
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa
File: 3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa (raw, json)
Hash identifier: xjnYVsqCed9D6T3vcr4MX7zaBugJ4Mj64sVHDChEfUs=
Subject key identifier: 54:D5:BA:F2:DD:45:B6:7F:A6:5B:FF:7E:6F:FA:C0:36:D3:35:13:F4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 409D72308713E8D7F4B71D9ACF19A4DD95515398
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa
Signing time: Tue 17 Feb 2026 00:21:53 +0000
ROA not before: Tue 17 Feb 2026 00:21:53 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 158.252.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9d:72:30:87:13:e8:d7:f4:b7:1d:9a:cf:19:a4:dd:95:51:53:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 17 00:21:53 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=e76a8f72f5d1d161cb281ac47d440612b8fb564a0f61c2f10f0126cc4f3a59ab, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:71:5d:11:d1:d6:14:52:a9:cd:b3:0f:21:d6:
e8:48:b0:e2:41:d7:1f:73:11:8e:43:1a:57:39:dc:
2d:f2:64:5e:2d:bf:ab:36:4a:2d:e5:b1:46:14:8e:
34:2f:e6:3f:eb:a7:11:c5:94:02:64:9c:c6:d0:9e:
16:a5:79:6e:37:12:1a:cb:88:4a:2e:73:45:77:b1:
b8:0e:9d:b0:b7:84:41:64:e7:35:9b:9a:67:ac:fc:
69:ed:17:58:35:60:fb:4f:6c:f5:2c:61:35:70:ec:
51:11:64:fe:36:6c:1e:6f:39:fe:d7:24:45:a6:88:
7c:5f:7f:26:26:c1:78:15:5a:0b:16:dc:a6:8c:8f:
cb:d2:58:16:29:54:a3:2f:39:f6:5c:01:69:83:c5:
ae:fa:41:af:50:e3:62:f5:9e:8a:7e:21:db:9b:a5:
7c:a7:ed:0c:ca:ca:ad:ce:09:80:13:63:ae:78:49:
f3:1d:9b:99:dd:ae:d7:c1:90:85:04:2d:4c:3f:ee:
6d:86:94:fe:e4:f5:16:93:a5:74:79:61:1f:18:1e:
a2:db:d3:96:ee:41:ff:16:df:8e:54:93:74:84:a1:
e3:a8:fc:7c:9e:61:de:ba:4e:1e:ac:6b:3d:af:e3:
e3:5e:45:4c:10:b9:e5:30:f0:2c:86:e0:e4:bc:b6:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:BA:F2:DD:45:B6:7F:A6:5B:FF:7E:6F:FA:C0:36:D3:35:13:F4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/3fa0c82b-3f64-4bfc-8456-ad2c6fe0bc65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.252.0.0/15
Signature Algorithm: sha256WithRSAEncryption
13:54:e7:99:cb:eb:45:f2:d5:10:82:4b:e9:05:de:8e:6a:01:
f8:d1:5b:9c:13:e9:bc:f4:e6:0b:1b:5f:aa:2d:a6:69:f7:ec:
d2:54:69:a0:df:bf:ad:00:d1:7e:59:bd:47:0d:84:a5:2e:78:
cc:ec:28:f7:73:22:48:03:d5:53:ac:31:01:45:57:fd:f8:62:
c6:f1:04:41:53:b1:92:43:40:fb:b7:9c:8e:84:0d:22:64:dd:
a8:56:62:8d:a7:17:ff:43:10:b1:e2:be:37:81:7a:cb:cf:fc:
02:5f:c7:41:b4:02:01:16:f4:47:6a:26:d8:fe:9f:c7:fd:f4:
0e:19:46:bf:fc:f9:ca:c3:b4:8e:4e:fa:9e:46:fc:36:1b:47:
c3:5b:28:c2:c7:aa:ae:40:7a:c8:50:9d:cc:4e:60:7e:36:3a:
73:00:75:a7:9f:0b:42:f6:85:24:fd:e5:fc:7a:14:1b:c2:d6:
6f:cf:a2:22:ba:57:b1:8f:51:66:c7:1b:2b:53:3b:e1:42:80:
2b:08:9a:ca:a4:4d:99:a3:e9:18:44:d0:39:2f:85:73:d7:b4:
a0:7b:de:f6:29:12:07:69:64:9f:a1:fc:ae:27:77:31:cb:13:
fe:56:a0:69:a7:74:93:dc:37:ae:c5:45:b2:2d:31:75:a8:5d:
32:1f:4b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:04 2026 by rpki-client