
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65258b34-5141-4495-8461-b0210b9b4965.roa
File: 65258b34-5141-4495-8461-b0210b9b4965.roa (raw, json)
Hash identifier: HdEsf0BjaRGkVIFuWshTGkQ8BMUMlnxKH7jVbS3KYmY=
Subject key identifier: 52:7F:E7:48:ED:6E:55:5E:CA:3C:E2:C3:11:A9:BD:34:F4:F3:BE:A0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2F90CF684CD9921BE0B6A6B6E817C9B2110647DD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65258b34-5141-4495-8461-b0210b9b4965.roa
Signing time: Sun 01 Mar 2026 00:00:54 +0000
ROA not before: Sun 01 Mar 2026 00:00:54 +0000
ROA not after: Sat 30 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.164.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:90:cf:68:4c:d9:92:1b:e0:b6:a6:b6:e8:17:c9:b2:11:06:47:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 1 00:00:54 2026 GMT
Not After : May 30 23:59:59 2026 GMT
Subject: serialNumber=99ef0180f34258981cf74dc935711278e29465117f8329f7e90b69cba5557c5a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:a2:bd:58:d0:75:c0:a7:41:5a:5e:a9:f7:
93:67:b1:55:1c:23:39:48:9b:f0:98:2f:a8:47:1a:
fc:03:a1:41:26:40:82:74:8d:58:ec:b4:14:48:68:
db:87:67:99:95:e9:0b:62:91:98:39:15:49:a7:3a:
58:a5:87:58:a3:75:d9:3e:75:ae:56:35:f5:7d:f1:
41:f1:2a:5b:25:ab:e4:3b:3c:5e:f0:0a:b9:22:4e:
50:46:2b:a5:bb:52:97:09:99:46:88:84:53:a4:83:
18:91:ac:13:16:51:cf:bf:5a:52:5b:0c:f3:e2:05:
c7:00:ae:86:1f:73:17:cd:3b:17:6f:d1:49:63:cb:
ba:25:4c:76:06:05:d0:05:61:bc:3c:c8:d9:a2:0b:
c8:a1:94:6d:bb:15:63:36:b2:50:bf:0a:11:2a:6d:
50:b9:57:6a:52:7c:d4:5c:97:e5:59:a8:f3:b1:f4:
54:e0:84:ec:77:d9:2b:2f:44:b4:06:cd:d0:d4:9b:
60:52:70:e1:5c:7a:37:c2:5c:75:59:74:6d:68:25:
6c:a8:ba:69:54:c4:9a:12:bf:59:48:7c:6e:ce:3d:
1d:00:f8:6c:c7:a6:0f:05:4b:a6:83:c7:a4:92:21:
d6:a3:b1:5f:7c:2c:f6:1d:b9:2f:93:d2:12:fd:0b:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:7F:E7:48:ED:6E:55:5E:CA:3C:E2:C3:11:A9:BD:34:F4:F3:BE:A0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/65258b34-5141-4495-8461-b0210b9b4965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.164.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:45:31:ba:78:2e:52:28:37:2d:9a:20:df:c5:6b:1e:c9:2c:
85:c8:ca:e0:c1:ee:7b:bc:e3:bd:13:8b:0a:8f:15:28:96:84:
89:c7:72:71:cb:42:bb:43:65:98:ce:e3:38:33:f1:95:19:18:
c6:d2:26:3c:bb:29:ca:5c:e6:5b:86:cd:79:a2:1f:b1:6e:7b:
8a:30:81:55:10:3a:50:80:0e:62:d5:d1:da:ea:b3:b3:64:c0:
6e:9a:25:a8:45:d5:d3:ac:1d:96:07:4f:7a:78:8d:2d:8e:cd:
e5:cc:4c:a8:30:58:ed:96:05:51:71:13:6c:81:26:68:de:f9:
ea:7d:28:38:f7:e2:c6:59:3c:b4:7d:df:19:dd:72:62:6f:f7:
57:98:50:6b:d7:ed:3a:99:b5:c2:8a:07:f3:1c:fa:c9:99:da:
2d:ba:09:c7:79:ab:6d:61:75:fb:66:a7:62:a6:c9:9f:44:a0:
a8:b2:01:56:23:15:00:06:cd:fd:45:5c:71:dc:8d:0a:ca:36:
ff:69:1c:1e:6e:01:63:87:9e:22:cb:84:87:f8:59:61:dc:a6:
f0:f9:fc:1f:e0:81:1a:f9:75:80:03:e4:dd:7d:6d:f4:5b:c7:
55:ce:f8:38:a7:e1:5e:f3:ba:00:7b:c4:39:ba:88:7a:82:cc:
52:8c:0f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:27 2026 by rpki-client