
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bed0ba7b-f0c4-40d7-9960-baead5b9ddc8.roa
File: bed0ba7b-f0c4-40d7-9960-baead5b9ddc8.roa (raw, json)
Hash identifier: rxsMxX66CwK5G/upSlrkOR05UPsflr9emV7VOPlbfps=
Subject key identifier: 14:28:74:A9:E7:09:6C:23:92:A3:5A:95:4F:C5:B2:62:36:53:18:D7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 44E8E744778489EE6DC473822051FEEF1CC2663B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bed0ba7b-f0c4-40d7-9960-baead5b9ddc8.roa
Signing time: Tue 24 Feb 2026 02:00:57 +0000
ROA not before: Tue 24 Feb 2026 02:00:57 +0000
ROA not after: Mon 25 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1ff2:7480::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:e8:e7:44:77:84:89:ee:6d:c4:73:82:20:51:fe:ef:1c:c2:66:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 24 02:00:57 2026 GMT
Not After : May 25 23:59:59 2026 GMT
Subject: serialNumber=2cf081eb89b66f368016ca2864bc9542deac7e52c6f9a9cc47974e066ee4979c, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8f:6d:f0:7b:1e:76:59:1c:7a:fb:66:1e:9f:
7a:f3:d4:e5:10:5f:0c:49:19:b6:b4:36:b3:71:fc:
04:1a:ec:5f:aa:70:0b:9a:74:25:35:5d:ae:59:ef:
4e:e3:71:ba:33:68:9f:47:fc:3d:a9:f1:93:e2:11:
37:bf:13:99:83:56:54:09:ef:c4:13:e6:81:9b:37:
6a:bc:3c:32:3b:6b:31:56:77:d4:81:30:a7:97:42:
58:11:28:d9:17:d0:e7:47:cf:2b:42:5e:89:a9:61:
42:39:28:d2:75:eb:59:be:91:38:10:06:92:d9:ea:
1b:e8:2a:cb:0f:52:5a:d7:97:7c:33:39:92:fc:fa:
0e:4d:7e:97:4d:96:70:a5:cc:bd:cf:ae:65:53:a7:
3b:c5:ca:da:a3:28:70:ce:3e:4f:00:10:6d:fd:2d:
28:bf:e1:ff:35:85:5b:9a:67:1c:0c:7e:c3:cc:76:
cb:0e:e2:4d:e0:6e:7d:a3:28:d7:0b:bc:05:89:f9:
57:4b:8b:dd:be:d6:a1:6e:77:f2:39:90:f7:cd:c6:
e2:7f:cd:ce:c5:97:3e:a9:af:84:58:3f:d0:46:8c:
62:5c:e2:5d:5c:e9:73:17:53:6c:59:00:82:f3:cc:
40:ae:d1:d4:24:0b:59:f3:18:99:69:16:d7:32:f5:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:74:A9:E7:09:6C:23:92:A3:5A:95:4F:C5:B2:62:36:53:18:D7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bed0ba7b-f0c4-40d7-9960-baead5b9ddc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1ff2:7480::/48
Signature Algorithm: sha256WithRSAEncryption
93:a0:1a:6d:98:9a:14:4f:c3:61:c7:b2:30:21:49:15:8c:c8:
76:3f:e0:0e:d5:8d:1e:4a:91:ab:97:77:9e:c0:06:04:9e:56:
e3:01:44:19:c3:7e:36:89:16:f9:33:8c:44:2d:92:94:73:4a:
6a:6e:9a:b3:1f:8d:fb:89:e6:a9:68:ac:7c:6c:7b:a9:5f:df:
23:5f:31:b2:9e:86:63:62:f7:8e:13:10:85:d6:72:08:d2:7f:
bd:44:d2:5e:e5:c9:1e:7e:a8:05:26:70:86:e8:09:bc:e9:6f:
39:54:63:dc:f3:eb:03:d7:7d:1a:89:49:f8:b6:b7:e6:a3:49:
8a:0d:50:0c:18:cc:fb:be:08:93:0e:44:38:27:f1:7c:74:6a:
b5:89:cf:0f:a8:f0:9e:ff:94:b1:0e:6e:e8:0c:ec:78:01:e5:
6e:1e:58:1e:91:47:3e:39:58:e6:84:57:a6:f3:c7:c4:c5:b2:
66:08:eb:d9:21:74:14:b3:d6:74:23:e0:e8:8e:cc:a8:f2:1a:
eb:a5:c4:67:e6:e3:9e:c6:0f:d4:fb:fd:31:e3:84:07:74:3b:
c2:97:61:86:9a:e6:2b:f4:d5:99:33:c1:e9:e9:66:52:d1:d4:
6c:8e:44:17:38:52:28:7f:1f:66:7e:61:fd:4a:c6:cf:07:cb:
99:94:1c:e6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:35:51 2026 by rpki-client