
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815964ed-9722-4cc0-98c4-f1d0eb521f6f.roa
File: 815964ed-9722-4cc0-98c4-f1d0eb521f6f.roa (raw, json)
Hash identifier: 6eN2fjbDTmF3svvSBbjhkX4s5Oo7rwMtG/EJSDt6ZGQ=
Subject key identifier: 93:8D:4D:AD:7B:11:87:20:3E:2C:00:F7:9B:5D:C9:4E:88:25:BD:BE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 124B45953B00D901F654C98FDE3A947253A81508
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815964ed-9722-4cc0-98c4-f1d0eb521f6f.roa
Signing time: Sun 08 Feb 2026 00:51:06 +0000
ROA not before: Sun 08 Feb 2026 00:51:06 +0000
ROA not after: Sat 09 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 54.102.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:4b:45:95:3b:00:d9:01:f6:54:c9:8f:de:3a:94:72:53:a8:15:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 8 00:51:06 2026 GMT
Not After : May 9 23:59:59 2026 GMT
Subject: serialNumber=c2a58485d69aaa89195bfd1f4d4818bcb28da348c6a4cf374be821485adb7701, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:24:41:34:14:7a:94:15:9d:88:6b:59:09:
73:cb:e9:f5:51:93:d5:e0:b5:17:da:9f:db:9c:18:
8c:e8:fa:3f:31:07:62:e1:20:b3:38:dc:d7:8d:8e:
bf:89:b1:16:7a:43:aa:23:78:99:47:94:78:81:47:
cc:66:55:cf:55:57:4a:9e:f4:24:4d:b0:d4:6a:81:
da:d7:53:56:bb:bf:35:cf:46:5d:c4:69:b7:0b:58:
2f:0d:4f:93:89:cf:4b:87:5e:55:27:ec:1a:94:4c:
1d:ff:ae:8e:5a:8a:78:8b:cc:f8:99:cd:9a:4b:a7:
45:46:8a:ff:cc:17:0c:5d:93:00:43:98:d2:da:fe:
4f:e1:0f:66:5c:2e:2a:22:ff:3f:1d:45:f0:ba:da:
65:2a:b2:eb:d4:6c:fa:13:f9:b7:87:29:96:bb:ff:
ac:d6:6e:16:bb:43:37:a4:7e:1e:1c:88:45:bb:40:
79:5e:a3:9a:a9:d6:6e:4a:13:e7:56:86:31:1f:20:
1e:22:c9:5d:fa:9c:cb:33:29:09:4b:c4:8b:c4:34:
b1:c6:be:2b:b6:ec:a0:2f:81:51:6a:b5:b1:3f:91:
69:17:23:3b:3b:28:43:20:57:d2:ba:a8:e8:b7:4f:
e5:4e:2e:9a:08:86:17:0d:e3:3b:3c:eb:fb:78:46:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8D:4D:AD:7B:11:87:20:3E:2C:00:F7:9B:5D:C9:4E:88:25:BD:BE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/815964ed-9722-4cc0-98c4-f1d0eb521f6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
46:0f:68:8f:62:eb:fd:51:14:c3:f3:98:7b:50:3c:4e:83:10:
d0:df:ea:b9:85:2c:de:05:18:a4:dd:8d:c3:50:6f:35:0b:9a:
f5:a3:f7:fe:3d:52:4f:62:3a:a3:e5:b3:fa:83:8e:a5:d6:c3:
59:fa:14:91:0d:01:01:6d:24:96:70:08:b0:01:54:a0:43:45:
43:15:61:50:1e:03:34:c6:b6:ed:fe:92:e6:06:17:54:01:96:
37:93:cf:83:aa:07:7c:7c:9c:cb:82:40:a3:67:c9:22:e4:8e:
c5:f2:68:85:96:68:d9:7f:2c:63:65:a0:bd:bb:71:e0:66:05:
c0:03:12:ea:d4:7c:40:8d:ce:8e:14:da:03:be:98:d1:c3:5b:
6c:65:96:66:97:ba:3b:88:68:c8:8d:74:98:43:b0:10:73:aa:
cb:e2:57:fc:47:ec:ab:10:0c:6c:43:7e:81:19:26:34:8a:d3:
08:43:1d:39:36:aa:a4:09:d7:1b:5b:1f:44:16:c6:dc:59:6d:
11:3d:b9:8d:7e:e1:5e:f8:6a:d6:37:30:8e:cd:8f:08:3a:09:
6d:9a:3a:18:f7:1e:1b:a6:68:1d:8a:e5:2e:22:ad:d5:06:20:
2a:5f:7d:0c:48:f5:90:44:8d:57:09:eb:97:9f:86:98:37:64:
8a:69:08:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 28 14:15:34 2026 by rpki-client