
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6d0499-6523-42dc-96f7-6d729660d8b6.roa
File: 9f6d0499-6523-42dc-96f7-6d729660d8b6.roa (raw, json)
Hash identifier: O9CJ2a8qGG0JR1dBoHDR01KTaC/KiVlOPl0Edoe3iTk=
Subject key identifier: B6:AD:E8:2C:58:6A:BF:96:9D:42:75:4B:F4:CF:15:B5:23:3E:39:24
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3886FEB7D5320AFA4B69DE92CD0946DE26CCABEF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6d0499-6523-42dc-96f7-6d729660d8b6.roa
Signing time: Fri 13 Feb 2026 00:00:10 +0000
ROA not before: Fri 13 Feb 2026 00:00:10 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.238.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:86:fe:b7:d5:32:0a:fa:4b:69:de:92:cd:09:46:de:26:cc:ab:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:00:10 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=45e147b0e5016c5816b5a93450097b74a0302b4798579c8b0211574e7c75a326, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:b4:00:f5:12:39:67:68:e8:93:05:0b:8c:
25:82:a0:eb:19:68:a7:cf:4d:9e:bc:9e:36:ac:fe:
0c:3f:fa:64:c5:e4:93:ad:05:4f:d6:ff:c5:38:30:
7c:3b:21:67:11:00:36:6c:02:87:3c:84:7c:5a:a5:
38:c4:df:f8:e9:e4:0f:aa:52:9d:30:ff:9c:af:62:
32:e7:a0:31:74:4b:b9:a6:4a:52:fa:d5:fd:98:25:
52:4c:1e:be:e1:6c:57:b9:eb:ae:35:06:e2:8e:36:
8b:82:1b:9a:1d:a5:7f:04:ca:7c:77:42:7d:2b:07:
af:02:63:fc:32:13:65:0a:3f:18:04:63:85:df:de:
15:c4:1d:ac:b9:4c:8c:96:cb:e2:92:c2:b1:b3:50:
ab:04:31:e4:aa:24:fb:44:72:00:b4:dd:a4:52:a0:
62:4f:7c:d4:35:0d:9c:cb:d9:f5:5b:03:cf:1c:ce:
ec:1d:90:18:49:19:92:3b:77:03:e4:15:ba:8f:9b:
65:c1:75:fa:ce:2f:c6:71:bd:2c:b3:f4:7c:2c:02:
22:c7:1e:70:1e:5e:f6:c1:e5:ad:f3:22:4e:40:39:
26:24:e6:a7:c1:18:23:a5:b2:24:51:3b:11:6b:e6:
37:9b:d6:67:9f:b9:6e:e8:4e:60:03:b7:c5:56:e0:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AD:E8:2C:58:6A:BF:96:9D:42:75:4B:F4:CF:15:B5:23:3E:39:24
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9f6d0499-6523-42dc-96f7-6d729660d8b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.238.128.0/17
Signature Algorithm: sha256WithRSAEncryption
54:f4:f3:56:b4:8f:43:ba:24:64:13:4b:24:25:aa:0a:1b:47:
58:86:2e:7a:03:ad:63:1f:ab:c4:c8:d7:9c:0f:7c:a0:28:a1:
f5:83:d1:02:2d:03:cf:58:8c:b9:ae:e3:3a:05:a4:e7:b9:72:
78:17:07:ae:5f:08:e3:40:5b:db:e0:9e:97:a0:8d:b0:1b:4a:
91:a3:7e:a6:be:43:7d:9d:43:a7:51:4b:5d:f4:6d:aa:75:e3:
4b:bf:fd:5c:3c:4e:29:28:f6:8b:b6:fa:e1:60:0c:e9:b5:68:
d8:d6:7e:b8:ed:6c:86:1d:b5:ca:1c:7f:fe:c7:7d:a5:5d:f0:
94:11:9f:09:50:b0:81:46:ee:1e:50:ef:d2:0e:cf:86:6c:9e:
12:37:ce:9b:17:f9:e2:7f:9c:60:32:5b:79:c4:ec:51:f1:44:
8c:cb:b8:17:33:2c:5d:e5:cd:c3:12:1c:c7:10:e6:3c:00:78:
ed:ec:bd:86:90:a3:3d:b4:fe:05:b5:58:61:59:1f:e7:c3:40:
f4:e3:82:6f:e1:a7:06:8b:20:82:49:24:84:3c:87:79:ce:9f:
68:89:46:c3:7b:96:06:cc:05:1c:d4:49:1d:bc:f6:8f:f7:07:
9b:aa:79:84:a6:a9:40:1d:48:53:61:a6:72:6c:f3:14:44:14:
06:3f:98:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:31 2026 by rpki-client