
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/081afbd4-f0e1-461c-abec-224424f7d574.roa
File: 081afbd4-f0e1-461c-abec-224424f7d574.roa (raw, json)
Hash identifier: oKKP8G05WacuIr/a3SFmPj2wX+3dIXsWau+JSoqoPF8=
Subject key identifier: 10:A8:6A:B7:03:A8:E2:0D:DF:3E:4C:9F:8F:1D:1F:57:A8:A4:C5:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 32F10D35F7EE4ED061D9802BA12F295499188975
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/081afbd4-f0e1-461c-abec-224424f7d574.roa
Signing time: Tue 24 Feb 2026 00:21:18 +0000
ROA not before: Tue 24 Feb 2026 00:21:18 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 162.250.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f1:0d:35:f7:ee:4e:d0:61:d9:80:2b:a1:2f:29:54:99:18:89:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 00:21:18 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=4bc5d09e7aec8c244dd9bd20522016817f63e3b7fa7c3f283ae47620e1205379, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:99:c9:87:dc:d6:11:0b:ea:bb:d5:d1:f7:aa:
de:c3:f7:dc:97:be:dd:e6:32:a9:1f:f5:ff:12:49:
a1:7b:f9:16:b2:85:38:f9:40:c1:e1:c2:3c:03:99:
c9:b6:a5:0a:98:96:64:44:be:a0:99:b2:c6:0c:e5:
97:46:03:21:ac:ee:e0:08:27:73:68:26:25:12:6d:
52:cf:61:b7:97:a8:6f:71:f8:ce:c9:9b:4b:5f:d0:
c3:23:35:11:30:4e:97:9b:f0:32:21:53:b4:78:c1:
2f:f4:42:4a:c8:a2:e0:cd:87:26:b6:45:f7:ad:0e:
f2:99:ab:65:fd:0c:97:9d:5d:25:f6:01:b8:07:4b:
b2:1c:34:77:7e:1a:20:92:76:32:5f:4a:21:ed:d9:
94:69:05:57:bd:a3:94:db:0f:81:52:84:93:62:de:
71:da:2b:44:29:0a:06:62:f6:a1:da:68:f4:e2:55:
f1:31:8b:48:60:f1:e6:8d:d5:a4:de:ea:ff:a4:46:
0c:1d:8b:1a:67:be:47:62:57:ab:2f:b5:a4:e1:0f:
87:0c:74:88:49:56:cd:a8:06:1b:79:b0:2c:c7:86:
97:bb:cf:59:a3:d5:2b:6a:99:ff:0a:3e:c8:29:e6:
dd:8e:b9:4d:94:e8:99:4e:fc:15:60:7f:f8:c2:f9:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:6A:B7:03:A8:E2:0D:DF:3E:4C:9F:8F:1D:1F:57:A8:A4:C5:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/081afbd4-f0e1-461c-abec-224424f7d574.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.250.238.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:ad:a7:eb:af:cf:9f:78:35:bc:bf:58:8f:7c:e2:04:57:50:
6d:8f:c1:2a:fc:d7:5a:a8:14:98:3b:a1:7e:39:16:a1:b0:f9:
c3:dc:01:9d:70:9d:22:57:f2:b2:a1:df:33:bd:3c:02:0c:02:
99:50:92:00:ee:80:56:b1:c7:03:c4:17:26:0b:11:50:76:3d:
e8:38:25:9c:bc:f4:25:d6:7f:08:a3:30:1c:a2:cb:08:f9:39:
d5:8b:86:11:64:9b:1b:d3:cd:1e:55:6c:c5:e2:dd:4d:1e:b7:
2f:6c:85:a0:f7:23:c9:91:99:3e:31:62:cb:dd:1c:ce:6f:1d:
de:52:f9:28:18:ca:f8:17:19:15:10:bd:1b:59:ef:62:98:07:
0a:23:48:c6:a8:f3:73:33:e5:8f:45:09:3f:86:9c:4b:e5:7a:
64:24:32:8c:f8:e4:51:41:c5:f9:62:32:00:b5:be:49:36:f8:
15:0b:9e:7b:37:f5:81:f6:40:98:bd:f1:8a:bd:68:d6:ae:93:
64:22:71:e6:fc:d7:11:1d:a7:dd:4d:64:89:4d:27:71:01:7f:
9b:92:08:ab:31:78:24:2b:99:66:dd:f8:2f:81:fa:59:15:b5:
30:11:be:62:cb:ab:36:18:85:3f:64:6e:58:8d:b2:d5:d6:0d:
e0:00:81:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:44 2026 by rpki-client