
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7632c8ac-374e-4409-905e-a902947f8ce9.roa
File: 7632c8ac-374e-4409-905e-a902947f8ce9.roa (raw, json)
Hash identifier: ZEc+zJHzL9WLMD05Eiq2IqaACy/z0luV5V3Uo8VK1a4=
Subject key identifier: 40:FC:7F:45:C6:DF:20:5B:6A:76:50:B1:FB:0C:C3:71:B7:3D:1A:A1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4860F5B0C6F1E041A345A99B7BD46F98B379428D
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7632c8ac-374e-4409-905e-a902947f8ce9.roa
Signing time: Sat 14 Feb 2026 00:30:54 +0000
ROA not before: Sat 14 Feb 2026 00:30:54 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.17.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:60:f5:b0:c6:f1:e0:41:a3:45:a9:9b:7b:d4:6f:98:b3:79:42:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:30:54 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=745de662debfe9b2403abb86b81c5b5cfde18ae8246c390d2a8553ffb901c4b3, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:a4:7b:40:54:bd:29:12:00:a4:bc:5a:8a:
d4:6a:55:f6:24:fc:c9:29:1a:45:50:e2:4b:c6:cc:
2a:fc:2e:c4:e8:ef:b9:bc:20:98:58:04:54:10:c4:
18:25:9a:1e:12:42:2a:56:c9:9b:a8:4d:a8:5b:88:
29:98:d6:77:e6:87:9f:37:5c:e2:7a:1d:fa:88:5a:
00:a9:1f:dd:65:cb:f7:23:92:93:06:20:88:a1:e8:
2a:56:0d:48:6f:03:3c:87:bf:f4:10:9a:1d:b7:21:
db:1b:15:3b:ea:38:a5:05:cb:f9:11:47:dc:64:04:
95:c1:85:2c:4f:25:4b:1a:7a:d0:e0:dd:83:4f:7c:
d3:ab:8e:2c:8e:f6:bb:2f:ac:1f:15:f8:1f:fd:77:
9a:e3:a3:83:6f:19:07:c0:ba:d5:3a:b2:ce:28:55:
cb:56:b6:5f:02:01:45:8f:10:19:22:df:15:4f:f2:
ca:f9:7f:b6:3a:8f:24:d3:ed:76:81:5e:08:32:49:
b0:2e:d5:05:aa:be:9d:9b:98:55:60:20:06:4c:60:
ab:44:e1:9e:af:5d:e9:5f:de:54:a0:e6:01:ed:48:
13:2d:3a:1e:2e:73:a2:27:88:cb:a3:7d:b5:fb:d8:
90:24:9d:a2:b8:78:7c:cf:70:a5:4b:44:65:34:e5:
01:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FC:7F:45:C6:DF:20:5B:6A:76:50:B1:FB:0C:C3:71:B7:3D:1A:A1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7632c8ac-374e-4409-905e-a902947f8ce9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.17.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:22:9b:39:0d:65:b0:ef:11:e2:63:7c:1e:6e:e6:02:9f:c5:
f8:bd:49:a7:8f:c7:4c:f9:20:71:d5:9d:1c:e0:0e:6e:a9:75:
0a:f2:63:44:d9:76:31:d5:15:b1:83:6a:14:84:9e:74:0a:0c:
48:a1:cd:bd:01:34:97:f3:a7:ea:8c:c8:cf:33:e4:e7:98:b9:
64:dc:8f:64:f2:46:ad:4f:08:2d:90:5a:b7:fd:e5:b9:de:ed:
b0:e6:99:7c:4b:2a:1e:7e:54:fc:3a:1f:81:97:fb:88:c2:89:
66:bd:1a:81:0a:e6:59:7c:44:ff:c0:b8:6c:a7:7f:b3:13:6e:
af:e3:f8:55:30:16:18:be:ba:c9:ac:e2:80:30:1b:2c:c0:53:
f8:b8:31:4a:d3:38:66:fd:28:d3:6e:a8:ff:1a:2b:e0:56:7e:
51:9c:79:e1:5d:2d:a9:a9:a6:32:ad:62:ff:42:21:ec:a3:1d:
28:97:1a:0b:eb:ac:92:5b:87:42:22:cb:49:52:1e:9a:70:ff:
04:00:a8:c7:65:29:bc:6e:61:6d:29:b9:c0:12:83:b2:80:77:
ef:6e:bf:78:12:40:3c:19:15:30:ff:d9:5f:8d:92:93:df:62:
60:c5:81:22:2d:0e:ed:e7:68:45:38:b9:c5:6b:46:50:a4:66:
da:ce:93:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:14:41 2026 by rpki-client