
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de392b28-93ff-4f43-b542-a0fdae0876f8.roa
File: de392b28-93ff-4f43-b542-a0fdae0876f8.roa (raw, json)
Hash identifier: oM6l2jifjMYevtH9qEX16eHGd6PLoDaquS/8pcpWRk8=
Subject key identifier: 0E:C5:E6:AB:28:40:CB:AA:A8:D2:7B:DF:D2:13:AF:E9:37:4C:C5:D0
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3723DE5C86D203425ABB1F03C093606A29303E36
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de392b28-93ff-4f43-b542-a0fdae0876f8.roa
Signing time: Fri 13 Feb 2026 01:00:56 +0000
ROA not before: Fri 13 Feb 2026 01:00:56 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:23:de:5c:86:d2:03:42:5a:bb:1f:03:c0:93:60:6a:29:30:3e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 01:00:56 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=ae2cbaecd7c48d45733be03e425bd5e87306360dd0f4c7d27451f2d4d024abff, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:dd:6d:79:01:68:fb:b3:87:58:a7:02:12:
8f:a6:14:63:4e:d3:15:19:96:93:b7:f9:6a:1b:f1:
b0:dd:12:b8:e5:ea:87:5b:7b:99:fb:c4:d7:a0:36:
23:73:ed:a2:63:4e:fc:af:79:16:3b:62:a4:40:7a:
65:1c:41:b5:7e:81:b0:66:a9:ff:00:e5:d5:2e:e1:
57:d0:15:52:27:ed:d0:d0:8f:c3:cf:04:cd:0c:28:
0b:5d:00:81:a9:4f:8b:97:49:9e:95:0e:ed:22:29:
50:1f:17:d1:8a:a3:67:57:ee:e3:e0:30:a0:f7:b7:
80:ae:92:a9:d6:d8:d9:ed:d7:98:4a:2d:17:bb:9d:
c8:9c:f9:1e:7e:6a:84:38:b2:2b:45:ef:53:57:4a:
83:ec:c6:5c:5e:c0:47:0b:df:41:18:0f:21:6e:aa:
21:a2:5e:79:2e:e9:2e:89:fe:e7:24:a7:06:fb:61:
e1:bc:5d:17:6d:ed:26:93:80:27:ac:98:f8:06:76:
5b:45:96:e0:fb:86:f8:d4:6b:71:75:77:c5:41:cf:
e0:88:71:b4:51:da:4e:a6:5a:b9:9d:70:d3:84:03:
da:aa:e0:1b:8a:e1:ea:ac:78:0e:85:6e:e6:a4:50:
d7:24:34:2d:ba:ee:b3:c7:21:b2:70:e3:00:94:f9:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C5:E6:AB:28:40:CB:AA:A8:D2:7B:DF:D2:13:AF:E9:37:4C:C5:D0
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/de392b28-93ff-4f43-b542-a0fdae0876f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.83.254.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2f:58:a5:07:a9:87:2b:67:65:38:70:0d:d5:20:da:39:20:
2f:c1:b9:f8:1a:fe:e8:62:a8:b7:f5:5f:c9:6f:f1:a0:6b:df:
4d:af:5a:23:92:c6:b4:34:98:d6:a1:f0:0c:e9:04:d4:f3:76:
99:29:1a:e6:88:31:a2:80:bc:9e:23:30:78:4f:c6:52:72:ae:
94:1e:e9:b6:c7:16:c5:19:d9:53:2f:76:a5:12:0e:7c:6e:7c:
e1:3d:c7:06:32:38:b3:29:6d:ab:a2:ed:3b:6b:dc:3d:9b:1e:
40:1d:ed:a0:2f:40:c4:47:41:77:59:60:43:5c:26:04:ef:33:
ea:21:24:0b:51:7c:2d:32:62:3d:20:33:4d:ca:e6:ad:1b:c8:
46:8e:ac:2b:f3:0c:f7:47:23:bc:cd:91:7e:39:8e:da:a1:7a:
b3:07:fe:7a:d1:cf:db:98:eb:0e:b3:db:eb:90:4b:06:d9:ab:
83:60:4d:7f:8d:fb:08:8f:7d:ed:58:ab:78:02:19:14:f7:42:
f8:fe:ef:a6:f4:2a:81:c3:14:ce:84:73:dc:ba:7a:72:98:cf:
9a:e2:23:66:48:43:fc:30:d0:34:56:76:46:3d:15:bf:13:2a:
a5:c0:63:db:f7:3f:a6:39:73:3b:23:19:74:1a:99:3a:d1:79:
88:c3:a0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:24:43 2026 by rpki-client