
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa
File: 7db05471-313d-42cf-86d0-866ce19bc5fc.roa (raw, json)
Hash identifier: MzezFiq1lDgyAB5NKpFH/8VCD1TmM4kl9Dpi1/tnBMY=
Subject key identifier: 97:D3:6F:F9:2D:C4:7D:49:65:B7:7D:25:1A:F1:1A:83:F2:3E:8E:F3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 7B8478A8CF829E00CF8BBE85695408C9A79C9A06
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa
Signing time: Fri 13 Feb 2026 00:21:17 +0000
ROA not before: Fri 13 Feb 2026 00:21:17 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 13.128.80.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:84:78:a8:cf:82:9e:00:cf:8b:be:85:69:54:08:c9:a7:9c:9a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:21:17 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=1821bce2135d0b739e7ce350e6aa4cceb1f9db4730368aa3e3e58071609fa869, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:97:e6:1e:d5:d9:17:c6:fe:f5:3b:09:35:
1b:8e:a1:91:8f:98:32:a1:6f:90:2c:23:12:2b:d3:
d0:cf:aa:49:37:79:3d:24:d4:6b:cc:8e:32:4d:52:
b8:b3:12:e8:ce:26:f5:70:f8:61:1a:31:80:a1:b0:
5d:24:2f:41:7b:6b:ef:77:43:fd:4a:c3:26:37:04:
bf:b7:6a:30:31:39:fa:da:18:0b:96:7e:a7:14:7a:
21:9c:08:96:b4:0e:8c:3f:91:f4:6f:fb:bc:38:57:
71:83:24:4a:29:41:e3:d3:48:39:89:8e:a0:68:4f:
af:1c:80:50:1c:bd:31:bd:b8:ab:75:35:53:da:6f:
10:b7:55:7d:b4:77:05:02:84:96:e6:e6:92:fb:8d:
19:f1:56:c2:fa:f4:04:d8:00:69:20:2b:4e:71:e2:
6d:55:cd:d2:a8:64:78:a1:d1:19:ae:05:a3:fb:a1:
aa:01:53:e2:e3:01:d5:39:0f:35:dc:4b:56:08:d6:
bb:c3:7f:64:24:ce:43:a4:90:4b:70:4a:1e:96:38:
e5:41:81:3a:68:5f:75:1a:b9:04:f7:2f:f1:62:62:
5b:55:f5:b8:be:95:c5:b3:78:3c:e6:6c:7c:8f:3d:
17:2b:60:5e:21:36:75:35:fb:6b:d0:32:11:c6:53:
09:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D3:6F:F9:2D:C4:7D:49:65:B7:7D:25:1A:F1:1A:83:F2:3E:8E:F3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7db05471-313d-42cf-86d0-866ce19bc5fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.128.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:a4:0b:f6:f8:41:28:96:f5:ef:59:67:b3:26:b6:72:63:6d:
b7:48:e2:9d:fe:1f:94:19:23:d2:39:f4:fa:d9:e2:00:f2:1d:
5d:8a:f6:c2:e8:34:da:ae:66:86:fd:10:06:75:48:9d:5a:c4:
8d:48:c7:df:a8:d5:8b:bc:07:77:b6:99:e9:2d:35:2f:85:fb:
f0:df:d0:2b:2c:b0:33:a3:d9:27:8b:25:29:da:3e:46:b8:ff:
05:db:5b:b6:80:d6:6e:5f:9f:f4:ec:32:45:08:b2:ef:07:bd:
f8:03:4b:2c:4c:d4:5a:47:99:18:7e:57:5e:89:d7:9c:6b:b5:
6b:ca:35:58:dd:d5:01:2e:e2:eb:ce:f4:90:5d:d8:be:09:f0:
64:5b:27:2c:48:b6:52:59:be:63:20:71:cd:7e:81:67:d8:c1:
53:6d:b0:20:c5:00:80:d4:73:ac:41:5d:99:f8:27:e8:e5:66:
24:a0:2b:52:64:bc:db:e6:3b:9a:16:b1:c6:e7:3f:14:01:d8:
f3:b0:f7:2c:20:7f:50:c6:12:3d:fc:90:a3:8d:9a:0f:dd:d4:
96:eb:2e:64:87:e9:dc:d7:58:0a:ff:8e:55:ff:ea:e5:03:ef:
d0:e6:c5:34:c5:05:4f:12:36:c4:69:dc:ec:1d:51:c7:4e:bc:
23:a6:83:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:14:29 2026 by rpki-client