
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1da3737-597d-48e1-b632-0f19dd97e2e2.roa
File: f1da3737-597d-48e1-b632-0f19dd97e2e2.roa (raw, json)
Hash identifier: PobD/tnbSLyt3GnWtkbkhixywnOt7NeWvGoUYUolHk8=
Subject key identifier: F6:EE:23:06:02:F3:18:06:D3:FD:50:D1:4F:63:2C:54:C0:14:4A:9F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1AC212150EC28542ED06106C4B377D9B46FBF88E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1da3737-597d-48e1-b632-0f19dd97e2e2.roa
Signing time: Wed 18 Feb 2026 00:11:11 +0000
ROA not before: Wed 18 Feb 2026 00:11:11 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 185.7.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:c2:12:15:0e:c2:85:42:ed:06:10:6c:4b:37:7d:9b:46:fb:f8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 18 00:11:11 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=7fee16451cd9dfe1dd802f587a6607cae6a2d312e8ac65b8035b47199ca7f723, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ba:2e:e2:23:c9:14:3e:b8:3e:65:9f:c2:9e:
b9:9a:f7:74:dc:38:c1:42:00:3f:a8:6b:cd:fe:42:
07:7a:a6:58:63:31:25:21:ec:60:59:bc:7d:b8:38:
3d:cb:9c:58:29:1f:08:4f:de:ed:d3:fc:5d:41:4d:
a0:5d:f4:27:cc:8e:e1:84:32:61:b4:62:14:e9:84:
16:81:0d:58:65:02:29:89:f1:60:fc:d3:9d:91:c4:
39:8a:3d:fe:90:29:a0:13:e2:89:3f:b3:ce:f0:28:
85:ff:13:94:df:1a:73:69:9a:67:63:cf:9c:cf:51:
0f:a5:7b:d3:53:4e:40:1b:8a:55:fa:90:89:4f:5b:
46:a0:35:b5:3a:99:5f:53:02:b2:d6:b4:3e:95:ad:
0e:75:50:26:e6:3a:76:c6:d4:4c:16:5d:41:eb:c4:
93:0e:6a:cc:4a:3d:8e:6d:58:c9:58:fd:67:6a:16:
a3:db:ea:c8:5c:68:7e:24:75:49:0e:3a:0f:c7:9c:
f3:79:fa:a9:30:b2:0c:c6:ea:4e:8f:26:e8:79:22:
c1:58:d0:32:7f:4d:30:be:aa:f9:06:a1:72:ad:cd:
71:4c:4a:ad:1c:f8:7d:8e:74:69:32:7d:74:7c:be:
75:40:02:f1:e2:7e:b4:de:64:69:d2:c6:06:d7:50:
dd:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:EE:23:06:02:F3:18:06:D3:FD:50:D1:4F:63:2C:54:C0:14:4A:9F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f1da3737-597d-48e1-b632-0f19dd97e2e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.12.0/23
Signature Algorithm: sha256WithRSAEncryption
85:01:e5:18:2e:cb:34:da:4c:fc:ee:dd:df:9d:b9:a9:47:cb:
74:5c:e8:91:8e:87:10:f7:5a:0e:a4:1c:b2:27:a8:e0:eb:b0:
8b:81:8b:37:59:e2:b6:3f:78:ae:e0:15:ce:18:5f:4e:c5:f8:
2d:37:dc:9e:bf:ca:df:11:d1:7b:12:e9:fb:b7:69:f8:a3:fe:
6a:3c:ac:c9:25:df:6e:92:49:53:bb:36:c8:3d:d9:76:a9:59:
fc:52:f3:98:41:c4:7c:74:c8:fa:9d:3c:2c:da:bb:0f:12:27:
23:0d:cf:08:c5:b1:a4:53:29:d8:6a:06:b5:fb:dd:1a:41:2a:
47:00:5b:5a:c8:72:3f:10:9a:2d:63:f0:00:bd:bd:18:2e:7a:
16:14:e7:6a:b2:b1:9c:a1:31:96:d1:c3:00:0e:63:2b:61:73:
aa:d7:b0:32:6c:fe:e8:ae:10:ee:86:05:bd:00:ea:7c:c2:df:
51:1d:65:b4:23:66:fa:0e:44:7c:08:bb:e5:70:d6:fb:7e:eb:
ed:3b:ae:90:a0:34:dd:83:0f:63:fc:c7:66:3f:b3:63:ac:35:
d1:b8:2b:67:68:12:1f:89:20:2d:29:25:95:e3:90:f2:9e:bd:
5d:e4:7b:01:00:8b:79:b0:f3:01:74:14:8a:e0:6d:72:06:76:
eb:15:2e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:10 2026 by rpki-client