
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
File: eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa (raw, json)
Hash identifier: +wGuSpwcEe5ItSpSKfdiFEPm2RYrdbsXDm3cZe8ixE8=
Subject key identifier: 9B:E4:C3:3F:77:7C:79:38:6F:70:7A:58:5F:1E:25:27:56:86:AA:C3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 65E06F84F10AACAE905D00BE4EA9CA98917F93C3
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
Signing time: Tue 10 Feb 2026 00:21:17 +0000
ROA not before: Tue 10 Feb 2026 00:21:17 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e0:6f:84:f1:0a:ac:ae:90:5d:00:be:4e:a9:ca:98:91:7f:93:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:21:17 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=dd8a7480b1913ebaf737818377d445e361e2691cc34a4ab0350b0189a7fa15fe, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5e:12:cc:d3:0e:61:9a:0e:f3:c7:7f:2f:3f:
ac:50:1b:9d:a4:ec:c0:42:c7:72:36:5c:f4:07:db:
3a:58:41:e0:35:e8:71:a7:8d:3c:dd:29:ab:06:ae:
15:6c:c4:07:0f:b0:3e:6d:b1:a7:2c:bf:07:9f:74:
d5:75:37:bf:ab:43:34:8f:08:cf:3a:84:af:37:2d:
fd:1a:79:4c:ec:e5:82:fe:65:da:30:c0:29:50:5b:
47:47:9f:df:1b:bc:c8:3b:8b:90:d0:52:c5:aa:f9:
5c:e8:dd:a6:9b:86:09:2f:33:e3:59:79:31:8e:f7:
da:cc:60:51:1d:d7:c2:f4:1e:f0:a2:da:c1:ac:04:
4d:9e:97:df:20:b5:47:4e:89:d5:ea:bd:3d:76:85:
3a:79:07:ac:2e:37:06:15:dd:a2:99:be:d1:9d:8e:
4a:d9:fb:2d:1e:98:14:52:a1:8f:51:ec:10:00:d2:
9d:44:11:03:92:c4:00:57:ce:60:72:24:12:27:03:
1e:c9:a2:87:5a:ec:06:f6:f8:88:0c:19:8a:9b:a2:
aa:58:47:c1:9f:c4:26:50:35:d9:aa:fe:ef:f5:9a:
66:f0:20:97:49:20:46:d1:5f:9c:21:3a:c8:f8:7e:
83:a2:58:8f:c8:01:22:9e:ea:34:fa:c4:09:c6:db:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:C3:3F:77:7C:79:38:6F:70:7A:58:5F:1E:25:27:56:86:AA:C3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/eaad6c7d-4b0b-4907-ac15-be008f56cea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.241.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:f1:e2:eb:f8:99:2a:42:0e:74:7c:e4:60:2c:c7:a3:18:e3:
ac:6b:cb:dd:7b:d1:eb:23:3b:82:c7:d6:28:4a:3f:cd:97:ec:
b6:e2:cb:7f:60:63:93:0f:f9:8b:e5:57:7e:28:2a:cc:45:dd:
f1:24:c5:bf:cc:e9:91:77:b4:f1:54:ba:c8:90:b0:2a:82:41:
ff:a0:c4:60:f2:58:35:62:8a:ab:93:bd:94:fb:6a:8e:a5:6f:
60:0e:56:69:d7:ef:0c:1f:80:41:a2:7c:cb:9e:69:8e:cb:83:
f0:62:d0:54:bd:f6:60:f7:c1:5b:6a:79:33:50:31:ad:e3:20:
3e:76:8f:ac:e8:4c:f6:d4:33:14:54:44:5f:ea:9f:d4:75:77:
e8:dd:c7:bc:3d:0a:bc:66:03:f1:45:15:6d:8d:c6:d3:d1:5a:
82:17:02:3a:65:41:a8:95:44:94:c4:90:9d:66:38:1e:1d:5c:
cf:e9:64:46:a8:66:4f:56:8e:03:c6:9d:db:4d:00:c6:7b:21:
74:95:b4:9f:16:bd:7d:71:32:c7:ec:ec:65:2a:ef:63:40:20:
8f:b9:db:1a:a3:01:54:e6:d1:0e:10:c4:fa:ed:91:9e:15:fe:
f1:38:a6:a5:67:bc:d6:07:a5:c2:0f:bb:34:8c:78:21:df:53:
5c:eb:02:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:08:17 2026 by rpki-client