
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb437e3f-3f3f-4e4a-a19b-54ea28d046df.roa
File: fb437e3f-3f3f-4e4a-a19b-54ea28d046df.roa (raw, json)
Hash identifier: G7tQLo/qfEoVmMRjE+fXyqMeJ2OFmbKmEAVfHfQC1TA=
Subject key identifier: 7F:06:D3:71:A3:86:CD:19:A3:30:14:CE:26:7C:E0:40:27:7D:53:01
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 455EC37687D7018713E45D9982745DA63BF50779
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb437e3f-3f3f-4e4a-a19b-54ea28d046df.roa
Signing time: Wed 25 Feb 2026 00:50:14 +0000
ROA not before: Wed 25 Feb 2026 00:50:14 +0000
ROA not after: Tue 26 May 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:1f12::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5e:c3:76:87:d7:01:87:13:e4:5d:99:82:74:5d:a6:3b:f5:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 25 00:50:14 2026 GMT
Not After : May 26 23:59:59 2026 GMT
Subject: serialNumber=ba4c104d99de05557c426ceb96b0f47de896e6348e548992f4edbb634d485b20, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6e:09:3d:5e:4c:f0:20:07:37:64:17:b1:5a:
48:4d:b9:be:80:ec:8d:1e:68:0e:c3:35:48:0c:45:
59:ae:e6:be:ac:ab:d9:6c:f7:71:4a:92:8c:7f:be:
94:58:5c:38:53:4f:23:0f:04:ad:ce:80:3e:a9:47:
46:a2:26:92:06:51:b3:56:21:41:d0:59:4e:43:45:
94:d5:80:e9:45:d1:a5:6d:05:22:8e:68:2b:f5:03:
ae:71:8e:6d:17:d4:da:03:c5:21:be:3a:f6:8a:16:
91:cf:d9:95:70:8d:7c:a5:f3:fe:99:24:42:91:a9:
91:3d:a5:b3:f3:fd:3c:b1:c9:52:fb:fc:a1:9f:09:
fe:61:54:4c:7f:88:0f:c5:5c:56:72:f7:40:e1:49:
e5:b8:df:35:c3:8d:ec:d8:cb:b6:b2:a6:93:1a:ef:
cc:e1:dd:0e:28:7a:49:ab:ee:f3:d5:c3:7c:93:53:
4d:f2:f4:b0:cc:30:56:c5:aa:ff:86:72:94:35:e3:
1c:52:27:23:d4:04:78:4e:3d:d0:fa:93:c8:7e:11:
0e:ef:f9:43:c2:56:8b:26:14:fa:87:fc:86:63:e5:
7d:13:0e:5b:46:62:dd:5d:99:02:b3:73:07:b9:7b:
6e:d3:e8:93:ea:0f:b9:50:f8:cd:45:9a:b5:10:c0:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:06:D3:71:A3:86:CD:19:A3:30:14:CE:26:7C:E0:40:27:7D:53:01
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fb437e3f-3f3f-4e4a-a19b-54ea28d046df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f12::/38
Signature Algorithm: sha256WithRSAEncryption
2a:7b:af:59:86:10:ea:fa:a1:27:69:4d:07:eb:c0:bb:87:34:
d6:85:d1:cf:1e:ab:fd:e5:02:8a:42:9b:e4:b5:c4:6a:9b:31:
77:80:c0:7d:65:89:d9:a4:ec:0f:ca:57:e4:dd:c6:6d:69:35:
75:03:df:a9:07:3b:ff:f8:fa:8c:e3:80:f4:99:b2:4c:1e:9b:
5a:ff:75:64:7e:d2:54:a5:50:38:7a:bc:26:3d:be:42:83:be:
01:e7:2b:ed:06:fc:d9:ac:6f:74:52:97:6f:4a:7e:3b:f2:ae:
df:c5:2c:1c:6a:40:2f:4a:12:b5:bd:7c:6f:ee:17:6e:1f:8a:
96:45:d1:9d:9e:fd:81:f2:d3:98:06:3b:a1:70:33:28:8d:98:
43:90:c5:f7:16:ad:eb:5f:bc:1c:5f:f9:f6:c6:ea:d8:7c:fe:
1b:27:8a:8e:0a:51:0f:a9:55:54:0e:c6:10:81:73:18:a6:13:
7f:cc:fd:c6:33:67:40:38:bb:23:10:4f:5c:f0:bd:c4:8f:99:
71:b1:4a:02:ef:57:8c:0b:3c:b6:99:ef:d4:08:3b:3b:31:4e:
fe:36:32:d3:c1:db:a1:8a:65:99:13:76:17:7f:30:7e:9e:95:
b3:eb:be:c2:9c:0b:23:40:8b:a0:46:05:f8:83:f4:26:46:78:
89:2d:29:4e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:05:18 2026 by rpki-client