
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f99b7609-a255-427f-92d2-7e12449f3d9d.roa
File: f99b7609-a255-427f-92d2-7e12449f3d9d.roa (raw, json)
Hash identifier: J0fnP2CWQVf6h7f2Ro6xUWNyvIXG5D4+qbfsqsKmzng=
Subject key identifier: 9D:46:7C:02:28:D8:6F:27:99:21:A6:2D:AB:5E:6F:5D:38:49:FB:6B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0DF42454BAA00F15F2ADC84A6287D38EE3C23EE8
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f99b7609-a255-427f-92d2-7e12449f3d9d.roa
Signing time: Thu 26 Feb 2026 01:01:30 +0000
ROA not before: Thu 26 Feb 2026 01:01:30 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.34.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f4:24:54:ba:a0:0f:15:f2:ad:c8:4a:62:87:d3:8e:e3:c2:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 26 01:01:30 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=df1fac4c57aa9d86f81f58162f66315962d8cd2b6d7fbe08e762fd23247fe526, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:0f:83:9c:9a:db:51:22:07:14:15:33:c1:
69:ab:5d:65:5b:13:4c:d2:8b:a8:ba:51:0a:f3:44:
10:81:c3:b0:29:22:9c:bc:7a:52:31:1a:21:8c:1f:
dc:6b:e5:eb:38:fb:2a:ea:66:eb:11:7a:99:7e:f9:
23:24:1a:bf:c4:de:6b:dc:3c:d0:b1:25:bc:33:41:
03:d7:16:4f:e8:39:4a:ba:e1:00:89:2d:4f:9f:c3:
34:7f:a3:da:f2:f0:ed:62:64:9a:ec:13:f4:c1:1c:
73:e3:bb:a4:1f:0f:39:66:c5:89:00:fc:4f:45:b8:
70:96:34:79:9a:21:54:b3:3f:f5:6d:13:a4:e9:b7:
9a:52:eb:a5:98:ac:7b:18:db:b5:80:d2:07:98:44:
35:49:7e:1f:d7:1f:e9:a6:41:97:17:8d:6f:35:3d:
b2:06:d5:b1:51:7a:da:4c:93:86:a8:7a:c3:40:4e:
ed:f1:72:f2:cf:69:ac:ee:58:eb:bd:64:0d:32:4f:
f6:c9:09:02:0d:7f:3f:ce:b4:4a:b8:a5:52:ce:9d:
fd:c9:9c:4f:9e:bc:f7:dd:18:d4:37:1a:3f:1d:fc:
d1:b5:e1:57:60:51:32:03:ab:10:87:30:46:fd:d3:
5c:fb:54:bd:63:98:84:3c:fd:be:ad:ba:d2:89:30:
c9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:46:7C:02:28:D8:6F:27:99:21:A6:2D:AB:5E:6F:5D:38:49:FB:6B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f99b7609-a255-427f-92d2-7e12449f3d9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.34.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:dc:e3:ca:8f:75:d4:c2:63:6c:06:f9:d0:c4:6a:75:7d:86:
0e:b3:00:6c:cd:f7:67:78:4b:c5:62:81:3c:93:04:ff:ea:85:
24:29:e7:9d:29:0b:18:f7:4a:fd:7c:d9:fd:99:c9:1a:e5:ba:
f9:e7:34:21:cf:79:38:5d:1f:28:a1:86:89:04:d4:79:fe:40:
51:12:f7:d6:da:03:9c:43:44:4d:e7:4f:26:91:5c:e9:66:e4:
92:28:a2:fe:08:66:6e:72:ce:50:5b:60:e3:ff:64:53:df:10:
fc:86:5b:87:ce:ad:a6:f1:4b:ec:78:1a:5f:d6:9c:8c:55:49:
39:9b:4c:a1:07:d3:0c:7d:18:bc:95:b0:99:af:53:96:47:6d:
41:d8:fe:9a:24:52:f4:14:e6:0a:c0:0a:a6:e8:f7:04:a4:fe:
9e:00:ae:53:88:12:14:9d:bf:e8:a0:d3:5d:3b:6f:5c:27:18:
3e:8b:4b:fe:5a:52:e2:9f:c4:62:0b:0f:3f:3b:8d:2d:55:76:
ee:e5:e4:53:fb:08:76:41:55:bd:6a:8f:8b:01:ec:7b:1c:f1:
82:51:c9:32:06:12:fc:5a:bd:a8:98:7c:b8:ff:72:d0:d4:43:
fe:21:a2:87:80:f2:0e:3e:6d:cc:79:12:90:b7:cc:2a:ec:65:
c9:6c:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:03 2026 by rpki-client