
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa
File: c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa (raw, json)
Hash identifier: h94jGkRfPDmi9AuE8HWewi6dfCsawLgH5VkEYgs+3dA=
Subject key identifier: 73:53:98:05:9A:3C:69:C5:EB:90:8C:AE:5A:3B:FA:A9:09:01:64:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 45318226586FE89DFEDE3B32014D6CE0627CB938
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa
Signing time: Wed 25 Feb 2026 00:30:45 +0000
ROA not before: Wed 25 Feb 2026 00:30:45 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1fff:a400::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:31:82:26:58:6f:e8:9d:fe:de:3b:32:01:4d:6c:e0:62:7c:b9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 00:30:45 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=3bc21385fa6082273fb0986903525686b25f3f1dec54ba9d929f2cd745fad752, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:f5:17:52:61:7d:35:d1:6a:db:36:6a:a0:
40:cd:16:47:de:0a:15:21:a1:25:53:56:10:75:e2:
6e:8b:4c:01:be:bf:f1:83:39:c8:57:da:2d:ab:f5:
3e:14:06:c5:83:2c:98:0a:5c:d3:f5:14:fd:ec:02:
79:40:da:c9:12:77:a1:18:a3:04:db:a4:45:e3:d4:
0a:51:7b:97:52:29:e2:e8:13:29:68:2d:8c:eb:58:
60:05:3d:e9:38:fa:6e:5d:d8:44:9f:1c:49:89:2b:
db:5a:d5:ff:66:d7:f9:a3:67:3f:1e:49:15:24:ba:
41:bb:93:8f:56:3c:31:87:fd:a7:dc:3a:ce:0f:d9:
49:f1:86:fc:f8:e8:ba:1d:c9:ee:d3:5e:dd:d3:3d:
c5:6b:ba:06:cc:37:8a:44:0f:21:70:03:ee:0b:32:
1e:fa:cb:ea:0e:db:1e:91:4d:9d:3c:82:e8:89:c4:
e3:49:1f:90:5e:60:da:e5:ea:1c:4f:72:e0:d0:53:
7d:90:8e:0e:5e:06:bb:24:57:a8:82:f5:c8:4f:17:
24:38:72:3b:b9:d1:65:5c:f6:c8:1d:d6:c7:da:b2:
94:9a:7d:c8:43:e7:54:ec:db:1a:2f:3f:98:25:03:
f8:08:e6:4c:1b:f6:d3:13:cf:83:18:93:c6:13:46:
31:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:53:98:05:9A:3C:69:C5:EB:90:8C:AE:5A:3B:FA:A9:09:01:64:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c810fdb7-9ce3-489a-afcf-63f1e1f4b69f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1fff:a400::/40
Signature Algorithm: sha256WithRSAEncryption
64:6f:78:94:f5:4e:2c:42:3d:20:62:72:1f:fe:86:9e:4a:ba:
e6:53:47:c0:8a:d1:6b:1e:fa:0c:95:c2:00:dd:bf:39:f3:49:
47:23:6d:d0:a8:de:62:4f:eb:37:bf:96:04:c5:53:fe:6f:9e:
b9:7f:c0:fe:bf:f2:00:4a:3b:e8:c7:cd:7a:aa:79:2b:25:5b:
5f:49:94:91:1f:81:99:76:14:a9:2b:9a:18:ca:4a:d2:ae:51:
8f:4d:4f:48:88:9f:82:bd:bd:03:8d:8a:44:cf:1f:7b:11:cb:
85:bf:c6:15:11:85:99:df:e4:2a:6e:bf:ce:aa:4d:c0:2e:d1:
2f:b9:b1:6b:8f:71:b8:bd:5c:7b:71:c4:6b:dd:dd:17:33:16:
e6:db:56:1b:61:a0:ba:2c:16:1b:01:22:26:c1:da:3e:4e:a2:
7d:d8:64:87:5a:86:50:ce:75:f1:3a:ed:f7:b9:14:1b:f3:f3:
e5:1e:2e:f4:25:d7:41:9f:0f:d9:ce:86:03:b6:bf:b5:67:60:
ab:d4:af:2b:96:bc:5f:b0:33:51:08:11:a8:9c:b3:c9:ca:4a:
88:47:51:2c:f1:56:22:ed:60:61:a4:d1:8d:30:58:86:95:74:
25:db:fc:f0:61:30:9e:1d:d9:3a:68:f7:89:e8:c4:38:c3:4b:
9a:df:f8:1e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:38 2026 by rpki-client