
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa
File: e06824cb-2a7f-4608-9566-85c5d5041fb2.roa (raw, json)
Hash identifier: D1sbiEZ8gZ7KjX+FLLziRUpdtKLaCbLA8GmFbqpR874=
Subject key identifier: 48:0A:1B:28:E9:F8:D0:0A:B1:8F:19:42:00:4D:61:53:65:BD:AC:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 354ED38A30FD84954E898C045B2D849EF8A939E6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa
Signing time: Fri 13 Feb 2026 00:11:29 +0000
ROA not before: Fri 13 Feb 2026 00:11:29 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 15.128.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:4e:d3:8a:30:fd:84:95:4e:89:8c:04:5b:2d:84:9e:f8:a9:39:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:11:29 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=38f8a9d6650a82f513ad2d3bf7daf8bcd0948031c6bb8b0089f138e862feca54, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:98:5b:91:f3:8b:57:b6:a7:1b:69:7b:9b:06:
5f:e6:e0:0b:f8:57:2b:71:25:cd:bb:e3:ed:23:b8:
ab:24:5c:70:34:61:8d:ec:12:96:25:fa:0a:2b:91:
79:53:a4:73:59:82:9c:7a:10:28:2d:64:42:44:22:
29:85:e6:45:c2:fe:32:8c:e9:38:72:16:b3:24:be:
37:7a:7d:3f:97:80:3d:ca:e1:12:cf:d3:ad:56:19:
ca:e8:56:37:71:19:58:d7:bd:1c:aa:33:63:e2:61:
38:52:94:bc:3d:8d:35:49:43:85:fc:88:2e:8f:1e:
4b:bc:4d:73:a6:84:57:63:06:a5:d7:d6:40:bd:22:
9a:b4:ee:ef:b5:ec:d9:4d:74:76:f3:6b:07:c5:8f:
28:10:69:8b:68:73:38:82:05:4c:d6:b4:b3:45:82:
06:bc:47:f8:1d:96:86:d2:0b:83:f1:4d:a7:e3:23:
1e:ba:46:ce:f8:8e:fb:9d:54:64:6d:24:ef:c8:0a:
b6:d6:69:e5:42:f2:59:fe:89:91:93:1f:8b:28:4c:
53:57:ee:af:3c:03:26:c5:10:d4:9e:bc:93:f0:57:
18:2d:3b:da:0c:e0:e3:af:ec:4c:29:95:51:a3:59:
d8:46:14:95:94:ac:5a:f8:38:39:2c:40:a7:00:ee:
94:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0A:1B:28:E9:F8:D0:0A:B1:8F:19:42:00:4D:61:53:65:BD:AC:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e06824cb-2a7f-4608-9566-85c5d5041fb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
15.128.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9a:36:27:18:97:b5:c9:6a:9b:e1:0e:34:ad:dd:ba:cf:24:c1:
56:23:b6:ba:11:73:65:d9:6e:66:9f:7a:c8:af:a0:9d:a1:4e:
fc:bb:fa:43:a8:ab:d3:4a:25:f1:f4:2b:41:6b:ad:03:b8:e9:
06:04:5c:d9:2f:34:af:3a:d3:18:b6:21:76:8c:90:ed:6d:3e:
42:c4:62:c1:97:84:88:28:e6:40:41:9b:df:63:68:c1:8c:c9:
90:07:b2:08:37:40:7b:bb:0c:b1:ae:29:d8:54:50:c2:40:90:
50:2a:25:65:84:f3:39:10:96:cb:d0:56:0d:40:d1:96:49:1b:
ad:f6:1e:b8:72:3f:1f:3c:46:83:0e:13:cb:f5:7f:82:31:27:
2e:ff:2f:bd:23:26:44:8c:cd:fd:57:7a:7a:96:99:94:b0:6d:
b6:01:ab:aa:de:9c:15:16:a4:ac:d9:61:2e:dd:a8:c8:4f:68:
90:5e:d8:3a:45:37:f4:59:8b:99:cf:6c:79:31:65:41:eb:00:
da:c0:c0:eb:05:1c:68:27:58:41:8e:f4:39:af:3d:84:44:25:
84:61:c4:21:79:ab:27:8b:c2:db:13:72:b7:07:7b:a6:76:98:
31:21:e7:dd:fb:b1:3e:d4:fc:6e:4a:ab:2e:d0:c1:af:60:9c:
6d:45:e6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:25 2026 by rpki-client