
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/241c6e46-c2af-4033-92fe-5d5357d865f9.roa
File: 241c6e46-c2af-4033-92fe-5d5357d865f9.roa (raw, json)
Hash identifier: Hh2FVYlR/UEIwaRLshM4pGeLRzwArzKUHLu+L+v479c=
Subject key identifier: D3:48:D8:12:5B:D1:F5:B4:8A:BE:B5:42:5C:77:39:60:C7:DE:E5:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 77B95D56941AAF55FCC7144498F277EDF24EEE2E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/241c6e46-c2af-4033-92fe-5d5357d865f9.roa
Signing time: Tue 17 Feb 2026 08:36:43 +0000
ROA not before: Tue 17 Feb 2026 08:36:43 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 216.52.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:b9:5d:56:94:1a:af:55:fc:c7:14:44:98:f2:77:ed:f2:4e:ee:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 17 08:36:43 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=36b240ea5f10a3a9580238cbd8dcbb1115132272c39561988b1ac1a0d5affb39, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:34:07:8f:31:7e:07:24:2c:89:41:bd:62:03:
8a:f0:67:98:0c:88:9b:1f:5c:96:19:63:7b:f0:43:
56:a8:b7:cf:6b:45:2a:2e:c0:df:4c:84:7a:21:95:
35:d5:6d:66:a0:7b:4a:aa:bd:a6:95:93:7c:a0:45:
de:6e:4a:c2:f9:57:ea:cc:9f:81:19:09:b5:7b:06:
38:56:2b:55:40:4d:3e:d3:57:d1:37:87:40:c0:69:
9d:17:46:30:d0:1d:08:b6:20:00:04:d5:18:e6:39:
30:a8:42:7a:9b:51:04:05:2e:ba:2d:bd:f0:ec:d7:
42:40:83:5a:b6:1b:9e:c5:a1:f8:51:50:6e:91:1c:
26:e1:12:d4:bf:91:84:3b:8e:de:eb:1a:62:da:e3:
44:95:1c:08:ca:55:f9:45:f3:6c:06:b0:77:23:55:
dc:da:bf:52:db:c2:fb:6a:bc:13:96:b2:8b:79:c0:
30:92:52:43:5f:30:5a:86:b8:63:99:ed:ee:5c:1e:
ea:9b:fa:bd:f5:75:0e:9b:76:98:6f:76:31:27:84:
f4:f1:d0:d2:7b:96:6e:7f:54:5e:de:ce:d4:ef:c9:
c8:0b:50:2b:e5:a6:02:b9:03:fa:fd:0e:82:a6:b4:
6c:75:91:61:9a:ce:53:93:dc:19:05:5a:cf:6c:e6:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:48:D8:12:5B:D1:F5:B4:8A:BE:B5:42:5C:77:39:60:C7:DE:E5:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/241c6e46-c2af-4033-92fe-5d5357d865f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.52.152.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:01:33:ca:bf:97:88:66:e5:26:65:7a:b1:dd:cd:f5:56:67:
c7:fa:cc:52:6e:e1:19:d5:5e:aa:65:31:f0:77:9e:33:66:2b:
af:5b:3a:c5:3f:4b:c2:24:74:09:bd:96:35:2b:28:87:3c:d3:
72:16:73:0a:2e:d8:c3:a2:00:64:af:72:fc:e1:1a:a1:5a:a4:
a9:44:fa:b5:2e:32:03:97:b1:95:e1:75:2e:8a:87:eb:70:f6:
14:41:ce:14:c0:07:07:c9:c0:36:e6:26:d2:cd:88:81:f1:b8:
97:41:37:ae:c4:91:c5:19:b9:c0:b5:30:af:08:29:d8:30:09:
5c:d6:09:7d:72:61:ca:a8:fd:f0:11:cc:ed:e0:ed:af:a7:5a:
52:4a:ec:45:8b:eb:b8:4a:04:dc:dc:af:d5:76:02:2a:8a:da:
4e:57:e3:18:d0:20:34:24:61:38:31:30:02:49:76:58:c6:73:
8f:d1:83:26:27:83:a3:2a:d3:75:69:35:af:50:ec:ee:6c:60:
fa:24:14:d8:fa:e4:73:51:3e:2f:24:78:6b:39:3d:74:ee:79:
96:4a:cc:8c:ff:56:71:17:ab:55:a7:05:c7:70:e3:94:90:dd:
3a:d1:8d:8d:64:5f:ea:ae:34:c4:b2:0e:41:90:9f:61:ea:cb:
79:d7:dd:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:36 2026 by rpki-client