
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa
File: 7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa (raw, json)
Hash identifier: j6efnOfOkhgtENN3ucZYD7NyWVU8qfWQ0UJv9Lt+L6g=
Subject key identifier: 2F:1A:CC:7E:88:04:64:06:4C:5C:FC:D5:88:71:99:35:7A:24:B0:A6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7D719E9CE84E2E3FE04B44C7EFE4DB8C29DAF264
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa
Signing time: Tue 17 Feb 2026 00:11:10 +0000
ROA not before: Tue 17 Feb 2026 00:11:10 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff6:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:71:9e:9c:e8:4e:2e:3f:e0:4b:44:c7:ef:e4:db:8c:29:da:f2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 17 00:11:10 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=f204750ae9ea3bb68ca4b720ceda19c8b6543fb3cf66ac1d2b8ec79832620a37, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:62:d0:79:31:11:ea:85:11:94:45:9b:ca:
b5:b2:de:b4:05:b3:00:0c:77:ab:b8:ef:2c:2f:bc:
41:dd:20:d2:1b:6d:6b:c2:fd:d2:38:e2:96:19:58:
cf:4b:23:66:93:f9:6b:49:74:11:3d:5b:ae:1c:c1:
95:48:15:f0:9f:d9:d1:1d:ee:2a:f4:e8:00:f7:ed:
e1:38:eb:ae:6e:95:65:38:91:18:4c:85:ce:36:c9:
bc:8b:33:dd:ca:19:9b:55:9f:22:7f:c2:29:7b:2f:
76:32:ac:fe:4c:6f:19:73:7d:4e:37:fd:56:94:6c:
f5:7e:a5:a4:e8:11:80:cf:d7:f2:52:41:81:eb:ac:
90:3c:2c:2c:e3:5c:91:cb:72:64:8c:fd:b2:d9:97:
4c:9c:ee:50:24:f0:0c:26:f4:f6:18:e0:02:18:01:
2b:9b:85:00:89:5c:de:00:e5:c3:1e:fe:be:7e:e6:
38:65:69:b1:c1:62:a9:57:b0:42:1f:b8:f5:31:92:
8c:e5:a9:04:da:70:03:7c:c4:91:14:07:01:3d:01:
79:1e:80:61:ff:d7:96:5b:a2:94:c9:1d:dc:dd:52:
af:3e:68:6b:78:ac:5e:8f:1c:53:f5:35:e1:e5:91:
b5:83:f4:ba:52:34:e5:c5:e6:87:8b:1c:f8:09:b8:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:CC:7E:88:04:64:06:4C:5C:FC:D5:88:71:99:35:7A:24:B0:A6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7197fc77-ce49-4c0e-8e4c-16ceb92d4a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff6:1000::/40
Signature Algorithm: sha256WithRSAEncryption
c8:4f:fa:1d:1d:a5:b4:7a:aa:15:71:56:6b:b2:9c:9e:d9:b4:
38:8f:be:8d:6b:c7:77:08:da:d6:13:ae:e3:62:28:be:63:68:
54:88:cb:c9:ca:e4:80:b2:fa:cb:9b:5b:82:f9:ab:a4:7a:c6:
5b:91:11:fd:d4:5e:b9:96:1e:5d:84:2a:1f:99:05:43:73:b2:
cd:13:03:c9:79:d0:67:ad:bc:36:ad:a7:8b:92:58:7c:97:76:
de:cf:a7:f1:71:08:40:f3:12:8d:ba:37:64:26:c3:aa:34:60:
59:a5:c1:52:30:75:12:0b:da:8e:a4:13:12:1d:9b:00:89:d8:
44:3d:6e:95:5b:2f:c3:53:24:db:95:cf:0e:be:db:5a:7a:8a:
8d:6a:8f:ef:1c:39:39:53:e8:b4:66:b7:17:ce:a4:76:47:67:
f6:1e:a6:05:96:95:7a:c9:ae:f8:67:dc:e8:00:d6:99:8c:f7:
e3:ad:57:53:81:3d:da:3a:03:3e:a0:a1:d6:61:c7:3b:f3:25:
63:ce:ab:be:dc:31:62:2e:f5:ee:9e:1a:0b:f8:66:ad:f9:3d:
8e:2e:aa:3e:1d:30:2b:7a:4e:cb:16:0d:63:c5:a8:d7:75:36:
33:c6:f7:27:b3:de:11:ba:ea:c7:4d:9b:b9:30:b2:5a:2b:01:
5e:b3:44:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:34:24 2026 by rpki-client