
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa
File: 82d434d3-74fc-47a3-89ec-ed37a23ae562.roa (raw, json)
Hash identifier: z+jkzy687vycIMEjqM5tLyUehgzGr0vxK7yy96jfi00=
Subject key identifier: 78:24:A5:B5:82:24:F0:9E:A5:DB:1A:2A:9F:65:DF:DD:AE:4E:26:DC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 057296CCE861BE9A38006CCBF29E9217B941A7C8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa
Signing time: Tue 10 Feb 2026 00:50:57 +0000
ROA not before: Tue 10 Feb 2026 00:50:57 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f22:8000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:72:96:cc:e8:61:be:9a:38:00:6c:cb:f2:9e:92:17:b9:41:a7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:50:57 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=9b98dcc1fa71d8d3e35a23eed1efaa99a170e503cb8c5d5330c269189235814a, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:b5:bd:8e:34:8b:38:0b:0c:ce:36:dc:52:
48:7b:e2:9c:21:c6:e6:87:d7:64:51:eb:b3:d0:a3:
b3:30:45:08:ce:4b:25:82:d2:68:a7:28:82:3a:d8:
b3:6b:6e:1f:8d:10:59:67:1d:0a:a4:88:88:5e:78:
65:34:60:7d:66:3f:3c:f2:8d:f9:b4:65:c4:e1:f5:
3d:22:d5:6f:10:02:d4:c4:8d:8b:49:4b:5f:f2:f3:
ab:c9:82:98:a4:d9:e5:bc:96:c5:f5:3d:11:67:4e:
63:1f:50:58:46:68:c7:21:ae:a5:9f:af:91:7d:da:
83:b1:3d:08:e0:99:d4:b4:2b:c1:02:e7:a3:d6:4a:
6b:c5:f4:6d:b9:19:0a:99:91:a3:34:14:d4:e5:a8:
d1:4e:73:6a:d3:08:ed:a4:e1:bb:d1:1f:5f:bf:9c:
5d:4c:16:d2:17:be:f7:32:d0:ec:b1:8f:47:78:c6:
cd:2d:50:25:ae:91:8c:4d:a2:87:ef:0e:18:6f:34:
e0:4a:84:36:d2:bc:0e:b6:e8:91:d2:f9:b6:17:57:
99:2a:9e:4e:19:5a:a6:f4:b3:37:8e:9e:74:75:ca:
37:4a:e8:39:eb:66:90:57:d4:a1:ec:16:25:ce:82:
c8:88:76:7b:41:1b:25:ea:41:4f:3b:95:6f:4e:a3:
ce:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:24:A5:B5:82:24:F0:9E:A5:DB:1A:2A:9F:65:DF:DD:AE:4E:26:DC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/82d434d3-74fc-47a3-89ec-ed37a23ae562.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f22:8000::/36
Signature Algorithm: sha256WithRSAEncryption
08:eb:c1:63:b3:53:c8:7f:ce:6d:54:67:28:f8:4d:ed:67:43:
bf:b2:c5:c7:fe:0b:05:d9:85:ef:ce:80:b1:42:f0:1d:02:2c:
5f:01:ac:1d:76:e9:fe:b3:d1:bb:da:8a:54:82:01:85:66:aa:
64:1c:20:7e:53:ac:63:11:0a:eb:c9:e0:a4:ba:ed:7f:50:9c:
2a:4b:63:db:fe:4e:11:9a:1f:f2:af:67:90:f7:e8:1c:62:d7:
e6:88:ef:ac:42:6a:14:d1:7b:26:c5:ad:3f:3e:67:ca:0c:f2:
0e:ae:45:a7:9f:ca:ad:1e:51:40:43:2b:9d:79:4b:ae:9d:fc:
32:6a:ce:fc:df:19:22:71:e9:f8:d7:20:5e:ab:51:66:ae:6c:
fc:dc:80:08:a4:cf:f6:24:5e:34:b4:96:c8:28:9b:bf:15:0b:
5c:32:39:df:22:5c:74:12:05:db:c0:b1:85:be:25:cb:cd:d9:
49:6f:f1:4d:bc:50:85:c6:e2:3d:bb:69:73:aa:e3:11:6b:9f:
0a:b1:e2:30:84:e6:b3:0a:65:6c:0c:41:fc:d1:80:1b:d8:f6:
5f:f0:9a:53:3a:5b:19:e3:75:26:91:21:ab:67:89:b5:9a:04:
02:bd:c7:de:2f:4c:7c:00:f3:e9:34:f6:3a:e0:3d:3c:89:a7:
23:51:f5:ba
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:20 2026 by rpki-client