
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55609fa-26b2-4a54-aa19-80da119df028.roa
File: f55609fa-26b2-4a54-aa19-80da119df028.roa (raw, json)
Hash identifier: ppEZeiCnKSUGdpCGPi1kXXeXMEtX6p5bqo/HNgmZnXU=
Subject key identifier: 44:3A:10:5A:BE:95:CA:C0:F7:65:21:54:C1:9E:5C:4D:5E:CD:3B:3E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0774BD8143065AD42054B2F1E535ED7B9E649F04
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55609fa-26b2-4a54-aa19-80da119df028.roa
Signing time: Wed 25 Feb 2026 02:10:37 +0000
ROA not before: Wed 25 Feb 2026 02:10:37 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1f2c:c000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:74:bd:81:43:06:5a:d4:20:54:b2:f1:e5:35:ed:7b:9e:64:9f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 02:10:37 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=65f211164efdd984d468d1edc8ab748005542f1b50ee44ebcd4ed0c1303a63d4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:31:a6:13:07:36:01:dc:94:41:c9:bc:95:9b:
27:a2:f8:08:74:19:a4:60:54:54:0f:25:1f:0d:38:
50:44:e6:55:f7:4a:98:2f:7e:77:ab:a9:d7:26:01:
83:11:94:c9:7e:c4:15:73:e5:c7:92:be:8f:f0:a9:
33:97:43:5b:21:56:37:e5:f8:53:d8:08:ef:2c:cf:
99:cd:1d:4a:f7:a8:48:82:e0:90:47:1b:9b:e6:d7:
69:a6:81:77:59:cf:be:6d:9c:40:1a:e3:c9:7b:1b:
f9:53:32:ba:89:0a:82:c7:2f:24:70:90:9c:67:df:
e5:85:6c:eb:83:ac:29:ba:a6:51:80:cc:0f:d0:85:
65:34:85:3c:96:14:52:9d:4b:88:40:e6:29:37:9d:
d8:f7:12:9e:03:64:a9:ea:be:b7:fb:3d:64:2b:a6:
e8:40:85:51:88:01:02:a9:4d:70:b6:33:23:64:7f:
b0:fd:25:67:33:a1:28:70:31:8c:93:4f:89:9c:d9:
72:57:2a:41:9a:1b:e4:38:be:af:a3:d4:81:4e:dd:
35:af:b1:4a:0e:c8:59:d4:f3:de:5b:31:35:a3:78:
80:a2:20:26:c2:bb:57:79:38:78:68:88:ba:9f:80:
74:e5:e4:ef:2c:e0:c8:b9:a0:57:03:14:c0:cd:82:
4c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3A:10:5A:BE:95:CA:C0:F7:65:21:54:C1:9E:5C:4D:5E:CD:3B:3E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f55609fa-26b2-4a54-aa19-80da119df028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f2c:c000::/36
Signature Algorithm: sha256WithRSAEncryption
b7:3f:88:b4:f2:ad:43:2b:f0:aa:8f:52:c1:07:95:43:24:3b:
d0:93:2a:a8:71:d3:4e:52:66:35:c0:e3:fc:1d:19:76:a2:54:
39:c1:60:7a:40:58:d8:e6:c5:a1:17:ad:fa:4e:36:85:3b:cd:
5c:ca:67:86:21:27:f6:94:68:8a:bf:41:e3:dc:f6:1a:71:23:
bb:0e:00:b3:69:a9:4c:fb:8b:98:d4:fe:3d:de:cc:14:d4:5a:
51:02:fa:81:b4:bd:62:04:76:99:c6:35:9f:20:6b:49:a7:52:
de:cb:95:52:db:d3:fa:49:7e:fe:06:0e:2d:b5:8a:0e:ee:c5:
64:86:d6:ca:24:9e:3b:b6:85:c9:d9:e1:a8:7d:96:16:7a:54:
1d:bd:97:2a:2c:64:ca:bc:1b:1c:ed:d0:3f:67:ae:68:59:3e:
bc:26:4d:f6:dc:4d:0f:d3:59:71:98:3a:bf:7e:43:fa:c3:ce:
f9:5e:66:47:77:cd:60:79:7d:a9:be:06:41:b5:15:06:9d:4b:
91:8b:5a:a3:ad:c8:c9:ae:e6:b5:cc:17:ca:45:48:1b:e7:52:
35:8c:34:f8:ee:1a:51:39:41:8a:f5:fd:3f:fa:5f:e6:d0:dc:
33:9d:c4:85:52:85:ca:c7:a1:e7:7c:66:c5:65:ed:35:c2:af:
6b:e1:ed:c9
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:16:14 2026 by rpki-client