
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa
File: 91ea0496-867b-4435-a47a-de477b4827c7.roa (raw, json)
Hash identifier: MTd0ZQeZsbxzP/BmLSrUHXEJGS20u6iLt8+5SNIxSts=
Subject key identifier: 26:64:7B:74:D2:9E:78:20:15:ED:85:E6:48:AF:0D:54:DB:EA:5F:10
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2B871603997017548430A83BD4991C0F65862037
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa
Signing time: Fri 13 Feb 2026 00:10:33 +0000
ROA not before: Fri 13 Feb 2026 00:10:33 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 44.233.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:87:16:03:99:70:17:54:84:30:a8:3b:d4:99:1c:0f:65:86:20:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:10:33 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=ca658293fe0574b8762d81cdbc015bad312cc3378f42f7893fb5cd80f1bca1d9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:80:61:6c:da:aa:ab:7e:4e:41:2b:9b:13:01:
50:70:16:93:b2:a1:ec:aa:32:b2:a8:f7:95:b2:19:
93:2b:47:30:a6:8d:41:45:31:b4:05:49:97:66:8e:
68:e6:2d:d7:45:f8:b8:35:91:5f:b1:bb:65:7f:f7:
5b:4e:b4:4b:a5:b4:16:fa:b9:93:84:48:88:20:e4:
ab:c6:5b:2d:91:8b:3f:af:76:63:be:da:e1:c8:97:
55:bd:0a:5a:0c:48:ed:4c:5d:55:20:2a:40:4f:46:
ca:42:43:6e:bf:a4:6e:87:73:42:27:c0:ad:c6:39:
da:5e:7e:ff:ab:bc:a7:d7:ae:14:e3:3b:5f:b4:71:
e1:3a:05:c0:26:60:d7:c1:4f:cf:80:31:b1:92:fc:
79:e5:e5:ce:4d:a6:f1:d4:f5:fe:6c:0c:b0:72:1a:
77:b1:31:de:fa:0d:cc:92:b0:e8:39:d1:aa:c8:26:
1e:cd:4f:a2:12:d0:2d:39:91:b9:ff:4d:94:dd:ef:
98:fe:99:74:c8:0d:21:ee:2e:22:54:79:2a:a1:7a:
64:00:ff:6b:6e:dc:d3:c9:88:12:19:76:bb:51:2e:
ee:53:09:7b:ae:21:60:d2:34:00:3a:ed:6a:67:4a:
b4:23:72:65:c8:30:fe:a5:e2:d9:85:c8:aa:f5:ce:
1b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:64:7B:74:D2:9E:78:20:15:ED:85:E6:48:AF:0D:54:DB:EA:5F:10
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/91ea0496-867b-4435-a47a-de477b4827c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
44.233.118.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:cd:18:28:14:96:a4:5c:e9:a1:7c:cd:65:3b:d2:04:ec:bb:
04:cf:4e:0c:13:cd:72:8c:46:42:d1:bc:ce:1b:df:c6:54:fa:
d9:9c:e3:70:95:8d:97:91:59:25:6d:cc:2e:b1:d2:a7:36:12:
28:73:52:cb:be:42:54:c1:66:38:bc:66:a1:c8:fe:56:2e:cb:
69:55:13:37:c8:73:c7:0f:74:36:01:63:36:3f:94:55:0c:cd:
e8:63:e5:ff:b0:99:e5:f8:f0:c6:5f:8b:13:98:e8:79:17:03:
82:6a:a5:96:8e:8e:1f:44:30:35:44:7b:d3:ae:63:13:b9:21:
90:1f:e1:f9:3b:cf:4d:58:24:ad:c5:1e:92:19:f6:0e:ce:8b:
4c:40:e7:4b:8b:44:58:69:41:b4:c2:1c:ac:35:c0:26:b7:39:
61:f1:c8:8d:66:3b:1c:85:61:29:a8:66:26:87:70:a2:c6:d1:
58:34:83:ea:82:48:bc:70:2b:f9:2d:88:36:5a:12:95:1a:26:
eb:8f:65:7a:d4:d6:3e:75:ba:55:0b:78:0c:3f:31:b1:50:b4:
ef:dd:0e:63:52:d6:c4:97:cd:59:fb:b9:8d:94:12:18:d6:8c:
63:d3:d4:a9:2c:a7:21:b7:fe:4f:97:25:3e:18:74:f1:dc:23:
7c:ca:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:55 2026 by rpki-client