
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa
File: 9275dae5-5753-4531-b3f4-71757dd2b784.roa (raw, json)
Hash identifier: d6q9bec6I309yZ42+UtgTHzFcYguWpogLnYiY8L19fk=
Subject key identifier: 3B:48:FE:04:6E:7B:8C:63:53:B7:10:F6:82:33:86:E0:B5:AB:4A:08
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 13EAAC67CF2EC60398649B87B3BD249F808879BC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa
Signing time: Fri 13 Feb 2026 00:21:15 +0000
ROA not before: Fri 13 Feb 2026 00:21:15 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff1:ec00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:ea:ac:67:cf:2e:c6:03:98:64:9b:87:b3:bd:24:9f:80:88:79:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:21:15 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=fb762e145d32dd49bd4bad595f06afc882ac7d958919ab8f225ba1be54f32083, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:58:88:2e:2f:8b:f2:ff:60:3d:30:f0:75:
88:ef:79:b5:bb:21:8a:81:d7:a4:18:36:9d:5e:f7:
24:75:e8:71:86:ec:90:14:84:14:c7:15:77:c4:61:
e8:f2:b8:2c:87:8b:21:95:24:27:35:df:d6:b3:2f:
80:26:da:ba:76:e0:31:e6:9f:2a:1e:44:1b:3d:ab:
f8:c7:7f:47:90:6a:e5:35:6c:12:ab:55:e2:fd:99:
20:5f:51:ec:59:b4:95:6c:ea:93:a4:c5:09:e0:ec:
6b:2f:d6:a1:b4:38:ad:a1:3e:f0:49:da:bb:64:a7:
fa:b6:2b:99:f2:ce:0d:cf:dc:a1:a4:39:17:51:86:
57:ae:74:cf:da:6b:c5:3d:e2:14:58:db:0e:47:64:
02:ff:a6:70:8a:7e:10:11:76:05:0a:4c:4e:0a:14:
13:a8:d1:da:5a:0b:ce:a4:ae:35:f3:67:e3:60:c3:
8f:b1:c9:29:c1:d6:6f:a1:ef:74:07:b0:d3:2f:53:
30:9b:6d:9a:c2:91:25:ee:fe:ae:46:64:7b:66:3f:
0c:b3:8a:85:23:ed:73:ff:34:f6:a3:f5:ab:1c:d9:
b0:13:15:32:cc:01:60:de:2d:b6:b4:8b:e6:ad:47:
82:74:68:8d:26:4e:d3:6e:79:ab:41:4b:8c:49:8a:
0d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:48:FE:04:6E:7B:8C:63:53:B7:10:F6:82:33:86:E0:B5:AB:4A:08
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9275dae5-5753-4531-b3f4-71757dd2b784.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff1:ec00::/40
Signature Algorithm: sha256WithRSAEncryption
40:4d:07:e6:a0:a6:06:b4:7c:89:dc:86:d7:95:f9:d2:04:b7:
d1:a2:47:8a:05:ea:14:90:3a:17:ed:af:1c:20:8f:62:13:45:
ac:1a:1d:19:40:ae:3c:6c:0b:83:bc:4c:53:d9:e8:0e:9a:01:
d3:93:76:70:06:c6:a7:0b:30:69:55:69:34:1e:32:bc:30:4e:
9a:27:b1:90:63:f4:8c:a0:79:59:dd:95:50:6c:eb:71:6c:f1:
f3:5e:e4:bb:68:27:27:3d:40:43:d8:8f:35:16:f5:31:19:b1:
db:39:59:7f:70:b7:e9:dc:f3:98:d3:b6:f7:26:29:80:95:8d:
95:c0:c6:15:08:e3:24:75:bf:cc:f4:cf:5c:f4:ed:84:f6:ad:
44:0d:4c:e7:ff:9c:66:70:c3:bc:43:97:ea:2b:19:ff:fa:85:
52:c1:51:52:8e:cf:52:ce:79:0c:00:98:e8:20:5d:b0:7b:db:
9f:e1:7e:4d:72:98:75:8f:3e:8e:8d:2c:3a:27:a6:ea:b4:18:
94:74:54:8f:6d:bf:7b:98:34:6d:2a:86:95:fb:12:f0:7f:d4:
4f:db:f0:ec:41:73:cb:7d:0a:c8:6b:f8:f6:95:fe:15:fd:c5:
93:30:39:d7:da:e4:48:9a:f0:3e:07:99:2c:11:f2:30:ec:82:
11:9f:7c:3a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:17 2026 by rpki-client