA:16:3D:83:38:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 23E9EFC0BC24EFB266F1416DD943963C690024F9
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
Signing time: Sat 07 Feb 2026 00:10:57 +0000
ROA not before: Sat 07 Feb 2026 00:10:57 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 155.254.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e9:ef:c0:bc:24:ef:b2:66:f1:41:6d:d9:43:96:3c:69:00:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:10:57 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=ccc4036dc10be61c5ba6aeb2faf3a1d79099c133afee1c0075f2f32dcbf9b7bc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:59:d8:0b:bc:6d:d2:82:51:94:7a:87:3a:
28:cc:b0:fd:ab:41:7e:36:58:39:89:b7:4c:2f:10:
52:fc:90:24:f2:a8:55:ef:69:18:8d:67:4b:91:14:
f3:e5:a1:b0:c4:3b:31:57:b2:2a:91:03:1c:c6:ec:
19:b1:44:29:6a:97:e1:a5:32:25:28:2a:ca:44:96:
d8:7e:81:7a:83:07:d7:65:1d:a1:e4:f7:68:1e:77:
9f:1c:9e:53:ba:33:54:ff:b9:23:b3:24:31:39:90:
84:da:16:41:46:52:38:7f:b4:d2:d0:c5:e6:ca:20:
b6:33:6f:de:be:e7:88:a5:b8:30:c1:0c:da:02:79:
80:29:e6:76:91:a3:8c:68:f3:1d:17:98:7d:16:bb:
75:ee:68:69:ee:62:e6:ac:02:6e:79:c4:d1:1d:b9:
ea:cb:6e:0c:e7:7d:20:06:02:7f:d0:af:ab:fc:af:
a6:46:0a:15:17:0a:ed:f1:0d:0f:91:18:94:22:18:
5b:a4:f7:b6:f4:3c:d7:00:3f:c3:8b:75:29:b1:6f:
b9:45:84:e3:1c:1e:aa:32:e9:cf:7f:4b:66:a1:6a:
91:89:6e:87:0c:34:8e:bf:08:c0:ea:0a:c8:3f:07:
21:5a:b6:9a:a7:89:c8:a5:f7:69:aa:53:5e:e3:07:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:36:03:34:D5:B3:7F:06:66:7F:AB:27:56:AA:16:3D:83:38:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0646c84a-66ad-4774-8199-e2472141283a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.160.0/19
Signature Algorithm: sha256WithRSAEncryption
7f:f0:43:b1:12:15:6a:f2:63:3a:41:85:cc:8c:09:5c:60:87:
b7:be:2a:8b:da:c5:45:08:67:06:02:1b:cc:c6:bd:bd:63:e3:
2c:cb:1d:a5:7b:1e:f6:52:76:80:fc:83:e8:45:4f:3c:94:54:
e7:c4:79:24:c4:fc:74:3a:5e:ad:84:59:f9:d3:0c:27:94:e0:
a3:2a:c5:60:ec:d7:1c:3c:1e:f9:7f:e3:06:fa:39:1e:13:a6:
13:82:25:22:b5:8d:20:fe:3b:1c:e5:50:93:7c:09:e9:17:b0:
a1:90:0b:97:71:13:a7:14:81:77:b8:2f:7e:b0:bb:46:26:74:
a5:bb:73:b2:ef:6a:3f:dd:04:0d:b3:d6:e7:51:3f:41:56:88:
22:8a:62:1d:05:8c:c2:34:79:90:09:3a:0a:2c:4b:f3:73:96:
2c:95:d0:73:5e:43:78:1e:1e:44:5c:ff:35:0e:e6:4f:f2:73:
14:0a:21:ad:55:96:26:ae:ba:66:71:40:d3:4a:98:83:16:77:
77:45:dc:08:fa:65:c5:01:7a:62:00:35:a5:9b:00:06:3a:57:
cd:c4:c1:f5:75:02:ff:9b:cc:46:e6:9a:1f:d9:9c:e4:84:a4:
40:3a:b0:2b:03:79:c6:2d:6d:93:00:f4:b1:38:a3:79:a7:53:
75:d6:57:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:25 2026 by rpki-client