
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa
File: 429a2825-6541-483f-a805-1faa5a6939bf.roa (raw, json)
Hash identifier: PVjCDMkFiMXjplBe76F1jm0o66UVYrC8WuKPxiA1hZw=
Subject key identifier: 2E:14:5F:60:60:34:DB:F1:6A:A6:8A:72:ED:14:5A:4E:AF:8F:2B:57
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 148EEB4CB55E8E749C780E846C9F40072CEDA901
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa
Signing time: Wed 25 Feb 2026 02:10:13 +0000
ROA not before: Wed 25 Feb 2026 02:10:13 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f14:c800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:8e:eb:4c:b5:5e:8e:74:9c:78:0e:84:6c:9f:40:07:2c:ed:a9:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 02:10:13 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=aeff9cf7da4811c68c973244e863c341e58663eea26a8b1eb38f187433bbc6f6, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:05:9e:78:75:a9:b8:bb:db:9b:e9:cf:ba:
c3:cd:18:93:59:88:58:29:48:77:cf:e2:31:c1:55:
7f:5c:81:ef:12:79:f8:78:08:30:15:36:10:39:db:
c1:08:50:b3:3b:e9:10:d6:25:1e:48:4e:d5:8a:fa:
29:e9:d3:1b:b6:06:10:38:f1:61:ea:34:90:11:0f:
02:ed:20:2b:82:90:23:ea:9f:6e:70:47:31:bd:6e:
02:da:d5:af:e8:2a:3e:5b:4f:22:c1:0c:fa:a5:71:
8d:58:ef:99:56:06:f9:20:8a:e7:3a:05:3a:d5:f7:
63:13:4c:b5:e7:b0:44:af:a7:4c:e9:44:df:5c:cf:
94:df:b4:cc:e5:be:08:43:6b:6e:36:42:11:cd:9c:
7e:6c:a9:56:b9:cd:88:60:93:c7:f9:0a:be:45:47:
af:7e:8a:ad:1d:bb:b0:14:99:25:ad:92:a1:b6:a9:
68:37:55:f7:17:f9:a2:61:05:4d:40:e6:85:65:9d:
ad:e8:db:83:6b:ef:92:03:1e:e5:82:60:ed:32:78:
0a:f6:1d:23:45:a9:ec:38:78:2b:f8:93:8c:fd:7d:
51:f3:67:aa:b6:0f:aa:50:c3:89:09:b7:e8:f2:a7:
46:72:b7:6d:c0:c4:c7:94:50:39:3e:b7:6f:54:81:
18:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:5F:60:60:34:DB:F1:6A:A6:8A:72:ED:14:5A:4E:AF:8F:2B:57
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/429a2825-6541-483f-a805-1faa5a6939bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f14:c800::/37
Signature Algorithm: sha256WithRSAEncryption
c3:34:48:9c:a0:fe:8e:d1:aa:46:35:0e:40:ae:52:37:b7:2a:
81:f4:c9:2a:31:1c:11:04:99:4d:d7:bb:75:ea:9c:27:ca:8e:
00:17:b8:aa:e5:b1:99:93:c6:57:5c:a6:8b:a1:72:bf:a7:c8:
af:43:7b:be:a0:a3:d5:2b:e6:21:a1:db:12:d7:34:f8:d0:2d:
2b:b3:55:46:bb:bc:35:6d:2f:1a:1c:07:db:ab:45:42:7f:46:
84:bf:c6:fc:67:fa:24:e5:35:82:c9:fd:1c:91:95:44:a1:31:
55:dd:34:6b:c2:08:5d:d4:ad:27:75:1d:d7:ea:1f:ce:28:ae:
3f:95:4e:9e:80:4c:9b:2e:92:c3:99:da:ca:c0:15:e6:09:63:
e9:98:62:17:57:9d:5e:a2:b1:0d:23:7c:0c:e6:82:de:48:18:
08:77:86:e1:d2:b6:18:c9:4b:a1:63:6f:83:c2:62:a7:69:46:
fa:ff:31:d0:90:a5:90:88:b2:15:3e:19:fb:45:90:a0:15:e4:
04:31:4b:51:35:46:a2:89:9a:46:6a:88:9b:5d:5f:64:88:a0:
10:82:8d:e1:09:57:33:28:8b:ee:f1:12:81:8f:ad:65:35:3c:
08:b7:71:ba:69:2b:41:f5:1d:9c:b1:4c:d6:50:9f:da:63:09:
15:02:0b:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:12 2026 by rpki-client