
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa
File: 0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa (raw, json)
Hash identifier: RKvRpfI3AJl3g60QVB14JnRFM4dUs3ywJFvwa5uL/k0=
Subject key identifier: 94:57:94:74:99:6A:83:83:4A:34:20:A4:FB:F7:36:94:A5:53:26:DB
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0FC3160233EC88F71F758840804E07C7639B7949
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa
Signing time: Sun 22 Feb 2026 00:51:14 +0000
ROA not before: Sun 22 Feb 2026 00:51:14 +0000
ROA not after: Sat 23 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 198.207.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c3:16:02:33:ec:88:f7:1f:75:88:40:80:4e:07:c7:63:9b:79:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 22 00:51:14 2026 GMT
Not After : May 23 23:59:59 2026 GMT
Subject: serialNumber=951a712160ebca819dd20ca9e48a1e94ef7c163abecc9c585edf4ac2cc47386d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:9c:c7:77:de:e8:cb:16:91:cf:20:8f:48:
2e:ea:1a:b6:b3:02:fb:2a:de:d0:4a:14:aa:8f:fb:
12:37:3d:81:34:7a:ec:77:7f:c4:ca:b6:03:07:22:
72:36:f3:b5:77:94:ce:8a:44:ac:90:e2:5b:e8:8a:
50:4e:e8:a2:04:38:2b:c2:85:af:62:80:fb:4e:f9:
9c:00:f7:db:14:07:78:ac:48:6d:1c:71:1e:f5:39:
38:85:d4:40:7e:f4:84:a3:1c:a0:f1:f1:44:83:80:
b2:f9:3a:10:46:d0:1d:b1:d6:9f:fa:12:1d:62:53:
76:e2:df:70:4b:1c:41:52:02:36:c3:8a:2b:c0:56:
c1:8f:94:4f:7e:6a:6d:c4:72:a4:ed:b0:04:0b:b2:
45:75:c6:59:f2:2d:94:51:0a:36:21:e7:90:b2:77:
c1:83:32:69:41:ab:e3:b2:01:dc:6b:c4:73:9a:44:
cc:c5:e8:25:2c:e3:db:52:9f:a7:bd:cc:ed:7f:62:
43:45:67:54:f0:e7:ba:42:2b:f6:f9:d6:02:93:3f:
06:83:17:a9:63:2c:2d:1d:3b:9e:6c:89:d0:c6:04:
06:88:1d:a4:0b:1e:1a:f9:9b:f4:9c:73:55:2a:85:
fb:66:40:54:a2:b3:66:c8:1a:c3:20:13:6b:b0:c8:
20:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:94:74:99:6A:83:83:4A:34:20:A4:FB:F7:36:94:A5:53:26:DB
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0f798225-c98b-4e0e-9124-c1fb6d30d7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
198.207.193.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b4:38:63:b1:73:83:77:bc:98:68:8b:50:e5:b1:09:1a:40:
62:66:b3:84:11:62:7d:23:21:1f:5c:23:0a:dc:2a:4c:87:31:
c4:25:cd:01:2d:36:dc:5a:a7:07:eb:a8:2d:22:db:02:fb:4b:
3e:e6:06:1e:74:b0:68:b0:51:fe:7f:39:96:99:68:c9:46:1c:
eb:3d:fa:16:9d:a8:a5:cc:72:93:a5:87:02:7c:74:a5:47:e3:
fb:56:77:1d:e3:a9:8b:fd:30:93:9d:52:1f:94:f3:8c:60:c0:
4a:3d:2e:9f:5c:93:18:b2:69:a8:93:e3:2f:ef:f5:3a:d5:9e:
3c:e5:47:6b:5d:d1:d1:67:e3:f8:72:ef:a8:4b:85:b7:88:a0:
33:7d:c8:75:b6:13:0c:e9:e7:d7:46:da:54:a9:ea:b4:41:41:
e3:2c:ec:94:36:23:de:79:a1:73:99:53:71:70:af:1f:f9:64:
23:b9:89:bb:6d:c7:b6:3c:df:00:44:b3:a8:59:42:7c:bd:a5:
7a:c4:c1:d8:c6:5f:b4:22:63:13:24:ab:c6:df:1e:2a:63:4a:
32:95:12:1a:98:7e:6a:33:20:57:c5:f6:23:3f:ed:61:9d:05:
e0:89:d2:dd:76:87:75:5a:a2:dc:95:92:fc:1e:49:01:f4:c7:
91:c5:91:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:18:56 2026 by rpki-client