
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa
File: 0c0e751c-d984-449d-ab22-482731648dc9.roa (raw, json)
Hash identifier: 8iMRqcDGlp7EvTUBwSKu5P85L1yKSURgr7JvuVt+XEQ=
Subject key identifier: 12:F3:68:57:E7:E3:72:19:C4:14:78:97:E3:73:4E:94:ED:43:46:6D
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 10C0C31809F76DAA5A3CCE4BBD34CBE493685FF8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa
Signing time: Fri 13 Feb 2026 00:10:30 +0000
ROA not before: Fri 13 Feb 2026 00:10:30 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.33.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c0:c3:18:09:f7:6d:aa:5a:3c:ce:4b:bd:34:cb:e4:93:68:5f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:10:30 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=5530e3e71f00ca18b6a669a240ebe23ba314681e65ff00c1b740ab436cf19539, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:72:3d:c5:58:d1:d8:23:a4:94:62:0c:73:0d:
eb:d9:89:c4:e2:bc:00:44:04:fa:39:01:0f:ff:d1:
2e:2d:bd:49:10:f4:1b:96:11:76:18:9d:a3:e8:3d:
89:53:6f:c7:fe:c8:96:1f:06:82:d3:fb:52:9f:4f:
44:5e:c5:1b:a7:4d:82:6a:1f:e9:89:d5:c9:e3:67:
40:80:70:87:ab:12:d3:1e:3d:ed:ff:99:2e:c8:86:
c8:86:98:0d:ce:6c:aa:ed:e8:e3:7a:90:24:98:fd:
e5:2c:f0:69:88:5e:20:3a:61:c5:d9:1e:8a:b4:96:
a1:69:d4:33:de:42:49:40:a6:00:37:bc:2a:bd:a3:
54:d7:17:77:42:7a:8a:6c:c4:20:df:b2:31:ef:7d:
fa:45:32:80:5b:12:32:fa:d3:09:81:02:dc:10:44:
17:89:2d:e9:48:06:db:ad:54:00:f3:f9:27:bb:42:
94:51:a9:35:35:a7:63:67:28:75:da:25:29:56:b3:
64:69:87:1f:8c:3c:29:57:31:d6:2e:60:3c:99:49:
5b:2b:69:c6:73:a1:65:29:3f:5e:9e:ca:8c:19:c4:
c9:9b:ce:ac:f1:81:97:59:eb:a0:28:30:0e:87:90:
82:d6:67:60:8e:6e:a9:8a:21:a1:a0:e7:54:66:45:
ba:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F3:68:57:E7:E3:72:19:C4:14:78:97:E3:73:4E:94:ED:43:46:6D
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0c0e751c-d984-449d-ab22-482731648dc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.33.128.0/17
Signature Algorithm: sha256WithRSAEncryption
81:bb:37:d0:77:d1:df:82:54:ac:51:a5:db:16:bd:63:57:04:
74:10:16:fb:cf:08:f1:ed:42:47:cf:1a:ba:71:40:18:48:c9:
d0:9a:bd:84:03:ee:90:c9:dc:89:c7:44:f0:cc:42:69:73:4b:
c3:89:4d:59:b4:e2:2d:31:26:1e:23:40:e5:eb:bd:22:8b:95:
a2:8a:e5:f0:01:cd:4c:73:a1:a2:db:e6:e7:0f:59:81:25:56:
f7:59:25:7c:29:6d:51:29:55:7e:9e:0b:26:58:66:a1:91:a8:
9d:91:d5:46:ad:d3:a5:5e:d8:84:96:89:1d:d6:65:ca:1c:ea:
e0:a9:9f:56:22:00:a0:98:48:8e:07:bd:da:20:b8:97:e4:f7:
c4:d7:f3:4b:15:9d:dd:ce:1a:64:d6:b5:ad:44:63:37:76:a5:
57:3f:27:f1:9a:bd:1e:66:6f:44:70:dd:b8:a3:1c:41:c1:e7:
87:1e:ca:c5:74:e1:48:dd:ca:f6:0a:71:8c:de:56:e3:c4:81:
36:ce:e0:33:46:8f:ab:cc:11:98:c3:03:5d:0f:e8:a6:a3:40:
27:23:53:31:68:34:3a:ff:93:0f:3f:73:5f:83:67:8e:c8:2e:
c8:1d:00:e9:72:0e:2c:fd:58:2e:a3:25:82:36:9d:f8:26:ab:
43:e0:d5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:49 2026 by rpki-client