
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907885ef-23b6-481b-92d5-50f24b91939a.roa
File: 907885ef-23b6-481b-92d5-50f24b91939a.roa (raw, json)
Hash identifier: FPeJ3O3yJsH+DTvDGmdqUuFgeWRAFLyFOCiLKrp1i9Q=
Subject key identifier: A3:58:33:4A:49:DD:02:3C:6F:2E:A6:B8:F0:A8:87:3C:B7:DD:BC:8C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 057C0C71E614804AD7FBE2E883BFBC6D4D928F68
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907885ef-23b6-481b-92d5-50f24b91939a.roa
Signing time: Tue 10 Feb 2026 00:40:11 +0000
ROA not before: Tue 10 Feb 2026 00:40:11 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ffd:8149::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7c:0c:71:e6:14:80:4a:d7:fb:e2:e8:83:bf:bc:6d:4d:92:8f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:40:11 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=107a7bfab55ebde9fe8335cfbbf17f7436a13e37955e8c43c7b4bc6e1b3bfc1e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1e:b2:1f:0d:7b:56:6b:72:5c:5e:75:dc:7f:
d0:5b:44:df:c7:4d:64:7a:66:12:14:3b:e2:a4:4a:
a6:f1:68:d0:bf:c2:8a:b2:55:6b:b0:33:d1:5c:90:
c2:0d:1a:c8:ec:d2:be:e4:23:f9:8e:a4:9c:55:90:
f6:51:d1:d3:56:05:96:39:84:ee:8a:fe:6a:c6:d9:
e0:bd:0d:01:83:c9:e5:36:8d:f3:d9:20:6a:a0:42:
c9:e6:cb:78:67:96:90:b0:28:9d:65:0a:9b:3b:f4:
10:b9:6b:09:0b:a2:e9:a4:2b:50:db:ea:5f:ad:25:
bd:af:24:71:12:05:8f:99:1f:a7:d6:b8:3c:f8:66:
65:9e:56:61:7f:51:c7:d5:53:4e:8f:60:05:5b:b7:
38:72:a5:c4:71:24:34:31:0c:ae:5c:3a:4d:13:af:
75:0e:4c:35:db:2b:a7:0a:4b:8e:92:e4:75:df:95:
d4:5d:9e:f1:d6:d9:91:df:fe:1f:e8:18:69:1d:ec:
62:7a:0d:bd:81:99:cd:57:b0:23:a5:94:b8:04:6b:
b5:ba:19:61:c3:dd:5c:6b:fc:96:21:ed:56:20:3a:
2a:fc:ee:2d:6c:39:4d:d9:c3:4a:9c:80:c0:80:33:
20:4b:fc:a0:1a:b0:71:df:c1:c7:36:b0:5d:98:d6:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:33:4A:49:DD:02:3C:6F:2E:A6:B8:F0:A8:87:3C:B7:DD:BC:8C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/907885ef-23b6-481b-92d5-50f24b91939a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ffd:8149::/48
Signature Algorithm: sha256WithRSAEncryption
ae:ff:e5:3f:b1:3f:7a:c8:8d:35:5d:85:d8:a9:8d:0b:89:1f:
55:b8:88:dd:49:4b:a2:26:78:a7:45:13:16:f6:98:3f:99:f8:
36:b8:ab:16:3c:c3:21:5c:64:41:88:24:e1:54:8a:9c:a1:d7:
dd:ce:07:da:47:59:da:45:95:57:ae:40:ec:3e:85:d0:ec:77:
f1:fd:da:3f:d5:d2:17:c1:e9:a8:97:c1:2e:0b:8f:81:b4:97:
47:10:6e:22:17:12:72:82:f7:c7:c3:b4:df:fa:05:1b:32:f0:
54:48:9c:a3:29:68:c4:67:20:99:3f:b5:3a:88:6d:4d:62:c5:
e1:64:2d:8e:a7:a8:7b:ab:1f:6c:61:b9:a3:f7:bb:3b:04:d8:
1b:87:9c:de:7d:13:d9:24:26:58:e5:e4:b4:89:1d:ff:b1:48:
5b:9b:b8:f9:77:aa:15:53:df:5f:1f:98:12:c9:34:55:97:41:
a4:41:15:18:a8:be:78:e6:f2:dc:7d:f9:38:12:dc:f0:c4:d5:
d3:06:28:77:40:d4:1b:5b:e9:04:82:5a:66:1b:5e:e0:2c:15:
51:46:d9:43:bc:87:4e:19:61:ba:3d:65:ad:b8:b0:53:7a:71:
64:97:97:7e:c5:ec:a4:7b:63:28:33:9c:2c:fb:bd:25:13:1a:
22:3a:ac:45
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:53 2026 by rpki-client