
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f51838-30d7-4d1c-860c-6e6007978e48.roa
File: d9f51838-30d7-4d1c-860c-6e6007978e48.roa (raw, json)
Hash identifier: kE3XaSGyVo9SV+P+pp6lBB03Ske07W1fFvwUf2x1Le0=
Subject key identifier: 69:A4:38:A0:77:79:49:26:D8:DF:4D:FC:D3:FE:FE:1C:7A:27:35:F6
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 02C3A3AD0B5B6FE89FA1A9453D97BCF3BBF443F8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f51838-30d7-4d1c-860c-6e6007978e48.roa
Signing time: Wed 25 Feb 2026 01:01:24 +0000
ROA not before: Wed 25 Feb 2026 01:01:24 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f19:4000::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:c3:a3:ad:0b:5b:6f:e8:9f:a1:a9:45:3d:97:bc:f3:bb:f4:43:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 01:01:24 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=798ca6e84b655bec5aef40b7043c64c5850ff241a909b428cd12d9549fb3e048, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:3d:00:15:e5:0b:fe:6b:3b:d1:03:50:75:
99:20:a3:99:62:5b:87:bd:ca:08:33:03:52:f1:e8:
24:f0:15:76:36:7a:47:b2:8c:56:1e:b2:b8:3c:aa:
f2:ab:88:4c:ac:50:2c:42:de:a5:f2:84:82:00:13:
92:4e:25:b9:82:e2:94:8d:ca:27:29:34:fd:44:3d:
b0:08:89:e3:b5:b1:84:e9:b0:23:ed:f2:ca:25:67:
1a:80:b7:8c:1f:94:09:9b:97:99:2b:58:a7:d2:bd:
f0:7c:ba:e4:43:09:85:b3:9d:2e:0d:ab:68:ab:b5:
a0:f5:fb:9b:87:ef:40:3a:f8:46:93:3b:8f:84:6b:
19:af:f7:f8:ab:e2:07:3a:0d:64:27:e9:a1:a3:76:
6a:85:d0:45:57:46:3f:21:bf:d0:df:ab:0e:fa:d5:
15:14:dc:71:9a:13:1b:9c:9f:7a:c3:c8:16:67:96:
7f:7a:33:a3:94:37:f0:78:42:38:b3:67:89:e8:3f:
4f:69:11:8f:55:ec:a3:dd:79:5a:99:2d:a8:2d:1d:
d8:23:97:76:d5:8b:a4:8e:cc:66:81:cd:41:94:04:
77:92:8e:c0:54:ad:c1:a8:c4:20:25:98:38:3e:a6:
e5:43:36:66:16:94:0b:31:5e:2e:ac:3b:83:77:27:
34:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:38:A0:77:79:49:26:D8:DF:4D:FC:D3:FE:FE:1C:7A:27:35:F6
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/d9f51838-30d7-4d1c-860c-6e6007978e48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f19:4000::/37
Signature Algorithm: sha256WithRSAEncryption
88:9c:d3:a0:bd:6b:be:ee:e6:a9:d1:02:da:be:df:fa:ad:ac:
a1:53:88:69:19:01:4d:0a:a7:ce:df:9e:d4:ff:16:50:ce:57:
1a:59:fe:be:2f:53:f2:36:8e:6f:f8:98:cc:ff:d2:a3:7f:cd:
f9:62:f7:a7:df:92:1b:b9:ba:6c:3b:0b:94:fe:8d:7c:81:5e:
6f:73:55:3d:f7:39:05:dc:be:a6:cf:03:12:fb:a7:3e:d2:2e:
6f:29:b9:e3:2d:03:75:df:f1:16:9d:3b:16:c7:45:8d:00:fb:
a0:29:16:9d:f3:b4:a1:d5:42:9e:f1:8c:82:6d:09:37:4c:68:
da:50:2f:a6:1d:a9:7c:f8:6a:ce:67:8c:72:ad:f6:20:7b:5f:
69:70:1b:44:c5:63:e0:a0:9b:78:ab:c0:f7:15:5b:bf:7a:2a:
fd:3c:a9:02:76:c0:a8:b2:18:ce:76:22:2a:f2:32:5d:58:55:
cf:e7:f3:b4:bd:e7:7a:75:30:2e:07:f3:67:16:7f:ab:52:28:
91:a6:16:f6:0e:e9:79:6b:b1:64:fc:57:61:69:2f:c7:bf:09:
bf:b2:c1:81:52:56:53:e0:ae:09:18:23:fb:4b:21:da:0f:2f:
09:61:b8:3c:d4:dc:ac:d1:c0:3d:22:89:26:14:f0:86:71:87:
96:c9:55:7a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:41 2026 by rpki-client