
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
File: 7f655dc6-89d0-4748-9c62-d3bc957b920c.roa (raw, json)
Hash identifier: nkdu01Gco8dcf+WJc2vftTS5pd33hTC2ecgJeCCaj6I=
Subject key identifier: 57:5D:D9:BA:C9:19:DA:51:01:93:99:A1:2E:50:57:61:A5:F8:35:28
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 34271A9320D119E0B56262C40C93520250D85043
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
Signing time: Fri 13 Feb 2026 00:20:06 +0000
ROA not before: Fri 13 Feb 2026 00:20:06 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 44.223.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:27:1a:93:20:d1:19:e0:b5:62:62:c4:0c:93:52:02:50:d8:50:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:20:06 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=40e7663ffff3057c05615de0081e726e2677282c44341a5130e636862069ffcf, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:38:a2:67:3a:31:12:be:fe:b4:77:9d:ec:e8:
34:ed:51:96:e6:52:70:99:c6:75:29:49:d9:37:9d:
2a:0d:0e:b9:23:91:5c:31:74:98:02:e5:e9:75:67:
24:e5:18:e8:ed:26:76:37:d8:0f:d2:20:df:f9:62:
43:87:08:34:ea:15:d9:ab:19:b3:7b:15:8e:4e:0b:
37:41:e5:ab:6b:7b:93:5b:88:18:12:ab:a4:c4:dc:
7d:12:b5:9d:46:a4:2e:39:58:0b:0f:20:56:f4:ea:
de:43:91:1c:d7:67:6e:5c:47:15:8a:ee:19:c9:99:
15:73:97:d0:41:c9:60:78:ff:98:d4:ff:04:66:12:
59:ee:21:98:01:45:84:b0:61:7c:6a:6c:e9:4e:5d:
05:63:82:0d:7d:81:c1:88:72:a1:23:20:05:f4:8f:
cb:aa:4e:4b:d8:60:c6:1c:08:bc:24:ef:b9:b3:44:
09:59:93:77:28:25:35:a1:1a:75:dc:95:d2:83:54:
c7:50:00:d0:d1:44:5f:a8:dc:58:df:2d:97:24:66:
65:ad:ac:db:21:6e:08:73:41:1b:3f:d3:e0:8e:8a:
94:db:7b:4d:b0:20:b7:a1:06:54:08:b1:6e:bb:e5:
9d:90:4b:d2:44:10:ac:30:66:49:5e:33:0c:a5:91:
6c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5D:D9:BA:C9:19:DA:51:01:93:99:A1:2E:50:57:61:A5:F8:35:28
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/7f655dc6-89d0-4748-9c62-d3bc957b920c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.223.121.0/24
Signature Algorithm: sha256WithRSAEncryption
71:6d:3d:3f:ef:58:c4:a7:27:87:21:33:df:84:c7:c3:93:7e:
c4:2f:b4:62:d1:89:94:c3:99:67:03:fd:08:1c:92:da:e9:c5:
32:67:f2:03:6b:ce:6c:17:85:6c:7b:76:61:f0:a6:f9:8a:f6:
29:da:b5:87:32:6a:af:e6:d7:4b:63:49:98:bf:90:cf:53:63:
49:b8:7d:24:fb:30:a3:5d:94:f4:94:20:c4:42:a3:9d:4f:8b:
ea:41:04:60:12:96:2b:68:74:34:7c:22:25:d9:17:9b:6b:e3:
88:96:f8:44:80:c0:b1:90:ad:c6:47:d7:81:0b:26:a8:d7:e1:
c0:83:38:a5:7e:fa:49:83:bc:ea:58:e0:ac:9f:6d:20:19:bf:
3c:8e:35:de:c2:42:f2:d2:2c:16:c8:b2:d7:9a:bb:52:5c:d5:
35:68:22:fb:40:77:20:62:31:24:5c:7b:f9:d4:ea:15:39:23:
f3:57:57:2f:4b:da:3c:5e:22:e1:fe:71:89:07:e9:f6:18:85:
0e:6a:b3:45:af:40:91:3c:2a:64:97:df:7f:d8:54:c9:1d:a9:
dc:65:b8:80:4f:81:a8:b1:06:83:f7:d0:ed:58:cd:56:7f:42:
93:21:8e:1c:17:25:a0:30:8e:ea:01:c0:ee:3b:cb:71:42:13:
ea:7c:2f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:11:32 2026 by rpki-client