
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa
File: 2cd2616a-9845-46c4-8003-b0526557ae7e.roa (raw, json)
Hash identifier: /OTUz7Sx/Ls67yIxRh0KCBwQHethbPIuVhFMFO47+Zk=
Subject key identifier: 88:82:9F:21:14:51:8F:84:03:B0:0B:C9:8F:D6:EF:23:38:3A:93:60
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 58592031D6EE1334B5BDD29966335D1D689E9BC0
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa
Signing time: Fri 13 Feb 2026 00:21:16 +0000
ROA not before: Fri 13 Feb 2026 00:21:16 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.18.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:59:20:31:d6:ee:13:34:b5:bd:d2:99:66:33:5d:1d:68:9e:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:21:16 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=0b3738965f9ee46abb18da8fd15b6bf35f8c62911b0273a1bdd80675decfa233, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:1c:25:d5:2f:9d:6b:b2:28:5c:45:f8:ce:
ce:4c:68:75:0e:65:9f:59:af:e4:f0:ca:2c:93:e6:
1f:32:81:b6:ab:3b:dd:8f:c1:ab:d8:85:68:03:d8:
34:e9:ce:cb:f7:02:4d:f2:8d:99:6e:25:f7:de:c3:
6c:9b:d9:7d:e9:08:e6:80:34:1f:48:ae:b0:d2:ce:
8d:f1:e6:00:4d:6e:95:e6:4b:72:2f:00:56:75:18:
22:85:f9:ec:ad:c6:5e:a6:ec:f2:94:a2:f6:11:40:
26:69:d2:61:6c:da:73:ab:a4:1c:8d:5b:86:03:b9:
c2:70:41:db:3c:2b:b0:4e:ff:77:97:8b:f6:e4:09:
ab:8a:9b:e6:01:39:ec:d0:ef:fe:3c:74:b7:00:19:
72:f7:e5:3a:39:13:a7:da:5c:ca:f1:2b:6f:0d:eb:
be:ac:50:37:33:92:f8:0c:fb:82:93:73:d1:47:d9:
ab:1c:11:8c:5a:9e:9a:ee:c6:e6:aa:da:6d:7b:6b:
49:73:8c:f9:e8:4e:dd:46:c8:c9:f3:ab:7d:07:80:
8b:e1:a6:c5:6f:d4:c1:d2:e0:0c:55:5c:e9:64:9a:
a2:13:4c:f3:46:78:04:35:f6:02:2e:98:0d:0b:08:
2c:75:1a:58:79:52:73:c0:47:43:b4:ed:6c:dc:78:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:82:9F:21:14:51:8F:84:03:B0:0B:C9:8F:D6:EF:23:38:3A:93:60
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2cd2616a-9845-46c4-8003-b0526557ae7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.18.224.0/19
Signature Algorithm: sha256WithRSAEncryption
54:5a:b9:fd:7a:09:df:50:e6:2c:be:59:86:d4:9c:b8:22:a6:
de:54:da:a0:ba:3e:c2:ff:25:15:2e:54:95:b8:85:90:d0:d7:
6b:50:e1:09:75:b0:58:68:7f:b8:b7:87:22:ee:c3:0f:e2:a7:
93:b1:b7:c6:3a:ed:54:6b:ca:39:56:aa:38:10:84:5f:40:35:
33:f1:c8:a7:86:dd:dd:e4:7c:5d:80:b4:0f:95:67:af:b2:a7:
fb:38:90:6e:7f:ff:aa:6a:4d:aa:f9:eb:c8:7c:ce:8a:38:93:
e9:93:ab:43:f3:75:7e:a9:93:b8:81:55:9c:42:62:94:06:28:
98:d4:94:bd:09:ea:33:d3:2c:01:5f:0c:0e:cb:74:17:dc:af:
19:ce:37:ef:3c:93:75:00:e3:41:e1:25:08:e0:ee:f1:c9:a1:
83:7d:23:63:87:75:84:e4:cd:b9:1c:8d:f4:f2:09:10:5a:b4:
77:bc:80:e5:08:49:b6:bc:29:56:39:46:a0:08:cb:a1:78:30:
61:2f:ce:cf:71:f8:d4:55:95:1b:b2:8f:d7:de:ca:f2:15:30:
bc:50:b6:0f:c9:17:96:8b:85:41:1c:45:5f:0c:bb:ea:6f:8f:
63:00:83:b2:9d:a0:33:37:c5:82:93:9c:73:26:b3:2a:7a:59:
85:d7:c7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:33 2026 by rpki-client