
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
File: e8982554-3ba7-40dc-8512-4f2f354e3029.roa (raw, json)
Hash identifier: tnsdbIEn8XGNNcE7OgxVYVRe4rufrNG49YqakFnK1+Y=
Subject key identifier: C2:90:34:2B:82:6A:4E:DE:D3:44:AB:2A:A9:EC:ED:14:75:F8:C4:29
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A5FE5F0A651FA57AC678CEEA2667A7DA05980D1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
Signing time: Sat 14 Feb 2026 00:21:13 +0000
ROA not before: Sat 14 Feb 2026 00:21:13 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 50.19.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:5f:e5:f0:a6:51:fa:57:ac:67:8c:ee:a2:66:7a:7d:a0:59:80:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:21:13 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=5986f22c3ce6f089a8c264b7d728e32d4eacdada322a78d52384989a3e941009, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ab:08:54:a0:28:98:80:9e:0e:58:af:4d:fb:
64:a0:79:1a:02:b2:ee:f2:15:4d:e5:9b:79:ef:fb:
8b:3f:49:ca:f3:0f:4e:65:0f:2b:ba:e1:8e:64:39:
f4:d2:94:6d:7b:3a:1d:96:a9:4b:a5:f1:ea:c8:eb:
6b:f8:9d:db:be:95:75:ff:5c:4e:ba:27:a6:05:1b:
0e:37:f9:bb:e8:ef:22:e8:4f:5e:2a:cf:9a:90:66:
73:33:46:0c:82:3b:43:0d:32:cb:25:c4:61:a0:62:
92:f1:74:62:28:4b:b8:4f:4a:04:c1:2e:0d:e1:44:
5b:37:f1:1c:61:a1:3a:48:ee:4d:1e:a3:ef:a5:61:
d3:54:c6:b7:7d:27:bc:b5:bf:22:c7:e1:73:d9:15:
84:7c:e9:1a:da:57:f4:12:26:20:c2:42:73:b1:d8:
51:2f:e8:05:28:88:e9:cc:cc:f7:c5:02:79:02:6d:
c3:c3:56:35:38:48:e0:c3:71:0d:c6:bd:d0:cd:38:
5c:f2:4a:63:8e:38:a7:4c:cb:10:5d:6d:ec:40:b0:
2c:93:cd:dd:60:60:29:8d:3b:7e:62:ef:96:3c:4b:
c1:c2:8f:89:7a:ea:39:50:9f:65:bd:b0:40:36:ca:
69:d7:9f:0b:71:f2:ce:fd:c8:53:d9:22:54:d7:03:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:34:2B:82:6A:4E:DE:D3:44:AB:2A:A9:EC:ED:14:75:F8:C4:29
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e8982554-3ba7-40dc-8512-4f2f354e3029.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
50.19.0.0/16
Signature Algorithm: sha256WithRSAEncryption
c3:26:c4:5d:3a:2f:f9:49:27:71:3d:b6:6e:a0:77:1e:60:72:
34:62:08:4e:e0:7e:a4:77:3c:8a:df:dc:e6:53:e6:7e:67:2c:
82:cb:21:e1:dc:ed:8d:a0:16:0e:f0:36:ec:10:af:e7:73:c6:
b9:79:fd:2e:31:e4:9d:fb:11:b3:75:4d:82:ea:12:df:8f:43:
fa:81:0f:a4:b1:c5:ad:ce:16:e5:b3:39:9e:11:5a:0c:c3:79:
66:b6:2b:c9:7b:45:2d:0f:56:26:a0:22:f6:93:1d:c8:f8:7f:
61:48:aa:ea:0f:ec:c7:31:92:68:c7:8a:cf:0e:45:c4:43:d1:
a7:97:03:a8:c5:52:59:ed:62:b5:57:67:25:43:c6:ec:66:93:
1c:2a:78:71:34:a4:f3:7e:d6:4d:df:97:58:fd:df:b2:35:e9:
9f:9d:7b:20:8e:ec:31:65:ac:76:1e:43:b5:dc:0e:48:bd:42:
88:23:d8:92:e9:d2:52:7f:60:00:ad:83:1e:be:a6:c8:30:f7:
5f:6d:f7:cc:22:1e:75:c4:69:40:d8:ec:76:cb:97:1c:7f:41:
19:80:b5:f7:38:36:3d:87:e9:c6:67:55:54:8c:4e:43:cc:30:
1f:bc:14:9a:11:6e:ab:a9:59:57:39:96:aa:8a:6e:db:b0:73:
a7:af:20:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:29:11 2026 by rpki-client