
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa
File: 9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa (raw, json)
Hash identifier: Ro1ehAgItQgxc+f9hOGZ6pxBMsCxzT94pMp91y6bcig=
Subject key identifier: C0:43:70:F9:9B:BA:8A:54:77:7D:14:7A:D4:9F:1E:44:0E:88:73:74
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0B1C8C777BE8C5B399C3C1FD62FC37AF182E3849
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa
Signing time: Tue 24 Feb 2026 02:11:18 +0000
ROA not before: Tue 24 Feb 2026 02:11:18 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:5080::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:1c:8c:77:7b:e8:c5:b3:99:c3:c1:fd:62:fc:37:af:18:2e:38:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 02:11:18 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=16d4f15e8ba1aa738ea443728890ae5d3faf5638f6d3f528bb65401f5756258f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:29:23:fc:9d:64:7b:e7:07:d9:5f:7c:42:fb:
07:c6:49:70:ce:fe:e8:db:6b:02:5e:1e:55:10:36:
ee:42:45:4c:4b:ca:6f:0b:20:f2:d1:c3:4a:83:29:
37:ea:28:95:fd:fd:0e:47:14:7b:97:de:b6:e7:d5:
5c:22:88:cc:58:ae:00:8c:ed:b1:10:81:ce:67:9b:
de:bc:10:9b:1a:18:af:03:72:f8:29:c7:a8:cf:57:
a7:87:9d:a0:77:c3:f5:a2:c4:c6:e0:01:84:95:8c:
8d:44:57:9c:54:1e:e2:fa:81:5b:e6:2e:8d:64:70:
91:c9:91:d8:18:fa:1e:a3:54:fd:ca:22:73:9c:ea:
f9:2a:d8:de:cd:c3:44:31:42:a3:9e:39:b4:ea:0b:
7e:44:54:49:f1:da:07:c0:ec:44:17:c2:00:1e:e5:
d3:e9:2d:f2:b1:75:55:ed:fc:59:e4:7f:37:ba:51:
1d:fd:7c:e6:4c:25:4b:bc:f7:3a:eb:77:4b:67:b3:
f7:8a:f9:42:bc:b6:9f:9f:02:06:1b:ae:06:a4:61:
15:e9:3e:42:34:bf:e8:62:99:13:9c:b1:12:f0:0d:
57:9c:df:9d:d4:56:93:1f:b4:c1:76:32:ba:1d:cf:
ef:06:37:57:e3:a5:2e:10:a6:73:74:90:8a:29:e4:
6c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:43:70:F9:9B:BA:8A:54:77:7D:14:7A:D4:9F:1E:44:0E:88:73:74
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9ac8db7e-0352-4ac5-97df-faf09a2fa46f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:5080::/48
Signature Algorithm: sha256WithRSAEncryption
c6:10:24:f8:0f:d5:a3:2c:7e:7f:5d:66:7b:df:9a:c2:86:0e:
d5:2c:58:cd:24:58:12:6e:18:d8:48:32:16:71:65:ed:4b:97:
f4:3a:6e:c3:4d:b9:80:2b:c3:0e:c4:a5:f1:c9:1a:d1:0d:ab:
a9:c0:58:cf:1e:b5:79:73:4b:09:88:a9:72:41:53:5c:22:cf:
03:1d:27:a8:8b:bf:e4:fd:b1:d9:f3:82:3c:d2:0d:89:5c:3b:
56:7d:e0:b7:e7:56:ce:43:12:c2:dd:10:89:02:3c:af:1a:df:
b2:6f:5b:24:c9:29:df:97:f4:28:b8:31:7e:40:78:97:31:5d:
b6:03:15:36:99:bd:7a:57:57:89:50:69:4d:f9:70:7b:19:c8:
01:82:03:70:87:e8:47:44:a5:30:43:c3:11:d5:b7:1d:f4:58:
e8:b5:2b:d2:be:7f:0e:9c:bb:8b:4f:a9:b3:40:25:3f:0b:ff:
e8:47:3b:aa:e2:db:36:52:cf:5c:d9:8f:01:46:d2:4d:14:73:
e4:51:19:4a:14:e4:12:7c:0f:3f:9e:10:e7:5e:91:40:69:db:
18:a4:72:8a:c2:3a:15:d7:29:27:86:36:74:9b:90:d2:98:b9:
e7:47:23:49:5b:75:5c:01:17:4e:98:95:ba:2f:42:1b:2a:65:
ed:36:32:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:49:46 2026 by rpki-client