
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aab2944d-648d-4a63-8324-98420640d724.roa
File: aab2944d-648d-4a63-8324-98420640d724.roa (raw, json)
Hash identifier: YYn9bWng9/IV32wJZmRwFn6adl/wyLYipqf4/rpaFpE=
Subject key identifier: D2:54:56:30:C4:31:41:52:EA:9D:76:28:F8:E3:15:6C:9C:52:B4:59
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5E56F815A97E117EF4E54F26C4CD9A5FE33579A8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aab2944d-648d-4a63-8324-98420640d724.roa
Signing time: Wed 11 Feb 2026 00:40:47 +0000
ROA not before: Wed 11 Feb 2026 00:40:47 +0000
ROA not after: Tue 12 May 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1ff3:20c0::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:56:f8:15:a9:7e:11:7e:f4:e5:4f:26:c4:cd:9a:5f:e3:35:79:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 11 00:40:47 2026 GMT
Not After : May 12 23:59:59 2026 GMT
Subject: serialNumber=88fbf3f979f8e849dbd9d3666121c2e0eb7e60f03913851e775986967c8910df, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:04:eb:5b:c8:d2:75:2d:1b:a8:d8:9a:59:
ec:dd:d5:27:aa:fb:28:6b:0f:5f:b2:e5:7c:50:19:
36:9f:fd:f9:f4:95:11:2c:99:10:23:bf:49:6e:cf:
b1:39:e3:58:8c:56:89:11:08:08:6a:9b:4f:16:10:
02:68:8b:fe:f5:f0:2c:60:29:a1:e7:62:7f:e5:ca:
78:2d:99:55:1b:67:52:61:08:5a:56:26:bb:5e:07:
e8:76:d2:a8:28:aa:0c:df:26:10:88:9c:bf:1b:46:
80:62:80:5d:fa:83:af:3d:85:06:cd:e9:78:59:d8:
35:85:b2:22:22:cc:4f:0e:c8:87:3a:b4:f5:05:d0:
91:9d:7f:36:87:e6:f2:81:a4:95:99:e5:86:ed:0a:
d4:fc:61:f8:be:60:f8:0d:f7:8d:a5:61:b7:2b:50:
83:69:c8:45:2f:67:3f:2d:87:4d:88:38:4f:fd:31:
91:01:ce:7f:1d:35:4a:0d:9a:ac:b4:3f:b2:df:a4:
c7:80:21:dd:55:80:91:fb:c9:b9:9c:d5:7b:15:45:
43:2b:df:94:25:1c:7d:ce:74:14:92:b5:e6:b5:47:
53:68:b5:10:03:e3:09:62:87:62:b5:c9:f6:6c:a3:
a6:cc:a4:a4:00:77:15:72:49:d9:86:5f:2d:80:27:
26:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:54:56:30:C4:31:41:52:EA:9D:76:28:F8:E3:15:6C:9C:52:B4:59
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/aab2944d-648d-4a63-8324-98420640d724.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff3:20c0::/46
Signature Algorithm: sha256WithRSAEncryption
81:f1:50:e4:bf:86:6f:5f:70:60:55:de:0c:ac:ac:64:91:9d:
a9:30:27:4f:d7:d7:d3:46:33:f4:b5:ff:c9:8c:b6:fe:13:b4:
c6:08:b6:0a:83:bd:47:57:d6:ea:bf:bc:9c:05:06:29:fc:b4:
6f:3c:22:0e:c9:1a:32:84:36:db:d1:27:09:63:d9:1f:76:ee:
e9:74:6b:3a:e7:fc:37:ce:21:7b:37:74:ee:50:60:a0:bb:eb:
98:49:57:4a:e8:40:08:2f:d0:d3:c2:5d:19:c5:e3:9a:07:fc:
29:af:94:30:34:ad:fc:96:ce:2a:d6:41:d7:a5:93:e3:3d:2f:
f2:59:65:df:d0:91:9c:58:2b:ae:aa:11:94:20:53:a0:0a:04:
c5:a7:42:56:b2:1d:7e:94:3c:d2:8e:bb:b0:f9:1d:35:9b:df:
46:f6:cf:cf:33:6a:65:47:7a:69:92:da:1e:19:c6:9d:c4:f6:
5f:b3:18:67:1c:2b:1a:1b:16:ff:52:4d:86:ca:1f:ca:27:22:
ed:43:94:bd:42:2e:41:dd:96:71:07:d2:ee:4f:0c:22:44:c7:
9a:0d:10:3e:54:ff:4f:58:9e:c4:89:b4:84:18:a1:43:d9:6a:
97:e4:11:03:4b:96:6a:e1:f4:71:28:0f:37:ca:c2:76:cd:31:
ea:c7:a6:8f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:07 2026 by rpki-client