
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
File: ec82d39f-e496-445b-b47e-f9450ba4b273.roa (raw, json)
Hash identifier: 0Wplo9J2ycHWbUl+cscGN/1SuOehnopY3bNeQUSb5oQ=
Subject key identifier: 84:9A:0B:03:AE:1F:3B:0A:1C:B5:6A:C3:A2:4A:0D:1A:C3:B4:C4:D3
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 244092EB7434D1327CB01D195DBE85ABBDF1062F
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
Signing time: Tue 10 Feb 2026 00:40:57 +0000
ROA not before: Tue 10 Feb 2026 00:40:57 +0000
ROA not after: Mon 11 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.93.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:40:92:eb:74:34:d1:32:7c:b0:1d:19:5d:be:85:ab:bd:f1:06:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 10 00:40:57 2026 GMT
Not After : May 11 23:59:59 2026 GMT
Subject: serialNumber=4a263f5c01c6a259375246af1480ea55af7cda5d7b41aca28e8e7fea375ecce9, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e5:3d:cb:7c:d8:bc:f5:dc:62:51:c3:cf:5c:
d4:4c:ce:cb:f4:64:02:b1:3f:f3:92:8d:71:c3:b1:
2f:cf:7a:0e:16:b0:95:d4:4b:39:61:11:9b:d0:9a:
c6:92:8f:05:b8:fc:5d:94:97:44:f5:c3:9d:42:03:
83:7c:be:e7:34:fd:d8:13:29:c3:72:f2:ca:12:0d:
ef:4c:a6:72:60:d7:66:1c:46:85:56:57:18:2f:97:
f6:f8:9b:be:cf:51:4f:ee:19:62:5a:93:06:40:81:
95:a0:4c:a9:a8:45:06:55:3b:5a:fc:29:fc:3a:f7:
ab:e6:5c:96:f4:fd:58:7d:14:d6:a7:8e:d7:f9:d7:
2a:06:3c:58:49:df:9c:56:06:81:39:57:5d:09:62:
df:10:14:99:ad:7e:da:4c:79:bd:45:bd:de:6e:22:
8f:25:1d:b6:7b:84:ac:2d:c3:99:c5:6b:a6:2f:f9:
37:25:9b:7d:b7:85:ca:9d:f7:5a:d7:b9:fa:65:7f:
93:89:6b:a0:46:b1:7b:69:83:0e:92:9b:35:3a:50:
87:10:c9:9d:60:e6:ef:19:4a:42:ed:45:ac:0a:d4:
33:5d:d4:48:03:82:06:74:37:08:6d:db:eb:08:40:
75:aa:0a:10:aa:76:4b:7d:2a:28:63:e7:cb:48:01:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:0B:03:AE:1F:3B:0A:1C:B5:6A:C3:A2:4A:0D:1A:C3:B4:C4:D3
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ec82d39f-e496-445b-b47e-f9450ba4b273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.93.0.0/16
Signature Algorithm: sha256WithRSAEncryption
bd:0c:40:1f:34:c6:59:7e:4c:bf:9a:35:25:6e:5f:1b:77:fd:
52:ef:aa:1c:f8:dc:b9:11:d4:84:e3:7e:ea:fa:13:69:79:38:
86:72:95:49:11:45:7a:74:8b:89:c5:31:87:55:31:3e:a2:15:
14:e2:19:4a:2d:d7:a2:f2:01:43:35:dd:ec:fa:cb:35:50:01:
52:38:95:d5:c3:09:a1:5d:ac:bb:9c:f2:e9:96:83:c6:40:03:
b4:01:93:34:87:10:27:d9:b3:59:07:fa:2e:34:75:ba:3e:3e:
42:a6:64:b6:3f:68:f2:de:d3:72:0d:d2:bb:85:61:67:0e:5a:
b2:15:2e:72:0b:28:ec:3e:94:f1:5d:f4:61:57:dd:51:27:2c:
1d:8b:8a:47:49:c0:71:e9:ab:f1:49:4e:b2:8a:c8:c5:5f:1d:
43:24:07:14:3b:d5:0e:7f:0e:81:a9:1e:e0:b5:f3:ad:6b:ac:
56:cb:29:b1:7f:c1:d6:b8:ec:40:e8:30:c0:42:0d:e7:fa:06:
71:9e:d0:c4:af:a6:3d:9a:4e:a0:fc:c6:ea:79:86:81:7a:3d:
ab:75:0b:37:1b:e7:1d:1b:8f:a3:c9:34:f7:fe:ab:02:05:a5:
20:75:1d:a4:e2:37:60:84:c9:64:1f:95:35:e8:ad:36:95:e1:
64:4b:60:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:55:34 2026 by rpki-client