
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa
File: 9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa (raw, json)
Hash identifier: LDzRJMB0yTXDmaLLlUc+s+9OTL1W4Z160tbw/oLg9Ws=
Subject key identifier: 02:FD:82:9C:06:68:26:FC:8C:52:F3:6E:C0:1D:B4:B5:04:3B:89:89
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 314A6FFCA9182D0B5E45E4FEA07A7F3BB972545A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa
Signing time: Sat 07 Feb 2026 00:31:06 +0000
ROA not before: Sat 07 Feb 2026 00:31:06 +0000
ROA not after: Fri 08 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 168.241.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:4a:6f:fc:a9:18:2d:0b:5e:45:e4:fe:a0:7a:7f:3b:b9:72:54:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 7 00:31:06 2026 GMT
Not After : May 8 23:59:59 2026 GMT
Subject: serialNumber=76b92c5397fe3f0724a8c493349a25f9b731511148dff3dd8bd74d4ef1619366, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:a7:71:6b:3f:6e:92:79:3d:01:c9:54:4f:
2b:79:d6:81:0e:14:04:1d:d4:d8:4f:4d:36:ec:56:
5b:32:c1:72:21:ab:4e:64:6c:9a:4a:f6:0f:84:fa:
ef:84:e2:ca:5b:0e:11:e4:ea:d0:2a:52:e9:12:a1:
09:94:f5:e4:84:00:85:80:04:22:6a:49:ce:1e:98:
ff:f7:05:63:62:6e:e6:a3:df:b7:78:c9:cc:38:be:
1a:5b:b3:ed:37:ab:f5:84:96:82:f5:a6:ac:5e:ba:
0c:dd:44:b5:86:7a:55:a2:bd:ac:4b:5c:da:f3:c5:
bd:f4:48:bb:ca:0a:4d:d2:2f:f6:8c:81:08:80:b2:
8d:7d:85:47:32:3c:cc:85:a1:37:b7:b7:f8:ea:dc:
68:97:d5:0e:8c:c6:7a:96:6c:17:43:77:5a:55:31:
92:3a:87:e0:95:cb:c3:e5:69:e4:d5:46:1a:5a:32:
7b:98:f4:ac:db:aa:8d:2c:8e:55:8d:8b:85:b3:6e:
7b:32:f8:0c:0f:84:cf:8b:3b:4b:aa:c0:01:b1:11:
a9:74:b0:c1:cf:10:9c:fc:4b:b0:9b:4a:f1:74:9c:
44:79:68:d7:d9:e7:a1:7b:6a:48:4c:c2:31:8e:86:
3e:f8:20:ad:8b:de:1f:bf:09:92:f5:f4:dd:fc:72:
06:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FD:82:9C:06:68:26:FC:8C:52:F3:6E:C0:1D:B4:B5:04:3B:89:89
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9e78c606-f2f1-41f5-b3eb-b5b1035697f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.241.0.0/16
Signature Algorithm: sha256WithRSAEncryption
23:66:df:a5:80:ed:27:e1:c7:1f:1b:ae:40:24:9e:37:cf:12:
55:4d:1e:0d:06:49:b2:d5:0d:fd:aa:fa:04:5c:22:2c:55:ce:
ad:e1:47:27:e3:9a:70:b2:be:0d:45:a8:4f:7a:68:67:5a:1a:
80:71:17:e8:6c:86:0d:24:27:8a:ab:19:0c:f6:00:f4:3d:84:
72:ac:36:eb:1e:05:de:9b:d0:79:75:84:87:f9:03:84:79:9e:
8b:41:6c:f8:02:b8:7d:e4:51:da:8c:75:90:e8:42:32:cf:2b:
b0:a6:c7:d9:fc:60:b1:e0:e7:41:e1:28:b0:e4:c2:fb:d9:8d:
c7:45:84:dd:b2:c0:b0:71:09:73:1f:b5:bd:fb:f0:c3:1c:02:
51:46:37:29:aa:3d:ee:e3:b3:f5:cf:b2:56:e3:df:81:f6:c8:
e7:d5:7b:a2:25:e6:67:f0:12:84:e7:41:45:93:c8:f7:5c:67:
fd:16:5a:7c:14:0f:c0:d2:5a:ff:d1:03:51:85:5c:2c:e3:f9:
97:c2:83:c2:e5:f8:1d:82:2f:c8:7f:8d:68:4a:4d:2e:3f:73:
a5:60:f3:a7:ed:a9:d1:dd:c2:d1:43:ae:f5:40:ca:4a:37:e3:
39:42:34:64:20:d5:a3:0d:21:18:9f:c6:9c:30:93:cf:a0:93:
89:c4:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:59 2026 by rpki-client