
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa
File: 7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa (raw, json)
Hash identifier: bHv9pkcJ1aPmMoVD2wrR0EoNzSskcsXqhzvCEoX7cTw=
Subject key identifier: 0C:F9:4D:28:00:AD:23:DD:05:A1:42:76:D9:29:D1:22:3C:57:92:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C6710984796C4145B7214B1817E15C902B4E6DB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa
Signing time: Tue 24 Feb 2026 01:40:07 +0000
ROA not before: Tue 24 Feb 2026 01:40:07 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:4080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:67:10:98:47:96:c4:14:5b:72:14:b1:81:7e:15:c9:02:b4:e6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 01:40:07 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=9e5063c7f219da57fa09857bb5afcba91c50fba4f4e8122b61df95dfca5ae7dc, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b7:31:a1:b3:30:46:f6:4b:5c:53:96:75:12:
bb:a4:c8:4c:e8:86:a3:4b:06:f1:ac:f5:73:11:ce:
67:3b:fc:3e:f0:d2:a7:18:64:4f:45:be:bd:a9:ae:
0f:d1:f3:b3:0d:aa:34:cd:78:a3:be:c0:0c:c6:9f:
67:06:7d:ea:1d:51:af:c0:c1:e4:1d:b7:f3:e5:3b:
02:94:9a:6a:22:a4:3c:8b:f4:cb:fb:4c:d7:c9:5c:
4e:f7:9d:86:17:d0:a5:b4:30:db:27:56:34:88:17:
a3:a9:9c:87:ab:ad:f2:67:e9:4c:b2:28:cc:83:72:
f0:4e:07:a6:e1:06:69:06:1f:bd:82:81:ee:e2:34:
b5:75:b0:8c:84:08:6f:3f:86:f3:00:09:d8:0c:f0:
c5:e3:6e:77:c4:0a:9d:c5:ba:b9:bf:d0:74:7d:04:
57:0d:d7:a4:ed:aa:bd:4d:f2:72:ba:0e:77:30:25:
57:10:e2:60:c7:21:cc:4a:b9:02:55:c8:80:3e:ad:
a2:43:4e:75:99:15:62:76:8b:29:4f:ad:7d:16:48:
f0:8a:21:d9:32:77:61:d2:b2:30:3d:89:52:5d:50:
ab:90:58:e0:23:27:35:a3:32:25:e5:54:a8:a6:f3:
85:2d:9c:fe:9e:0e:c2:de:af:74:01:7c:35:8c:d5:
c5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F9:4D:28:00:AD:23:DD:05:A1:42:76:D9:29:D1:22:3C:57:92:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7034d5d9-ee87-4cda-8cb2-ba825242f6a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:4080::/48
Signature Algorithm: sha256WithRSAEncryption
25:21:6e:f7:cf:23:28:b2:21:4a:5e:48:84:df:f0:7f:15:10:
fd:e6:b3:43:08:3d:ef:fc:b3:57:11:43:e8:5b:7b:94:75:1a:
48:02:3a:a9:e4:3c:f4:b2:6d:f9:36:eb:a7:12:85:73:1c:3a:
69:38:b9:38:47:b9:48:b3:42:5a:ca:f8:ae:c8:00:01:b2:70:
f4:d2:70:16:fa:ee:10:c1:3e:97:eb:b1:08:99:d4:0e:9d:c2:
71:3d:68:b9:18:0f:cd:ea:54:a5:95:98:60:d2:7b:aa:d8:ad:
22:0d:41:dd:6d:6a:a4:02:eb:72:06:cc:38:dc:1e:f4:50:9b:
fd:5d:9a:9b:ce:e7:f7:3a:19:4e:d6:79:2d:fd:2e:63:ff:6e:
36:8b:3b:81:7a:c3:b2:7a:d3:8d:16:e4:1f:6e:51:c9:21:e6:
f8:cd:64:72:f6:3a:b0:d2:59:45:e5:57:5a:01:45:66:75:1d:
2d:14:ad:f7:4c:59:7f:e8:b2:c1:66:ee:1a:42:58:c6:d2:a3:
47:54:3a:a6:28:00:6a:ea:da:b7:77:99:3c:72:04:6a:0d:5c:
e2:88:36:29:85:a0:91:c1:5b:a7:60:e0:0a:35:54:47:a8:ce:
44:64:7c:46:b8:8f:3f:77:6a:a1:0f:6a:1e:bb:6f:07:7c:f9:
5d:ba:7d:4f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:07:27 2026 by rpki-client