
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7311a2f0-581d-4d7c-97b0-71be4cb85395.roa
File: 7311a2f0-581d-4d7c-97b0-71be4cb85395.roa (raw, json)
Hash identifier: 42IUvuw92PBR+RACKoE0L3f/5LneFDfJTQfZO3rPX0M=
Subject key identifier: E3:A1:50:E1:24:A3:08:D1:59:C4:CB:19:81:E5:4D:77:1E:C1:8E:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 332E8165A3EDF9B2304E27D825D361021C484CE5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7311a2f0-581d-4d7c-97b0-71be4cb85395.roa
Signing time: Sat 21 Feb 2026 01:41:46 +0000
ROA not before: Sat 21 Feb 2026 01:41:46 +0000
ROA not after: Fri 22 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffb:3400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:2e:81:65:a3:ed:f9:b2:30:4e:27:d8:25:d3:61:02:1c:48:4c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 21 01:41:46 2026 GMT
Not After : May 22 23:59:59 2026 GMT
Subject: serialNumber=db3e89a05c4d1a251eae03c2b9288960663fccf84d15cd5c83df993fb8059c92, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:8f:a3:02:35:6d:d7:a1:e4:99:43:35:33:
a1:e9:93:e5:50:53:ef:90:14:d7:bb:c1:65:4c:4d:
98:91:52:c5:46:89:7a:d0:33:52:16:0f:13:72:9f:
f4:cb:7a:a2:74:82:73:43:31:7b:d5:0d:80:05:3e:
d7:de:1b:0d:68:e6:aa:d8:33:9f:df:88:a0:14:8c:
a0:5d:b3:d1:22:99:a3:af:e6:2e:b4:a2:15:d7:ee:
e6:ca:43:f7:d3:14:7f:85:59:67:cf:d1:b6:06:c6:
09:3f:f8:cb:1c:0c:31:b5:86:b2:50:f8:ed:99:1c:
51:91:3b:ef:b7:39:bd:4b:5e:03:d8:4e:b4:9e:49:
b0:e1:19:4f:d7:f8:bd:e1:30:e1:e9:44:da:52:83:
e6:f1:05:d8:c5:18:d3:e2:dc:b3:e7:f0:80:fb:c8:
c1:0f:5e:28:23:61:d2:fa:cc:c7:98:7b:c9:f5:c8:
61:f4:b3:40:86:f6:b1:6c:84:99:2e:76:4f:6d:4e:
51:56:c7:f4:f3:ab:8f:ec:2c:b3:d1:e5:37:c7:28:
81:31:e7:a4:9c:a9:51:26:4e:3b:fd:65:3c:71:0d:
55:47:eb:d1:1f:bd:1d:81:5b:6d:5e:04:03:9e:0f:
a3:24:fb:96:53:6a:5d:5a:63:6d:b8:f8:33:3a:1a:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A1:50:E1:24:A3:08:D1:59:C4:CB:19:81:E5:4D:77:1E:C1:8E:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7311a2f0-581d-4d7c-97b0-71be4cb85395.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffb:3400::/40
Signature Algorithm: sha256WithRSAEncryption
a3:fa:32:a5:9f:05:8d:24:9f:00:46:b4:28:97:f6:d7:f3:5b:
fd:e4:3f:0c:10:92:4a:4e:1c:8c:c3:37:90:6e:1c:f6:89:b3:
a1:ba:2b:7a:16:e9:a6:d5:2a:47:94:b2:b1:bc:30:be:55:1e:
0b:5d:75:f1:e7:35:eb:c7:e7:95:0a:a6:64:89:a9:46:c7:15:
77:76:3e:84:c9:fc:16:8a:4f:46:e9:7d:7d:c7:c2:8e:38:31:
95:ec:e3:e5:c6:84:47:35:9a:2f:d6:b5:68:ce:ea:27:0a:03:
7f:f3:90:09:77:fe:27:58:e8:bd:2f:ed:44:30:f8:d5:8f:c3:
ee:bd:c7:2d:e2:82:7d:50:f2:df:f0:63:6b:16:eb:ca:c5:88:
8c:3d:7e:29:81:bb:f8:f1:d7:2d:bb:ee:00:43:d7:56:21:11:
a8:b8:d7:21:b4:5b:58:f0:be:87:a6:84:5d:1d:e0:dd:72:2a:
16:99:0b:da:24:d8:45:28:32:42:96:ed:8c:c8:6f:d1:44:ff:
45:80:e3:04:51:d6:a9:4e:0c:e3:d8:40:00:61:f3:e8:7b:40:
28:83:c1:e0:89:49:8c:f8:b8:76:75:7a:fe:c1:26:20:e0:a2:
55:56:fd:a3:4c:9a:b2:94:fd:63:83:fb:9e:6a:78:33:2f:bb:
1a:bd:ce:dc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:21 2026 by rpki-client