
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa
File: b7a02b21-64a7-4629-8149-a98f47ed09a5.roa (raw, json)
Hash identifier: HNYA7BfDxHaRDSB5pXt550Su6MSbdTy8OC6dZa2jcFc=
Subject key identifier: ED:8E:A5:FF:D2:D6:B6:73:5B:A9:6B:03:A5:24:8C:57:71:88:47:E5
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 051D20A4A4018897D8BED8D481D4A3C05AC84F7E
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa
Signing time: Sun 08 Feb 2026 00:40:56 +0000
ROA not before: Sun 08 Feb 2026 00:40:56 +0000
ROA not after: Sat 09 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 66.221.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1d:20:a4:a4:01:88:97:d8:be:d8:d4:81:d4:a3:c0:5a:c8:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 8 00:40:56 2026 GMT
Not After : May 9 23:59:59 2026 GMT
Subject: serialNumber=884b1f5af231d5a79e5cb2666034c196dff4c8c4b2dc922c09a39755cf7491c0, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cd:91:61:e5:d7:05:94:84:bd:03:12:31:e1:
5b:3c:94:b2:f1:3b:c1:d5:f0:1f:55:fc:6e:55:04:
36:18:7c:ec:cb:fa:47:07:46:47:c3:37:50:a3:2b:
32:da:a9:1f:61:e0:25:36:84:14:d1:e2:dc:d8:2c:
65:e9:bb:e9:d6:9a:9d:44:00:7f:cd:f3:fb:62:2e:
bf:14:39:48:26:19:0e:97:f8:18:e5:8a:b4:e8:1b:
6d:e5:d4:7a:42:42:2d:5a:47:50:d6:89:75:c6:67:
3b:49:ec:04:6a:26:3a:f1:36:71:5c:83:d2:0d:9f:
06:9a:d0:e1:9c:ba:62:cd:5e:e0:dc:b5:d2:34:1a:
54:d2:82:d4:e6:5a:d8:91:ac:79:6b:d0:b4:dd:74:
e6:ec:53:ea:ad:1c:51:40:7d:1f:e0:cf:07:01:43:
85:8c:3c:4a:4e:35:35:29:c6:5a:d1:e4:86:60:d5:
18:27:a8:34:a9:2f:a1:dc:d4:d7:87:e3:12:e2:e3:
db:2a:52:dc:c1:01:8d:be:6a:08:92:2d:6b:a1:cf:
6b:7b:3a:35:78:ab:e6:8c:fd:59:c6:c2:70:8c:6e:
71:c4:9c:4d:eb:82:fb:fd:e6:28:44:12:51:36:d2:
10:29:c2:a2:23:84:fe:ca:59:65:30:12:ad:6b:60:
da:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:A5:FF:D2:D6:B6:73:5B:A9:6B:03:A5:24:8C:57:71:88:47:E5
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b7a02b21-64a7-4629-8149-a98f47ed09a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d0:dc:e0:38:0d:a2:4e:df:cd:4f:ac:22:70:61:79:5a:50:9a:
78:62:eb:f5:e1:bf:90:03:17:12:61:71:ec:4d:61:72:5d:db:
78:05:79:ce:c0:ac:47:4f:2f:89:fd:36:14:13:24:9a:b8:d9:
c9:0b:27:37:36:0b:48:b0:a4:b1:e6:38:02:c6:72:21:1d:a6:
9f:7a:52:86:eb:9f:41:93:3f:9f:ab:ac:45:34:4c:78:17:fa:
2a:74:ce:c7:ab:39:b8:06:8f:b6:68:01:07:01:22:fa:ec:dd:
33:86:1e:da:3a:1c:c4:ed:f1:57:f9:13:01:6f:66:0c:e0:64:
29:40:13:d7:14:ed:f7:63:2f:69:1a:17:02:54:62:46:57:02:
29:0f:2a:8f:7d:76:1f:d7:6e:a9:27:06:50:5f:08:12:39:05:
c8:51:ef:50:de:9a:17:6a:0a:90:ad:87:df:80:25:ce:22:96:
a4:9a:e7:3b:57:19:3b:97:18:70:b1:33:13:3e:02:9f:a7:ac:
87:42:27:d2:c1:d3:7e:06:3d:d7:40:0a:bb:8c:0f:f8:39:af:
b6:d5:26:29:9b:40:be:05:60:cd:1d:d2:2e:02:6c:f2:49:b4:
5c:40:50:5c:78:fc:c9:e8:9f:5e:4d:b8:53:23:7c:59:bf:cd:
27:f5:03:f7
-----BEGIN CERTIFICATE-----
MIIF9zCCBN+gAwIBAgIUBR0gpKQBiJfYvtjUgdSjwFrIT34wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjA4MDA0MDU2WhcNMjYwNTA5MjM1OTU5
WjB6MUkwRwYDVQQFE0A4ODRiMWY1YWYyMzFkNWE3OWU1Y2IyNjY2MDM0YzE5NmRm
ZjRjOGM0YjJkYzkyMmMwOWEzOTc1NWNmNzQ5MWMwMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCVzZFh5dcFlIS9AxIx4Vs8lLLxO8HV8B9V/G5VBDYYfOzL
+kcHRkfDN1CjKzLaqR9h4CU2hBTR4tzYLGXpu+nWmp1EAH/N8/tiLr8UOUgmGQ6X
+BjlirToG23l1HpCQi1aR1DWiXXGZztJ7ARqJjrxNnFcg9INnwaa0OGcumLNXuDc
tdI0GlTSgtTmWtiRrHlr0LTddObsU+qtHFFAfR/gzwcBQ4WMPEpONTUpxlrR5IZg
1RgnqDSpL6Hc1NeH4xLi49sqUtzBAY2+agiSLWuhz2t7OjV4q+aM/VnGwnCMbnHE
nE3rgvv95ihEElE20hApwqIjhP7KWWUwEq1rYNpPAgMBAAGjggKwMIICrDAdBgNV
HQ4EFgQU7Y6l/9LWtnNbqWsDpSSMV3GIR+UwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2I3YTAyYjIxLTY0YTctNDYyOS04MTQ5LWE5OGY0N2VkMDlhNS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwBC3TANBgkqhkiG9w0BAQsFAAOCAQEA0NzgOA2iTt/NT6wicGF5WlCaeGLr
9eG/kAMXEmFx7E1hcl3beAV5zsCsR08vif02FBMkmrjZyQsnNzYLSLCkseY4AsZy
IR2mn3pShuufQZM/n6usRTRMeBf6KnTOx6s5uAaPtmgBBwEi+uzdM4Ye2jocxO3x
V/kTAW9mDOBkKUAT1xTt92MvaRoXAlRiRlcCKQ8qj312H9duqScGUF8IEjkFyFHv
UN6aF2oKkK2H34AlziKWpJrnO1cZO5cYcLEzEz4Cn6esh0In0sHTfgY910AKu4wP
+DmvttUmKZtAvgVgzR3SLgJs8km0XEBQXHj8yeifXk24UyN8Wb/NJ/UD9w==
-----END CERTIFICATE-----
Generated at Fri Feb 20 22:59:56 2026 by rpki-client