
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa
File: bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa (raw, json)
Hash identifier: G8PFGeMkj2n5ywFuERhI3XNCSa0tWMf1H4vaNsKmE1s=
Subject key identifier: 4C:69:26:7C:D1:09:26:EF:8B:20:88:CC:DC:5C:D9:51:B6:F5:43:11
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6B401484049BA6C7BFD0A448863401B412F567BB
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa
Signing time: Sat 14 Feb 2026 00:10:03 +0000
ROA not before: Sat 14 Feb 2026 00:10:03 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f00:4120::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:40:14:84:04:9b:a6:c7:bf:d0:a4:48:86:34:01:b4:12:f5:67:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:10:03 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=1e5941daeb396c384e4e299eb64c828a5b334389afcfa41c11792c93a96e18da, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1d:3f:3d:10:70:3a:d5:a3:4a:24:9f:5a:fc:
fd:10:93:25:7e:9d:11:7d:bd:c4:c0:6b:85:bd:27:
5b:d1:b6:5f:27:60:82:6d:a2:16:c2:76:c4:95:40:
a4:2a:ff:3d:6b:3d:89:c6:cc:13:96:9d:1d:6d:55:
f5:bf:53:5a:55:80:de:bc:88:76:cf:57:19:f5:5d:
2a:0d:ad:8f:c9:7c:91:2c:99:3e:03:43:e3:d0:fa:
bc:bf:ec:a9:39:95:f9:ee:c5:04:9d:32:5f:67:ab:
af:95:ff:5a:5f:40:1d:ed:ee:d9:b2:77:42:2d:3d:
69:fd:2f:a6:e2:1d:f5:d4:51:9a:4c:6d:19:0c:e0:
ad:28:aa:d0:1d:8a:ea:ab:42:e1:5f:ef:df:0e:2a:
08:c0:29:ee:cf:4a:b5:13:62:0f:42:a9:f5:02:88:
36:24:67:2a:f2:7b:2a:2f:56:4e:ef:48:5f:d9:c5:
91:dd:80:0f:80:07:29:87:21:33:80:67:7c:98:56:
42:bf:1b:70:88:e6:bc:c9:07:18:f8:14:56:b9:a8:
34:27:82:db:0f:d1:13:88:f1:1f:4b:20:67:16:2b:
fb:60:03:82:57:09:e8:95:e1:46:2a:b4:a4:29:7a:
85:02:f9:61:8b:ad:04:a5:aa:dc:ed:83:09:6b:63:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:69:26:7C:D1:09:26:EF:8B:20:88:CC:DC:5C:D9:51:B6:F5:43:11
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bb4c38ee-7dc9-4045-ad81-060fd7e9d6b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f00:4120::/48
Signature Algorithm: sha256WithRSAEncryption
19:49:63:e6:9c:f0:16:a0:78:c7:a9:03:f8:f2:7e:13:76:0c:
78:1b:70:9d:58:ab:50:bd:2b:bd:c7:0c:57:3a:39:ef:b9:9b:
a3:55:11:6f:73:49:8d:c9:ec:a0:20:b8:02:ab:69:9e:b7:b6:
6c:19:87:ae:79:af:45:4e:eb:1e:f7:92:69:02:3c:b0:98:6b:
32:c2:78:cc:79:e9:79:29:2b:23:57:8b:b5:87:44:d0:44:30:
fd:1d:ee:92:ca:6e:63:38:61:af:0a:9a:5d:97:3d:1b:a2:2f:
9f:f0:8a:fa:6b:e5:98:cf:cc:8c:c1:76:6a:68:c6:2f:b3:86:
53:a0:d9:2b:a4:20:59:2d:48:23:28:3d:48:59:c0:e0:ae:14:
7d:2b:90:4f:9e:ed:0f:20:5e:1a:62:8a:1b:c6:eb:e3:88:29:
1c:21:a6:15:9f:3e:ae:e0:14:fc:d9:d1:29:6a:be:e3:7f:d1:
64:25:d0:f9:37:13:85:a2:1b:b7:55:fe:d6:f7:b8:9f:a2:c2:
fc:4f:ef:d8:cd:df:14:e2:0a:4b:1e:0f:6c:d3:2f:86:ab:ef:
37:3f:bd:4b:c8:33:98:55:57:1a:38:db:7b:f2:d2:c6:24:da:
de:70:8a:8f:10:5c:2e:82:79:44:1e:11:d8:b7:39:43:0d:f5:
2a:ef:e0:c1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:05:33 2026 by rpki-client