
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa
File: 42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa (raw, json)
Hash identifier: XCjFo8HQkaOdnlzYBD8l7axAr5tl8Nen1PqcWdejkns=
Subject key identifier: FA:21:22:D1:72:44:0E:DB:42:C6:0F:F4:00:B7:81:48:82:9B:6A:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1430FF88FADFAA5A55722E439FE47333EEA1536D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa
Signing time: Sat 07 Feb 2026 00:01:12 +0000
ROA not before: Sat 07 Feb 2026 00:01:12 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 16.117.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:30:ff:88:fa:df:aa:5a:55:72:2e:43:9f:e4:73:33:ee:a1:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:01:12 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=546165b06e1b1a0765ffbf381778b95bd12c2e77794e25fc31fda73d6bde4fdc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:40:dc:2d:02:4f:1a:48:61:d3:58:ff:3b:
5a:34:a5:9a:ce:14:71:8d:93:ee:2d:4b:36:9a:18:
af:7f:f0:45:93:e4:76:e0:e1:dd:b9:84:1e:0e:82:
5c:9b:b1:2b:13:ac:5f:22:c3:e1:14:35:3d:8f:0b:
d1:4d:d1:4d:4a:4b:df:e8:95:1d:8d:b8:e6:64:0b:
63:97:cd:1f:7d:76:40:1e:9e:99:3d:c3:0f:03:7b:
4f:41:fe:8f:5e:a4:3b:b9:62:ad:2e:72:68:f2:22:
07:43:00:25:80:e3:ad:6b:7f:49:8a:36:07:33:cd:
44:b5:67:50:81:af:9b:d2:5b:2d:55:47:c9:17:e2:
18:b4:b1:5a:96:a9:5a:f8:23:fd:3f:a6:89:38:fd:
79:d9:8f:9b:8a:14:bf:9d:74:27:cb:79:64:96:cb:
17:fb:9b:40:ee:7c:16:bd:d1:04:72:62:6e:43:73:
23:07:7a:0e:ac:a2:f1:2a:16:3c:53:6a:e9:62:93:
53:58:4f:90:64:9d:9a:35:1f:2a:0d:c1:82:2d:08:
8f:51:8d:bc:0e:ea:69:70:6f:99:c0:a9:98:7b:27:
f8:8f:00:6e:d3:6a:e0:b5:ea:8a:bf:92:41:06:fe:
1a:45:b0:2d:45:94:84:f8:10:3d:87:39:79:51:ca:
89:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:22:D1:72:44:0E:DB:42:C6:0F:F4:00:B7:81:48:82:9B:6A:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42a2bbd2-8c5f-4cb3-a587-1cfd7c28078f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
16.117.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9c:37:3d:ef:b7:57:83:ad:a0:bd:31:d7:28:68:93:ab:70:08:
38:07:41:95:6c:e4:29:84:7f:16:85:99:dd:97:13:15:f5:a2:
bd:57:3a:c6:61:b5:13:03:e7:6d:16:e7:ab:4d:0a:36:62:61:
06:c7:15:94:8f:a9:76:19:f7:68:dd:dc:93:81:33:fc:2b:9a:
ac:2a:88:b1:6a:3d:4e:c3:e2:b7:36:de:4b:86:21:85:43:ac:
51:be:29:6c:ce:ed:0f:16:73:7b:2f:3e:48:75:d9:2d:a1:1a:
67:66:82:1d:cf:1d:c1:86:2d:47:4c:5b:41:da:ed:d0:fc:a4:
55:13:75:64:07:97:4a:66:52:72:3c:20:22:26:0f:52:9c:a8:
72:94:35:14:de:ff:08:73:6b:00:55:6a:83:a9:6a:bd:67:c7:
00:c4:b0:32:93:db:27:5f:68:52:82:d7:1a:4b:f5:9e:d0:fc:
f6:da:35:1f:22:ac:6b:75:5a:d0:c3:d5:3a:25:d0:93:6d:87:
11:7b:22:9f:a5:56:4c:6b:ae:95:81:b4:1c:66:bc:87:59:b1:
dc:39:df:3d:35:64:d9:90:bc:69:8e:c5:36:ee:cd:7d:dc:36:
51:99:45:7e:73:8d:e7:8e:aa:a3:e6:2f:d5:44:7f:04:51:37:
2a:76:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:30:27 2026 by rpki-client