
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/532bf9c8-c65d-4dbb-a84d-8344bba40ceb.roa
File: 532bf9c8-c65d-4dbb-a84d-8344bba40ceb.roa (raw, json)
Hash identifier: Q7lyp0qRxMylV2NNtyzIpAphZOg2M/LHlk7vNm9ZHZs=
Subject key identifier: C9:3B:1C:E2:99:6B:FC:CB:6F:A2:62:74:1A:2A:72:F7:A1:F4:5A:C4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 18CFC1AB3BB01D5285B24DA255DB873449CD681C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/532bf9c8-c65d-4dbb-a84d-8344bba40ceb.roa
Signing time: Fri 06 Feb 2026 00:10:04 +0000
ROA not before: Fri 06 Feb 2026 00:10:04 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 184.38.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:cf:c1:ab:3b:b0:1d:52:85:b2:4d:a2:55:db:87:34:49:cd:68:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 6 00:10:04 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=06791c28b304d5830cef87ab21fc13d74d35355b94a5067e8ed1b468cbb5622b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:2c:4d:d8:28:cb:e5:47:eb:88:8d:a7:8b:
f8:b5:8e:74:d7:d6:9a:31:9f:83:3d:96:9f:a2:21:
1b:28:74:e2:b4:a5:ef:87:6a:fa:00:32:d7:fb:55:
f3:90:31:ef:ea:ae:cb:6b:9d:3c:d5:52:bf:f6:2b:
35:31:d2:83:fa:f3:b8:9f:85:bd:68:13:fb:f3:16:
45:fd:34:0f:ac:45:8c:fb:8e:78:49:02:81:82:9d:
13:b9:ca:fe:e4:c5:a1:a5:49:4a:4a:c8:58:6f:85:
c7:b4:d5:8c:fd:3d:23:bf:78:3b:e7:37:73:fa:21:
47:a7:59:35:e4:f6:41:36:29:32:f6:70:5d:19:e4:
23:34:1a:cf:92:29:1e:b9:ab:16:6b:c9:b7:6f:21:
f0:09:d6:6d:1d:73:3c:c4:34:c2:99:a2:9b:79:c5:
06:42:43:0a:b4:89:07:88:7d:67:a4:bf:dc:f5:dc:
45:97:40:78:df:74:cb:e2:ac:7f:ab:41:8e:71:ab:
c3:0c:11:7b:ac:79:b4:93:9c:28:3c:0b:80:b3:d6:
05:ee:13:41:a8:b3:c9:03:bd:8e:5a:51:90:1d:31:
21:6d:bd:d2:ed:52:40:74:1f:3f:8d:d7:62:f8:85:
8d:88:6f:67:b8:36:a0:e2:28:90:31:14:06:92:97:
53:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3B:1C:E2:99:6B:FC:CB:6F:A2:62:74:1A:2A:72:F7:A1:F4:5A:C4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/532bf9c8-c65d-4dbb-a84d-8344bba40ceb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.38.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0e:d5:b3:9b:88:06:18:c7:ee:9b:fd:3c:70:02:f7:91:d3:e3:
9c:f1:17:d4:56:cb:3f:99:26:4d:42:d2:d2:72:7e:0b:b8:78:
af:92:7a:63:55:d9:45:4f:9c:27:4c:dd:83:c6:4c:f0:6a:fb:
15:57:dc:52:01:5c:dd:75:c3:45:5e:83:22:bf:6e:53:3a:00:
85:72:7e:ca:ac:72:67:a6:45:58:71:bb:56:40:83:5a:11:83:
1f:97:4f:1b:f7:5b:94:f4:ba:57:a0:94:3b:57:fd:ae:ff:c6:
9e:d8:99:e0:93:67:e1:02:11:9c:16:91:0f:6d:f4:f8:cc:e0:
69:54:c3:7d:55:28:8e:9b:39:4b:97:97:83:c2:85:32:3d:b5:
28:ed:17:3e:c9:96:eb:18:5b:f3:32:88:b7:40:7b:4e:2d:07:
11:87:44:62:48:b7:48:c6:8c:89:0c:71:1d:be:96:16:13:79:
03:1b:76:54:f6:73:4c:e2:49:8c:36:64:c2:45:6a:4b:b7:68:
6c:04:7a:56:d7:34:44:2c:1f:3a:58:31:07:f9:33:99:85:2a:
22:2b:b9:43:53:dd:15:a0:0c:4a:7a:74:6a:06:ce:63:42:4c:
47:37:b1:e8:85:b3:5e:21:ad:90:e7:0e:61:fb:e8:f2:ee:d6:
6b:37:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:38 2026 by rpki-client