
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fc45e7-8bde-4b2c-ad82-302a6c0ccbfd.roa
File: b4fc45e7-8bde-4b2c-ad82-302a6c0ccbfd.roa (raw, json)
Hash identifier: HooKjfvMOpfn+aDWxxdZyimPKfqUzq3+DAOoM36750k=
Subject key identifier: FF:5A:44:6E:38:F1:46:8A:9B:12:6C:40:93:94:E5:AC:4A:04:C1:63
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 060127EE60FD4288277DA24C38B094FD8A87E10A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fc45e7-8bde-4b2c-ad82-302a6c0ccbfd.roa
Signing time: Wed 18 Feb 2026 00:20:04 +0000
ROA not before: Wed 18 Feb 2026 00:20:04 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 167.147.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:01:27:ee:60:fd:42:88:27:7d:a2:4c:38:b0:94:fd:8a:87:e1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 18 00:20:04 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=e224cff89225edf5afb06d7cf2b15c9ddf2db299f8b0d044b42e123e1f2d3d88, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:74:df:de:46:42:50:15:7c:9c:45:08:0c:6f:
c3:39:a6:cc:bd:6f:ef:e5:21:32:7c:1d:19:94:2c:
42:b3:17:bc:1a:2f:0a:cf:c4:5a:f1:97:92:58:93:
9f:81:17:e0:24:64:b8:e9:67:1f:d8:22:0b:8d:af:
23:ff:bd:d5:c9:32:81:34:8c:27:4d:26:30:e1:ff:
bb:75:53:dc:fb:1a:2a:e8:9f:dd:4a:41:2a:c8:0b:
5b:d4:fc:ee:bd:f4:92:2c:b0:3a:3a:a2:4d:a6:72:
f2:bb:77:b9:ff:c1:dc:f2:85:77:9a:e6:d8:86:e2:
0e:ad:df:70:56:ae:75:e6:69:e9:77:35:1b:f6:b1:
70:3f:98:55:21:46:4c:e9:fd:9e:4f:f1:df:b2:8b:
b6:7c:77:8b:2d:bb:fb:07:cc:b7:f6:be:74:f7:27:
e6:c3:07:e5:99:73:d6:4a:60:72:f5:eb:57:4d:7f:
c0:e9:b8:cd:4a:af:02:27:4f:ad:3f:b7:ae:b6:48:
65:62:65:9a:75:0d:a0:b6:f7:43:d5:37:79:e4:3e:
72:ed:b1:7f:f6:24:f0:24:3d:f0:17:43:33:a0:77:
24:0b:1c:bf:0d:1f:2b:5b:91:36:4f:a8:74:ab:fa:
fa:11:8d:c4:6c:67:5f:cb:ee:c6:57:85:1e:4e:e0:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5A:44:6E:38:F1:46:8A:9B:12:6C:40:93:94:E5:AC:4A:04:C1:63
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b4fc45e7-8bde-4b2c-ad82-302a6c0ccbfd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.147.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9f:e7:9d:50:4b:3e:c6:3a:bc:b9:52:d1:e9:2d:7a:bf:85:e3:
c7:80:4d:96:6c:ed:d8:90:40:02:85:9d:ea:60:60:9e:dc:9d:
2e:d7:04:33:85:04:ed:e2:89:63:e3:3b:92:8c:16:6b:37:fb:
63:ca:66:2d:cf:e5:af:ff:1d:2d:3a:d1:de:70:7c:c3:3c:51:
f1:ae:23:c7:fe:c4:cf:82:9b:9e:a6:39:bf:02:c7:4b:f5:84:
ba:04:03:f1:ad:0a:17:73:97:8f:66:7f:b3:f7:bd:d9:15:4d:
b1:48:0d:6c:88:b8:f8:1b:df:7f:3c:b7:1e:44:b0:c5:10:f9:
d9:d1:58:0a:7b:b0:ab:31:30:97:d6:bd:f0:de:c1:79:7a:b6:
6c:b7:02:8c:3d:97:5e:98:b0:6c:b9:4a:92:17:a7:ed:2c:e9:
ab:ba:f8:33:df:dc:8a:4f:8f:e6:ff:f8:74:d1:72:ec:ad:19:
47:d7:c0:a6:65:15:cf:a4:2e:d5:22:43:86:ab:da:fb:f1:dd:
50:b9:4a:ff:2c:0e:39:5d:bc:4b:1b:c1:68:63:72:7f:c4:d3:
cb:63:9f:b5:8c:11:52:18:85:c5:dd:da:18:17:6b:16:36:d0:
96:83:c4:e1:fc:9f:2f:2e:ab:93:50:ce:83:a6:43:99:27:26:
ea:62:84:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:49 2026 by rpki-client