
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
File: 42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa (raw, json)
Hash identifier: K30p6A3t792c9Hhm1xbKcVik3BHcGANsJM7LuK3G6pM=
Subject key identifier: D9:17:FA:38:A8:DC:5E:09:5F:B8:5F:4B:2E:6C:11:B7:0E:54:2C:37
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4BA2F1EBA474FD8FFE81D6FDA85AC56262B9B4AE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
Signing time: Sun 08 Feb 2026 00:10:28 +0000
ROA not before: Sun 08 Feb 2026 00:10:28 +0000
ROA not after: Sat 09 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 56.187.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a2:f1:eb:a4:74:fd:8f:fe:81:d6:fd:a8:5a:c5:62:62:b9:b4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 8 00:10:28 2026 GMT
Not After : May 9 23:59:59 2026 GMT
Subject: serialNumber=6dae6751de31dcca5dfd7cb06d5bf34b8ccc9a70f670d1c46d60e45e18980283, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:73:f1:48:e0:35:ba:ba:9e:b3:c8:aa:3b:45:
2b:9c:61:d7:09:0a:4d:b4:43:e9:3f:b5:b0:7c:c7:
41:e0:4d:a4:c5:06:75:37:1b:59:aa:09:ce:9e:5d:
1e:e1:71:29:74:0d:23:a6:cd:ff:5d:90:d4:2b:af:
14:62:6d:3b:8b:e7:57:c3:b7:ad:37:ff:7a:7f:8b:
df:c2:17:cb:4c:f8:70:f0:19:47:f0:fa:51:39:97:
f0:b1:64:ec:58:a9:fc:01:f5:93:8a:82:83:51:2b:
0d:ee:13:fd:4b:23:0f:8a:ec:83:29:bf:0d:6a:c2:
e7:38:c0:ad:03:bb:5b:c4:16:e1:1f:07:15:fc:84:
57:5e:e8:ca:17:e1:f8:60:23:a0:e2:8d:9c:b2:6c:
cf:b2:eb:0b:a6:9e:f0:71:41:d7:af:2d:24:f8:26:
d7:21:a9:07:fd:d6:a7:c9:12:27:f6:54:0f:9b:09:
1c:57:f4:dc:da:85:ff:f8:a9:fb:69:e4:bf:b4:c4:
b1:c6:f7:85:09:5d:4d:ec:7d:79:52:39:63:48:c5:
07:a4:cf:36:3d:2a:17:fe:cb:13:00:cc:b4:f4:20:
9f:2a:69:cf:eb:3a:8d:41:18:2d:f3:04:95:8a:59:
c2:de:10:c1:e8:66:2d:08:72:ad:24:5d:50:11:2e:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:17:FA:38:A8:DC:5E:09:5F:B8:5F:4B:2E:6C:11:B7:0E:54:2C:37
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/42e80cfb-6694-44ed-8b7d-4f7bcc286fe7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.187.0.0/16
Signature Algorithm: sha256WithRSAEncryption
41:a0:93:7e:7d:3a:77:de:7a:ea:c1:01:bb:67:da:af:db:21:
a6:74:0e:f7:92:9a:67:6d:b1:fe:8f:61:34:14:55:1d:b5:33:
b0:e2:57:fe:00:81:4c:1e:44:95:db:59:88:b2:37:22:3a:df:
f0:63:44:52:28:8c:e8:55:6e:45:89:98:da:9a:8c:64:5d:81:
aa:32:00:b3:98:b3:32:54:6b:da:ac:3b:b3:d5:5f:a0:94:44:
ad:b3:33:78:7a:dd:25:1c:50:c6:fe:3d:2e:c5:39:71:8f:bb:
17:0d:a6:0c:6d:89:a9:3f:9f:b1:de:25:71:c0:1f:2e:6b:87:
1b:ff:02:5a:95:93:b2:86:9f:ff:b7:c3:c9:f5:c2:28:ca:d8:
3c:15:c9:6c:12:be:6e:09:0b:44:46:98:5e:a5:e5:1f:b4:4f:
6a:6a:84:40:9b:7a:49:d0:a5:f3:b3:9f:a4:7b:92:a6:c1:8a:
0c:99:8c:11:9a:d5:cb:59:13:9a:6c:8b:b7:d6:77:38:2b:1c:
d2:35:b8:64:b6:0f:ed:08:b3:72:20:3c:d3:88:52:d7:1a:56:
15:8d:8f:c3:24:e9:f8:5b:30:99:b4:25:77:99:c5:16:57:e9:
2c:5c:8d:25:a6:60:62:1b:8a:17:9f:1c:00:40:d2:72:9d:7a:
b6:d9:d0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:53:19 2026 by rpki-client