
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa
File: 34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa (raw, json)
Hash identifier: mvSA+YJBOFluw36UEedo1KhhNnIvKpVwAiHEFGLItz8=
Subject key identifier: C1:81:0B:20:31:54:92:D0:6E:3D:FC:79:E6:F5:D7:32:92:47:F8:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2FD03152981B581482ED8D2AFCBF0F9325982392
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa
Signing time: Thu 26 Feb 2026 00:21:15 +0000
ROA not before: Thu 26 Feb 2026 00:21:15 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 72.44.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d0:31:52:98:1b:58:14:82:ed:8d:2a:fc:bf:0f:93:25:98:23:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 26 00:21:15 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=a45852d97c45cdb3f038e26cd0911c455e659cc53e750d7375d02fef72ef1376, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6a:6f:de:d5:8f:1a:b1:91:dc:17:d7:21:2e:
2c:2e:5d:c0:1a:95:ae:32:e9:ee:e1:49:37:ef:dc:
19:d3:26:5f:c0:55:31:d2:a9:99:5e:ec:42:99:16:
18:82:36:2f:16:01:d1:71:3a:b0:58:5c:98:19:ab:
bf:e8:97:77:d6:e4:fd:2c:8c:4d:47:57:39:04:12:
02:58:2e:b7:4f:91:e6:7c:40:84:a2:e0:2f:6d:cc:
e3:33:73:ba:11:4c:61:92:6c:fe:b5:b0:08:44:7e:
09:8e:c3:60:ca:9c:6f:15:fe:a6:06:9b:81:d0:28:
d5:90:fb:5f:0e:58:ec:9d:55:16:0a:31:4a:d6:e9:
a8:10:57:11:94:c9:26:d3:cd:de:99:1b:00:b3:ba:
34:91:4f:7f:f8:ad:88:b4:c4:b7:bb:50:c2:a4:13:
5c:4f:62:69:0b:a8:9d:bb:ef:59:15:30:b3:cf:3c:
31:7a:4f:aa:be:1f:ca:84:37:55:8f:a6:dd:25:2f:
b1:1f:1b:80:7d:a0:17:d5:bc:3d:57:26:a4:75:a7:
ca:2e:52:53:67:81:b5:0e:5b:42:f0:ed:fc:c1:18:
d3:1f:43:86:2a:40:72:fb:b3:ad:59:9f:93:ec:be:
a9:d5:f0:be:6f:2b:1f:b1:0e:79:d9:e3:0f:02:cd:
f6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:0B:20:31:54:92:D0:6E:3D:FC:79:E6:F5:D7:32:92:47:F8:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/34cc8adf-189e-4a7a-bdf6-9fcee351baf1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.44.32.0/19
Signature Algorithm: sha256WithRSAEncryption
38:66:df:06:c1:52:0e:b3:4b:8c:f1:28:8a:9a:c1:75:a7:73:
91:37:17:4b:1a:67:ab:76:78:06:cb:4d:18:22:90:52:a4:77:
4c:a8:5a:40:a9:8b:df:b7:e0:da:d6:fc:23:c4:b6:40:a7:95:
8c:2e:01:50:64:91:d6:66:53:e0:98:25:cd:50:7d:60:f5:d1:
7e:4f:a1:b9:00:6b:8b:c2:9d:68:86:c9:96:0f:b4:4d:a3:89:
6f:89:ee:32:1c:a6:17:b9:e5:8a:75:1d:d2:e8:b3:d4:af:1a:
56:40:b0:0c:e8:5b:be:ea:5a:5f:66:53:81:be:e3:43:e9:35:
50:de:27:5c:56:03:50:0f:72:13:37:38:c5:36:f6:3b:5e:dd:
34:76:5c:6e:9e:01:12:37:c5:64:09:a8:ef:a2:c9:e2:b3:80:
c4:ef:be:9a:a6:e1:e5:9e:de:5f:97:b7:ea:06:fa:15:45:ae:
02:81:17:75:cf:a3:cc:33:de:7a:58:97:a1:00:2a:69:41:5d:
5e:44:1b:45:b5:dd:b9:cb:84:46:94:21:08:90:f2:aa:42:59:
9f:07:19:59:87:4f:04:32:2a:b8:e3:17:8a:27:77:df:ab:55:
f2:0a:55:bf:59:e0:e8:8e:bb:27:b5:19:31:97:27:9e:97:9a:
20:57:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:22 2026 by rpki-client