
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a29a43-6fb1-4f22-858b-58921f0187e5.roa
File: 78a29a43-6fb1-4f22-858b-58921f0187e5.roa (raw, json)
Hash identifier: vpbVyHyPKP1V/J90bK5fRL8uahtFgKVQVlaETZ0H58g=
Subject key identifier: AE:14:56:A4:98:E4:58:C2:C5:76:23:96:F0:B2:B4:3C:3A:23:10:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6C5A63D4CE022E7E9212727F4830A491C4F2B284
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a29a43-6fb1-4f22-858b-58921f0187e5.roa
Signing time: Tue 17 Feb 2026 00:11:04 +0000
ROA not before: Tue 17 Feb 2026 00:11:04 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 114.56.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:5a:63:d4:ce:02:2e:7e:92:12:72:7f:48:30:a4:91:c4:f2:b2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 17 00:11:04 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=73a5cd286681bb78ca97a693e00a878e83b14c1750cdd374b1533edb6974abf4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6d:ba:c9:d3:f6:59:b3:63:c5:f0:bb:10:eb:
1f:da:47:81:60:0a:78:72:d5:59:1f:dc:3f:25:3f:
88:43:29:26:39:8d:72:2a:46:3e:43:2c:3f:b2:51:
17:a0:e4:90:15:6a:f1:60:a9:f7:72:a4:60:57:53:
dd:79:f4:b2:12:c9:0e:b7:d2:92:84:ba:e3:a1:e1:
73:90:22:07:47:cd:59:7c:f5:b0:02:7d:06:6d:0c:
00:6b:5e:21:4f:99:85:82:b5:d5:3e:56:bf:46:43:
21:6f:6b:c1:83:95:e7:a2:00:6e:ca:68:51:d9:27:
22:47:93:6f:1f:e7:c9:cb:65:ee:e5:6f:56:c9:30:
44:e2:d0:1b:29:a8:77:2f:74:7c:e5:24:96:3c:8d:
0a:43:0f:bc:28:52:a8:45:28:0a:eb:fc:96:f3:e7:
c3:ee:55:99:23:e3:6d:bc:a3:f4:90:f2:87:2e:87:
f5:cd:76:f8:45:a8:6e:e6:ad:1b:c8:88:ee:56:56:
47:48:35:f2:d5:5a:2b:a8:0a:a7:6f:97:bb:e0:a9:
a1:31:00:0b:59:e2:97:f0:51:b3:f9:12:80:bf:34:
0e:3b:40:c2:19:c7:cb:9a:3c:2b:5d:bd:2f:6e:e1:
30:0f:6f:f6:87:23:67:6f:db:02:7c:12:7f:fd:c3:
07:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:14:56:A4:98:E4:58:C2:C5:76:23:96:F0:B2:B4:3C:3A:23:10:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/78a29a43-6fb1-4f22-858b-58921f0187e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.56.64.0/18
Signature Algorithm: sha256WithRSAEncryption
05:b2:8d:03:ca:c8:1a:ad:ca:fb:75:32:56:c0:37:8f:b6:cc:
af:c6:58:3a:5d:be:fc:8b:59:e2:4a:b4:44:43:ef:92:00:d2:
68:1a:b3:fb:1e:ee:5e:53:3f:f5:3b:c4:d5:1e:93:88:9d:9f:
2e:93:41:60:47:0c:6a:ff:f0:91:d9:a8:cb:c3:59:c0:50:d8:
c3:7a:c8:ff:f7:b7:a7:ed:3a:f8:5c:6e:e2:f1:67:fb:75:f1:
3c:09:37:08:04:05:15:5b:ee:5a:26:32:21:fe:c2:03:06:80:
55:c7:77:fb:1c:4e:81:5f:64:15:78:7a:79:fd:26:bd:35:c1:
74:13:b8:f6:39:90:cc:b5:74:ef:8b:ce:61:57:de:e6:4f:03:
33:5a:01:7d:27:75:80:2f:50:f8:af:5a:63:a8:4c:66:c0:98:
a1:43:de:37:bd:06:7b:f1:31:3f:aa:82:ed:86:30:a5:cc:0c:
8f:83:5a:18:ec:e7:3f:0c:24:89:ab:3d:ed:56:0c:80:ca:92:
9a:7b:da:17:b6:00:f9:84:1b:83:34:3b:2e:82:5b:39:f2:34:
dd:5d:af:ae:dc:09:46:7d:1b:02:e1:62:bf:d8:a9:95:13:a0:
61:e5:94:21:39:a1:a7:86:b2:86:1a:ff:e7:3c:cf:85:69:00:
05:2b:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:50 2026 by rpki-client