
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93977caf-592d-4ba6-b79f-4c7b035e0f67.roa
File: 93977caf-592d-4ba6-b79f-4c7b035e0f67.roa (raw, json)
Hash identifier: WKlnw1vYgT4FKxRlknVtpNssuQncZxhvSmFLsiM3FIw=
Subject key identifier: 29:79:F9:DE:71:22:9F:1B:04:73:2F:CC:10:66:54:FB:7D:99:C4:AC
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1CD4E7D16C392306A8F267318CB0EFDEF678DDB6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93977caf-592d-4ba6-b79f-4c7b035e0f67.roa
Signing time: Sat 07 Feb 2026 00:10:10 +0000
ROA not before: Sat 07 Feb 2026 00:10:10 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f27:4000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d4:e7:d1:6c:39:23:06:a8:f2:67:31:8c:b0:ef:de:f6:78:dd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:10:10 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=6777a6f3a759f6de5bf228b06713a795298c2f9eefa051bbab9db420d64bf44c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:ab:6a:42:f4:81:01:65:50:bc:1a:00:97:
4e:b5:57:ad:f0:be:04:25:ef:0a:81:50:f7:d1:46:
04:7a:d0:50:86:cd:89:c3:f7:70:a3:c4:9c:01:8f:
25:5b:be:73:38:9f:a7:a9:01:f7:da:0c:80:bb:bc:
1a:90:fe:42:e1:c6:11:13:1f:20:14:5b:b7:ee:df:
95:a5:d9:77:c2:62:8b:9c:1b:76:ff:3e:67:83:83:
b8:d4:22:57:5c:e2:ba:c7:17:b9:cb:b2:12:1e:84:
e1:98:d5:8e:72:ff:03:cc:5c:c7:07:31:22:4a:07:
e0:51:51:af:8f:ab:a5:c5:60:0d:af:e1:80:51:0e:
f3:3c:22:47:55:18:bd:f8:30:e0:f8:31:de:cb:42:
5c:93:5e:d1:97:a9:05:91:ae:af:e8:e6:72:5d:45:
79:d6:3f:2e:5a:ae:fb:6a:38:f0:01:4c:cd:68:c3:
d2:65:f5:3b:8d:39:bb:98:e6:a2:13:de:0f:56:d2:
18:76:be:c2:72:6f:1c:36:16:1e:6a:56:30:c2:1d:
1c:33:08:7b:34:bb:ab:33:f0:4c:44:51:70:b5:3b:
c1:25:13:aa:17:3b:c3:46:fe:b9:35:3e:78:86:a0:
ee:4a:46:c0:8e:92:68:d3:05:e9:4b:42:e9:3c:53:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:F9:DE:71:22:9F:1B:04:73:2F:CC:10:66:54:FB:7D:99:C4:AC
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/93977caf-592d-4ba6-b79f-4c7b035e0f67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f27:4000::/36
Signature Algorithm: sha256WithRSAEncryption
37:58:05:67:b6:02:f2:03:89:3e:81:0f:ab:71:3b:cb:4b:37:
de:eb:48:7f:e6:fe:d9:9b:63:84:1c:b0:1c:f4:8a:31:89:e2:
c7:7a:d7:2a:df:67:67:e9:90:e2:ea:24:2c:29:89:26:30:c5:
dc:07:01:fc:a0:88:49:27:e7:af:17:11:74:26:6d:09:84:a0:
74:ad:f3:8e:c8:da:63:65:a2:9d:fc:04:40:90:e7:e9:46:82:
37:35:2f:2f:5a:03:5b:7b:e8:5d:cd:83:07:02:6b:9d:62:24:
c9:ca:5f:13:44:5f:e1:91:51:fa:b0:8b:73:25:68:07:4f:da:
a1:62:af:59:55:a5:0e:a9:0f:79:69:42:d3:55:3b:c5:31:8a:
38:7f:8b:48:50:6f:63:ae:1c:45:d2:4e:7a:07:84:20:11:e1:
6c:f9:bc:b4:ea:5f:ef:cd:c2:94:45:24:fa:cc:f0:e3:68:59:
cf:f1:ce:41:a3:0f:db:7b:94:04:e3:40:03:e4:33:79:fa:6b:
f8:85:c3:1f:48:1b:46:b0:6e:85:b9:fc:09:b6:6d:2d:c5:54:
e4:32:1c:e1:6a:13:47:e5:19:d5:33:02:15:64:f2:8d:b4:f8:
3f:43:1d:7c:1c:e6:69:4e:f2:c6:8b:2b:cd:6f:a2:11:f0:57:
f5:fd:11:61
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:57:55 2026 by rpki-client