
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3a05cb-960b-4688-8311-ee8f2b959d5c.roa
File: 9a3a05cb-960b-4688-8311-ee8f2b959d5c.roa (raw, json)
Hash identifier: T8CSe1TJ/z3XpSELdrqzF5LjOsbmSjld1BEdr+bKFlg=
Subject key identifier: 0C:62:DB:10:75:C2:E0:1B:4E:B1:12:41:BE:C1:B3:54:9B:CC:69:4E
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 04D74AA23A3A48657F4BAB811F4B81C87D2A8902
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3a05cb-960b-4688-8311-ee8f2b959d5c.roa
Signing time: Sun 08 Feb 2026 00:30:52 +0000
ROA not before: Sun 08 Feb 2026 00:30:52 +0000
ROA not after: Sat 09 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 66.165.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:d7:4a:a2:3a:3a:48:65:7f:4b:ab:81:1f:4b:81:c8:7d:2a:89:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 8 00:30:52 2026 GMT
Not After : May 9 23:59:59 2026 GMT
Subject: serialNumber=47820cbe46ba0b6b8d8b1b93f6b70bebf4c0c883b15956cb0135e920b853ba27, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:f2:e7:ac:38:de:11:53:4a:50:bb:be:33:
db:bd:44:b4:a0:e9:8a:44:e5:b0:85:9a:8d:bd:67:
c4:67:c5:bb:d0:7b:5a:3f:d3:6a:a1:e0:a9:80:97:
1f:9a:88:e8:fe:3d:8e:56:26:f2:ed:da:69:b8:57:
46:73:14:2c:4b:19:c9:56:4c:40:82:75:45:09:f6:
ff:25:ce:5e:1c:5d:06:50:5e:17:e6:f8:82:27:f8:
2f:b7:22:b4:7b:c7:e2:39:e9:e7:f1:f0:71:f2:ec:
4d:e9:03:dc:75:09:75:5b:f1:a8:68:4b:b5:d6:d5:
8f:ba:e1:6b:a0:74:96:c4:12:b9:04:aa:a3:70:b0:
65:f5:39:2c:a9:8e:c7:dc:17:54:ac:3b:64:d0:5a:
0b:fc:b0:cc:40:fd:19:35:b2:28:6e:e8:12:9b:e1:
de:9a:19:7a:04:bb:69:3f:68:3d:88:e7:3b:e8:b9:
5e:15:5d:a5:4e:ff:e1:14:c2:e2:2e:99:be:93:cd:
0a:38:5c:9a:d7:3e:42:d1:84:cd:00:ba:cb:0b:b5:
7e:b9:9e:c5:cd:3a:18:02:49:e4:32:a9:88:7f:13:
26:a1:6b:cf:1c:bb:33:90:36:d5:b3:e2:66:f9:48:
e5:32:5b:07:7b:de:3f:11:fb:0a:ba:35:2a:c6:2a:
c2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:DB:10:75:C2:E0:1B:4E:B1:12:41:BE:C1:B3:54:9B:CC:69:4E
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a3a05cb-960b-4688-8311-ee8f2b959d5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.165.64.0/18
Signature Algorithm: sha256WithRSAEncryption
cd:07:14:2e:00:18:8f:59:d3:46:3a:4b:63:a8:07:73:83:ef:
ce:02:55:53:8b:11:60:f5:d8:38:9d:98:f8:29:a2:ef:2a:d4:
de:3d:9e:d7:74:29:c4:69:93:21:9f:dc:bd:7f:98:3f:82:25:
2b:b6:00:18:46:a9:bd:50:84:91:99:90:04:48:d6:32:bb:41:
f2:79:33:55:e7:5e:b0:32:a6:9e:fe:87:be:a0:e9:23:5f:37:
a2:43:02:ef:18:bd:5f:89:f0:33:30:f2:f8:c4:25:86:6a:d4:
da:62:83:71:11:59:75:3f:47:6e:32:68:00:8e:63:7b:d2:8e:
df:e1:8e:98:f0:e6:fa:09:de:c2:05:1f:47:2d:ca:19:d8:de:
cf:d4:75:49:71:ea:f5:c2:84:68:3d:03:08:1d:7a:27:76:ca:
95:f0:ef:4c:69:3d:15:fc:55:b8:36:67:9e:b6:d5:95:f3:b3:
93:7e:86:b5:c1:b6:45:62:b8:72:84:20:a6:c4:cf:d4:dc:a0:
11:24:70:3a:89:d1:fd:5b:07:69:ab:67:b8:ed:b5:d8:37:42:
e8:42:b0:7c:e8:3a:cc:df:1d:4a:eb:b3:6a:2e:69:0c:37:fb:
b3:9b:71:b6:0b:06:6d:64:4b:25:81:59:e6:80:b8:e5:8a:40:
3c:b9:1c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 01:18:00 2026 by rpki-client