
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa
File: d91181aa-a710-47af-96f6-c6d4bd7176fe.roa (raw, json)
Hash identifier: DlQf5fO9xSLvtXMX2t1f93vaDo87wqs+DuzMAzBWjmc=
Subject key identifier: AC:3C:0E:E3:40:69:AC:B0:1A:B1:64:1A:58:44:E2:8B:B8:77:39:22
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 48A72559A6633E0DA5E948506FEBF852A1D7724B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa
Signing time: Fri 06 Feb 2026 00:00:06 +0000
ROA not before: Fri 06 Feb 2026 00:00:06 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 66.156.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a7:25:59:a6:63:3e:0d:a5:e9:48:50:6f:eb:f8:52:a1:d7:72:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 6 00:00:06 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=4f7a71cdfb61dda3d4f99bb45af7827e5ed95f31f0135e21dfbfab2e3420b024, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d2:5e:af:75:10:4a:3c:29:70:1e:a0:28:cd:
9e:19:4f:97:3b:23:47:76:80:92:65:b9:e7:06:e4:
ed:f9:bb:ea:84:33:7d:3d:2d:d7:0b:df:56:92:3e:
80:1a:df:5e:6b:93:16:f9:55:64:21:81:b2:b2:bc:
33:f5:72:8c:f2:08:84:9c:28:b9:cd:28:3e:e3:43:
f8:89:53:72:58:da:aa:97:bb:1d:5c:3f:38:0e:ff:
ba:40:e0:7b:ea:c7:64:97:db:aa:1b:38:27:46:ee:
dd:7b:72:61:3e:40:5e:46:34:47:a5:cc:86:2b:00:
63:17:92:73:13:2f:43:1a:a0:ff:9e:1c:2b:53:92:
47:d8:a7:48:05:44:49:a2:10:c7:44:78:ad:42:ed:
c1:a3:74:c9:55:2d:af:ad:84:29:00:30:a5:1d:ec:
11:39:83:10:2a:80:c9:e8:87:1f:6f:47:73:ca:1e:
cb:6f:b4:4e:6f:82:24:ca:33:02:b2:09:b0:54:32:
d3:57:5b:15:c1:9b:09:48:f4:02:0d:3d:fa:53:b0:
4d:9f:3c:1c:d4:3b:5c:33:ef:8e:7b:ec:6c:b1:fd:
68:49:32:92:cc:46:6c:06:ee:e3:88:97:6a:b8:76:
4a:dc:d9:b7:b7:69:b9:91:0e:12:fe:80:dd:0c:f3:
1d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3C:0E:E3:40:69:AC:B0:1A:B1:64:1A:58:44:E2:8B:B8:77:39:22
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d91181aa-a710-47af-96f6-c6d4bd7176fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.156.0.0/16
Signature Algorithm: sha256WithRSAEncryption
05:90:7c:f7:7a:13:a2:cd:d8:b8:43:1f:87:b1:a1:f3:6a:48:
1c:9c:a8:8e:8b:3a:44:64:22:01:57:c0:89:84:e8:ca:f5:ed:
e5:fe:79:4d:b2:fd:aa:d2:4d:ca:78:d5:b6:cb:dd:02:cc:e9:
87:28:52:a3:e9:ea:74:69:9d:c3:f6:2c:e5:5e:0f:f1:15:3d:
84:b8:5d:78:ee:10:55:0e:e7:56:c1:7b:3a:e2:ac:a6:ff:b8:
47:5f:77:5e:ed:bf:82:68:5f:a8:6e:f2:01:b3:0c:16:d8:f0:
98:56:56:35:f1:e5:3a:f8:0f:fa:71:48:53:c8:79:6d:16:40:
83:c8:3b:2b:71:ea:e5:10:c4:87:35:e3:fa:24:b3:c9:9b:97:
1b:2c:10:07:c3:0e:d2:31:78:65:52:ad:60:75:72:09:fe:b6:
71:ee:81:e2:88:fb:a5:d0:94:2a:7e:71:8a:ef:b0:38:06:1c:
09:03:44:9e:75:61:bc:41:d8:b4:97:28:b4:a3:62:68:a4:3b:
58:37:97:75:34:c9:32:d5:52:36:25:f4:b2:45:26:86:03:38:
9e:5a:ba:1a:40:68:98:dc:4e:08:c8:dd:3f:3d:dd:d8:80:f0:
02:92:a0:32:2d:00:5a:89:dd:96:a4:81:f2:85:d0:ae:0a:9e:
e4:16:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:24 2026 by rpki-client