
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
File: 1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa (raw, json)
Hash identifier: r8NIZZLsGiRrWBY3/D3TmH35socziyjQyv+N7xbro1c=
Subject key identifier: 37:12:AB:28:BB:C4:C7:F6:E7:86:91:21:C0:CF:8D:8A:FB:2F:73:1E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6A269DA55AB8792A53FA620C3EA84448B28CC8F7
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
Signing time: Sun 15 Feb 2026 00:31:13 +0000
ROA not before: Sun 15 Feb 2026 00:31:13 +0000
ROA not after: Sat 16 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.151.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:26:9d:a5:5a:b8:79:2a:53:fa:62:0c:3e:a8:44:48:b2:8c:c8:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 15 00:31:13 2026 GMT
Not After : May 16 23:59:59 2026 GMT
Subject: serialNumber=8e911878ac98d72155cbb334e68eca335756764acad7c94b8873210c944006af, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:fa:37:9d:97:80:cb:0e:b4:55:fb:60:60:
cb:ed:99:1b:13:73:c5:7c:a9:b5:ea:93:23:1b:73:
2c:5c:dc:df:95:b0:d6:c8:ad:d2:b2:e5:e1:7c:a5:
dd:be:df:c0:5d:9a:b5:10:1c:97:85:f9:40:53:b3:
82:f3:7a:77:df:f6:8c:3d:6c:54:b8:8a:3b:90:d3:
a0:e7:9e:da:24:22:e7:e2:d9:27:3b:b9:61:63:81:
34:1e:4a:e9:07:95:32:31:dd:b0:e6:21:6a:ad:28:
e5:36:76:a9:25:96:1d:a6:e0:0e:13:bc:1c:02:8a:
c0:36:ba:d6:fa:b0:58:d6:ca:bf:63:96:aa:5a:18:
bf:f2:6c:45:9f:ab:9c:c8:80:5b:8c:eb:66:8d:77:
1d:80:e5:38:aa:32:74:8a:9a:36:f3:f8:a4:6c:d2:
59:a4:39:d4:1c:ec:7c:cc:a4:d4:7f:7c:2d:4d:26:
7e:38:04:d5:99:3a:a1:0e:6b:0c:0a:44:d6:98:1f:
f1:89:dc:dd:53:8b:7e:50:a0:3a:2d:cb:aa:c8:5b:
7c:a9:e1:6f:2f:08:e4:97:1d:f9:7e:82:08:7a:8d:
a7:c6:a1:26:8c:b5:30:8b:4c:a4:1d:04:1b:5e:fa:
a6:be:25:55:64:ae:88:e6:cf:44:46:db:96:84:00:
29:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:AB:28:BB:C4:C7:F6:E7:86:91:21:C0:CF:8D:8A:FB:2F:73:1E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1f470160-0f3d-4c5a-a75f-8740f2007e2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.151.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:6f:b4:d9:b1:f2:e8:9f:82:fc:d8:08:55:0b:be:67:39:ad:
0d:53:ce:a4:8c:cb:78:77:08:5a:a5:47:8b:a4:b9:56:fc:26:
d4:4f:7c:b0:6d:98:07:d7:6f:e4:16:be:35:98:59:a2:22:61:
ce:ca:a3:d2:0b:1c:40:ec:c6:b3:ab:8a:3b:d4:6b:6c:95:28:
d5:0e:0b:0d:e7:59:67:38:10:44:e1:ac:58:2c:4a:1e:18:6c:
6c:8d:e1:72:1c:94:92:43:24:18:3b:d7:b2:29:94:01:f6:d7:
6e:4f:d5:8b:30:e8:56:c2:a3:e9:47:71:43:d2:1c:54:0d:9a:
d8:6b:c5:3e:87:d5:fa:11:10:b7:c5:bc:e7:c5:6f:02:6b:a0:
a2:df:5b:da:00:d4:d0:69:4b:74:06:70:26:0d:2c:3d:0d:bd:
6b:e5:26:f5:9e:1f:e4:55:f1:e1:39:20:26:59:d4:78:59:f5:
51:fc:fc:86:c4:cf:f9:92:15:f2:df:9c:1c:9a:b7:90:13:14:
ff:a0:16:07:fd:2f:9b:2c:5d:64:9f:03:73:34:cf:72:59:b6:
5c:9e:a5:f3:48:01:51:d9:13:c6:eb:49:e1:36:aa:1f:b1:89:
6c:47:67:e4:c3:23:8e:d5:de:ed:e9:c6:76:26:89:ff:92:03:
57:18:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:52 2026 by rpki-client