
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
File: b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa (raw, json)
Hash identifier: qDMd8F6teCyjJxRiMprIic7P1bljEBjBvOfOlleQl3U=
Subject key identifier: E1:AA:7E:5C:2D:4F:A9:A7:08:46:77:15:92:6B:39:BF:4D:5B:D3:ED
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 11C4E2656A789512EE75A13AC6F51135F348153A
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
Signing time: Tue 10 Feb 2026 00:00:48 +0000
ROA not before: Tue 10 Feb 2026 00:00:48 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.160.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c4:e2:65:6a:78:95:12:ee:75:a1:3a:c6:f5:11:35:f3:48:15:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:00:48 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=dc057bb25b045720287b0ddc8b7d008d44be30239e2a65078190a6418aab00a9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:97:ab:59:08:a8:4f:e1:11:ea:e0:e4:6d:9f:
a2:ee:96:89:11:ed:4b:ba:04:66:e0:d9:44:a5:72:
d6:f5:21:58:cc:fb:68:cc:a6:61:f8:1d:23:9a:22:
8a:90:9b:ae:bf:a7:ae:64:f9:34:96:34:c9:5d:1d:
6b:6b:72:3a:54:76:27:85:bd:98:0e:97:cf:24:dd:
c1:5c:46:07:33:37:21:5e:3d:9c:a5:de:a9:47:6e:
bf:0e:ae:ec:37:0a:86:06:b4:00:03:d0:7a:93:6f:
f0:10:4c:6e:f8:e9:2d:f7:f7:77:e8:f0:95:4d:06:
cb:4d:65:a6:c1:e9:b0:45:89:7f:d1:91:49:ae:ab:
d4:a5:a2:8b:76:d6:8a:51:06:36:f7:4d:42:f7:7b:
0a:dd:64:af:ca:53:23:4a:2d:61:dc:e9:de:59:84:
7f:ec:fd:3b:3d:f6:ec:7a:c8:96:8f:2b:6f:fe:c4:
c5:2f:dd:7d:94:c7:7f:6c:56:83:68:d9:2a:d9:93:
c9:2e:1d:a9:88:7b:dc:ac:dc:3f:f9:46:35:3b:8d:
47:51:58:72:ea:9c:93:ac:f3:f2:23:8d:fc:63:48:
98:ed:bf:20:08:f4:c1:23:d4:7b:a3:db:4b:73:fb:
f3:a5:57:b0:07:64:31:07:9e:76:96:90:ea:d5:2d:
cf:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:7E:5C:2D:4F:A9:A7:08:46:77:15:92:6B:39:BF:4D:5B:D3:ED
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b54e68ec-2ef0-4546-8cff-e011c9f42fb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.160.0/21
Signature Algorithm: sha256WithRSAEncryption
16:bc:78:a5:9f:46:ed:b2:dd:6d:cb:83:58:df:78:73:f9:19:
4a:ab:0e:50:45:cd:d0:a5:aa:3c:8d:da:83:1d:3f:15:bd:06:
35:31:cc:bc:21:40:48:63:88:3f:97:71:f2:f3:e2:88:8d:36:
d3:ee:4e:68:8d:17:17:a0:28:b7:98:44:22:92:6a:06:48:b2:
5c:45:1b:55:08:54:65:a1:b8:c6:dd:04:aa:7f:f7:ad:ab:21:
e6:e6:37:05:d7:b2:cf:5c:a0:51:7e:4b:f3:09:6b:63:fa:89:
67:10:ce:c9:12:fd:f3:f3:8e:a0:a1:20:a4:fc:88:f7:64:26:
34:5d:91:a2:66:47:c0:bc:fe:b0:bc:2e:79:f5:bb:d0:ef:12:
a0:a0:5f:06:0d:65:62:ec:7b:90:ea:0f:ee:91:2a:67:26:ab:
7e:b9:61:8f:ae:3e:11:d2:8f:7f:4f:b7:0a:68:fa:ea:62:63:
55:de:d6:e2:7e:d2:1f:63:a2:e7:1c:69:a9:0b:f6:49:fb:d7:
8e:c6:72:cd:83:bd:1c:cb:8c:51:f5:a0:59:b2:4f:a8:d4:7a:
ff:3c:3c:0b:a8:eb:ce:33:a6:66:20:d0:63:c1:8d:5a:d2:9b:
6b:ec:87:21:12:c2:c0:ab:e9:36:fc:63:43:b9:5f:e7:c1:72:
8e:23:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:53:49 2026 by rpki-client