
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dce52a7-d1c9-46cb-ab82-ad4dd26fbc34.roa
File: 3dce52a7-d1c9-46cb-ab82-ad4dd26fbc34.roa (raw, json)
Hash identifier: Mp6KQVwB+0ykMXxaZacUp46eqcUp+TEBvL9ff1a407E=
Subject key identifier: D6:A9:72:1F:CD:77:65:45:AE:32:C4:09:5B:BA:45:BF:A3:D3:DB:C6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 66581FB53A83AE80071445B7ECCF5F84E6A68506
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dce52a7-d1c9-46cb-ab82-ad4dd26fbc34.roa
Signing time: Tue 24 Feb 2026 21:36:36 +0000
ROA not before: Tue 24 Feb 2026 21:36:36 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 16.19.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:58:1f:b5:3a:83:ae:80:07:14:45:b7:ec:cf:5f:84:e6:a6:85:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 21:36:36 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=6a8ce447827cdce9b57c586a4b29e391e7ea65c113d5befdd8af72ffface94b6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c9:4a:86:2b:95:bf:22:a0:be:3c:ce:56:c9:
21:97:e1:83:42:89:e5:ec:54:a0:07:4b:39:7e:17:
54:6f:18:97:d6:6c:39:b7:04:4a:18:2b:60:10:3b:
4e:30:01:dc:38:35:f8:d2:df:52:cd:49:ac:9e:04:
4f:45:63:36:7a:2b:01:45:bc:ec:d3:87:bc:be:0b:
a4:ed:b5:e7:d5:cb:95:5c:93:78:94:ee:9c:eb:f1:
03:b5:9e:e8:33:99:8f:98:75:82:41:c8:ba:cb:c1:
c4:fb:7d:5d:c0:c0:b4:f9:6a:1a:3c:60:cc:6b:2a:
90:24:60:fd:6d:9e:9d:f8:97:8a:ff:04:bb:89:52:
4a:b5:0f:fe:19:d0:f4:af:9e:37:12:e4:6a:47:ea:
fa:d4:6f:14:1c:9a:56:70:cc:b5:d8:24:ce:5c:5d:
ae:61:02:ef:f4:2d:d4:3f:1c:87:05:e5:8f:00:d0:
41:ff:6b:d9:c7:82:7e:20:bd:fd:00:9b:7f:a1:31:
60:01:08:70:95:c6:1a:9d:3a:df:7e:71:5d:e4:91:
b6:d5:9b:ef:94:25:9d:c8:8a:54:79:73:53:87:12:
e6:8c:94:07:e6:81:4d:a6:51:55:77:c9:96:99:61:
74:c1:42:aa:9d:f4:56:8b:f1:90:49:a3:9d:3e:7c:
f8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A9:72:1F:CD:77:65:45:AE:32:C4:09:5B:BA:45:BF:A3:D3:DB:C6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3dce52a7-d1c9-46cb-ab82-ad4dd26fbc34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
76:05:97:f5:40:91:29:8c:31:69:0d:f8:f8:25:12:bf:4e:83:
e6:06:fa:c3:2e:c9:e2:b9:09:82:16:2d:b2:57:3f:36:40:f8:
ab:a0:53:81:51:a8:59:f4:67:87:6a:a0:7f:bf:70:81:5f:c7:
41:ad:4c:63:49:66:22:01:9c:38:68:8c:f4:8f:1e:92:4b:94:
ae:f7:ad:f6:bf:3a:61:4a:aa:3c:b0:e8:05:09:72:81:a6:35:
bf:4d:0b:75:bb:db:11:a8:ed:f5:fd:f9:6e:2c:f1:b7:40:0e:
43:8a:78:e1:b9:09:46:15:aa:48:5b:45:94:d4:07:8a:42:29:
8d:c5:e4:9f:c2:7e:74:e3:08:8d:5b:91:8c:a6:46:3d:26:31:
cb:5a:fc:ed:b6:0f:ec:9e:77:9c:d6:bd:36:df:c1:4e:9e:86:
7b:71:58:84:57:82:60:05:01:95:48:72:3e:97:09:21:f6:f1:
b4:f2:fc:eb:24:af:34:75:50:c9:3a:9a:e8:f1:71:f0:84:62:
93:8b:47:39:6c:cc:bf:49:29:de:36:7e:1a:8e:1d:7a:36:98:
f4:5b:0d:44:4d:16:28:a1:5d:2b:4e:b5:d9:eb:c5:fa:a0:39:
4f:00:1b:8b:0e:ce:87:61:8d:3b:e7:ba:c0:d2:b3:58:fc:e9:
1a:94:bf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:19:50 2026 by rpki-client