
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa
File: 210b8422-48d5-4f34-b821-4a72f419973a.roa (raw, json)
Hash identifier: qBzbc/jHmNLwdBGrpAmm2n9M3vb0i9/V/2x+YIS54NQ=
Subject key identifier: 6F:C3:93:75:D6:F2:E0:26:8B:C1:27:14:3C:FE:3D:A3:E9:B5:9B:88
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 14373E2A72746C7B550E10B6706C2CFEC1EB9EC3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa
Signing time: Thu 26 Feb 2026 00:50:44 +0000
ROA not before: Thu 26 Feb 2026 00:50:44 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.39.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:37:3e:2a:72:74:6c:7b:55:0e:10:b6:70:6c:2c:fe:c1:eb:9e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 26 00:50:44 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=a38787a816dc6426cadfdae223037f09c45b83a4f34f04394ea4adc61a1261e3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:a2:ff:0d:7a:fa:dc:31:84:2b:a4:6a:48:8a:
25:6b:b9:34:8a:f9:26:9b:ea:a4:b7:99:72:ed:50:
82:3e:8f:e2:00:e5:6e:8e:d7:d1:78:db:e2:13:fa:
f2:92:8c:6b:3e:43:6b:f7:1f:b4:ef:6c:d5:fc:35:
02:a8:be:0f:6d:68:3b:4e:1e:90:0c:ba:8c:5b:dd:
c7:42:44:0a:22:81:c9:c8:5b:a4:23:9a:42:31:68:
f6:c7:7b:9a:66:27:7f:77:bf:f4:01:65:1e:0d:0a:
f2:42:d7:34:80:fd:45:56:b6:c5:ed:c5:80:f5:4c:
b9:93:9c:15:61:59:48:79:d5:47:75:f8:86:a8:ff:
a0:d1:42:4d:da:86:13:9a:f9:b3:ec:9b:1f:66:3f:
e3:81:4d:39:b5:3c:c0:a2:6a:57:bb:92:81:2e:e4:
2f:2b:3b:f0:8f:02:af:a6:82:b9:cf:60:f0:db:0e:
0c:04:54:00:c0:9a:28:3f:4c:2f:cc:36:58:3e:9c:
ef:be:eb:6c:66:38:12:a7:11:45:b9:8f:c1:6e:4b:
a9:a5:45:06:77:fd:03:58:3b:88:a0:37:46:31:62:
40:22:32:5b:3a:3c:8f:34:f7:e7:d9:bf:10:4f:8a:
c1:9a:80:e5:3c:df:99:e4:eb:c3:8b:1a:b4:d1:20:
49:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C3:93:75:D6:F2:E0:26:8B:C1:27:14:3C:FE:3D:A3:E9:B5:9B:88
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/210b8422-48d5-4f34-b821-4a72f419973a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.39.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:70:7b:3c:ea:2a:bd:1c:32:a9:3a:a1:7a:e5:20:d3:a6:fc:
ee:d9:bf:0f:0a:05:82:13:33:76:40:69:59:5d:5f:12:5d:41:
31:d7:96:0e:06:e2:be:5e:a2:d1:80:67:70:c6:00:6d:62:bc:
7b:31:c5:7b:1c:87:a2:b8:6c:f3:e5:9e:1e:60:3c:62:dc:3c:
56:ae:71:bb:a4:ca:fa:4c:13:19:70:2e:75:79:9d:dc:8c:c8:
79:96:f8:6b:22:2c:e7:28:81:80:2a:62:31:6a:d7:6a:7c:a5:
a5:46:38:5e:cc:d4:85:ea:30:47:40:40:06:15:7f:9a:ea:57:
a2:4d:44:0f:7d:14:53:c1:b8:b0:3f:ea:54:6b:af:d7:1f:a1:
26:f9:4a:1e:27:28:15:7d:9f:21:a9:ce:79:62:b2:90:d4:43:
a9:4f:eb:6d:d8:27:d4:f0:4e:ec:f0:b5:fe:7b:89:b4:e2:b0:
21:9f:9c:b7:b4:d3:e3:f7:8a:0b:94:d1:25:a3:b7:52:6b:5d:
7a:5a:72:d8:45:8f:6f:0b:e6:93:3d:ab:55:53:36:30:e7:27:
5b:db:8e:81:da:42:8a:7a:0e:c7:fb:7f:21:ab:19:58:d1:ff:
c5:ae:cf:be:49:9b:93:89:0f:d8:50:63:f1:12:3e:c5:93:84:
26:78:88:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:12:38 2026 by rpki-client