
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa
File: 26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa (raw, json)
Hash identifier: 5QfgqDPLYOZW6eN21RpzpUslcyo8MVnSanxNzarn+oI=
Subject key identifier: 26:51:0F:28:30:AE:5C:C1:65:BA:AC:86:4B:D0:B8:A5:B3:4D:2D:2C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 43340F16CFEBF892227C042A1E7CD5C8D31D3706
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa
Signing time: Sun 01 Mar 2026 00:31:23 +0000
ROA not before: Sun 01 Mar 2026 00:31:23 +0000
ROA not after: Sat 30 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.54.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:34:0f:16:cf:eb:f8:92:22:7c:04:2a:1e:7c:d5:c8:d3:1d:37:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 1 00:31:23 2026 GMT
Not After : May 30 23:59:59 2026 GMT
Subject: serialNumber=5f3738c152276dc06f4d98a9aa77e420ea258646b4639f9be273f81cba10a45a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e0:b8:21:0b:d1:a0:a5:bf:4c:aa:32:59:0a:
df:b6:ac:30:2f:bc:fb:2d:20:99:d8:15:b7:c3:da:
e7:f0:34:fe:20:61:89:5c:eb:50:91:76:70:82:64:
ee:a7:04:c9:2a:8f:0c:b2:f8:46:c7:b6:38:00:de:
d8:9a:9d:60:07:99:ed:19:0b:38:55:06:c4:ab:36:
11:0c:ad:4d:50:f2:50:73:23:0e:68:b6:9e:89:d0:
e8:11:b1:d4:b5:f6:64:00:f0:e1:78:0f:ff:27:22:
30:22:ca:8e:83:cd:a5:9f:aa:2d:ae:d6:6a:30:3d:
5d:95:06:5b:e5:48:79:fa:c4:e6:4d:2e:16:a3:88:
64:4c:53:85:b8:08:3e:79:c0:22:cd:7f:92:8f:b3:
72:e0:29:87:3d:c4:fb:96:dd:0e:b5:ec:ca:b0:c4:
1a:8c:8f:47:2b:ca:c1:33:ed:11:d5:92:70:f2:91:
6d:b8:dc:d3:87:7a:1f:99:63:3c:8e:4e:6d:99:20:
a7:30:12:c4:16:19:b5:10:e6:1e:21:fd:42:e2:fa:
5b:dd:6b:9a:ea:46:e1:d0:0f:7a:9e:a8:40:0a:5c:
63:dd:c0:23:7b:2b:e4:71:42:e8:0a:13:e0:b5:2f:
3a:95:ef:df:e9:64:58:0a:33:74:20:74:95:1a:ed:
60:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:0F:28:30:AE:5C:C1:65:BA:AC:86:4B:D0:B8:A5:B3:4D:2D:2C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/26b89c4c-4087-41fa-85b1-ba9fca50ad85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.54.52.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b9:ea:d3:02:80:c8:01:58:ce:0f:d9:75:d8:ea:f8:76:53:
39:44:25:ee:9e:e5:5c:8c:80:19:34:59:6a:da:e5:cd:e6:ac:
33:e5:6e:78:6b:76:51:01:b0:c3:30:7e:b6:09:c0:c4:92:cb:
38:51:bf:eb:16:8b:2a:19:ca:54:79:81:8f:8b:5e:39:31:25:
b7:7c:83:54:b3:4f:5a:88:16:a6:33:e4:80:b5:d6:c8:be:bb:
d3:55:c5:69:be:2a:0c:32:25:0b:1c:b0:54:c2:41:e2:e5:b0:
61:d7:16:12:ec:94:dd:c3:4b:96:2f:a3:e7:ce:98:4c:4a:c6:
2c:92:9a:47:9c:5f:d3:ce:f2:cc:63:f5:a5:3b:ca:e7:e5:4e:
b7:8d:69:bc:a2:78:d0:f4:ef:ad:38:71:61:81:03:a1:b8:ce:
7c:6a:0f:29:42:90:2e:12:ea:8e:9a:9b:c8:9b:81:30:03:06:
de:bf:f4:fb:04:92:76:4e:5f:26:25:fc:11:2d:91:3c:19:b6:
6a:1d:cf:8d:26:e6:d9:90:9e:ad:be:d2:4d:9b:f5:ea:82:f5:
cf:00:97:e2:02:94:d0:dc:1a:38:a9:35:ed:7e:10:a0:d6:65:
41:74:37:1f:a0:38:16:40:10:b0:c6:c4:1e:c6:00:bb:2c:29:
ac:36:29:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:01:09 2026 by rpki-client