
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f53bba0a-e58b-4da5-a53c-d04f7817e2ce.roa
File: f53bba0a-e58b-4da5-a53c-d04f7817e2ce.roa (raw, json)
Hash identifier: yb5OxY9inZc0MAB7IvR6/WSKNLkS/rH/WdH1wk+yojk=
Subject key identifier: 7A:35:B8:8B:CF:2D:C6:AC:41:E3:5D:EA:8E:83:03:A5:F5:DD:33:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 76D99997EB1562D66B095A41F30D66F76F5D8CEE
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f53bba0a-e58b-4da5-a53c-d04f7817e2ce.roa
Signing time: Mon 09 Mar 2026 13:22:52 +0000
ROA not before: Mon 09 Mar 2026 13:22:52 +0000
ROA not after: Sun 07 Jun 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:1feb::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d9:99:97:eb:15:62:d6:6b:09:5a:41:f3:0d:66:f7:6f:5d:8c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Mar 9 13:22:52 2026 GMT
Not After : Jun 7 23:59:59 2026 GMT
Subject: serialNumber=6513977e4c52faee6da1ca9e81833bd409ba8d032d1cb7eb795ac34fc8598062, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:a6:5d:85:1f:8a:a5:72:38:37:55:5f:66:
d6:ec:46:ba:7e:a9:4a:16:7d:d4:be:9b:e5:0c:6e:
6c:a2:c1:d5:d0:58:4d:e1:06:52:a7:99:e8:eb:e5:
c6:9c:15:cc:2b:a0:fa:96:bd:74:0e:27:06:b9:6b:
ff:c8:85:cf:65:e8:36:ca:a9:4a:b0:41:17:e9:24:
10:16:d7:95:22:64:e5:3d:b9:d0:7d:da:7d:af:ea:
bc:3b:ae:ab:1c:0e:31:33:a1:6c:d6:c5:11:5c:c7:
36:ee:99:8c:6e:e0:5f:9d:c8:0c:20:fb:5a:de:c7:
6f:6c:f5:85:ac:3a:df:63:c8:06:8e:4a:08:bc:ce:
92:c7:15:91:8c:b4:73:5b:a6:d7:b4:c3:a7:82:c6:
05:10:32:c6:0a:14:90:3d:89:06:71:76:9e:0c:d5:
d6:82:dc:c3:6a:62:1f:08:20:90:67:a0:ff:56:8e:
10:02:c4:99:26:f8:13:29:03:0d:db:50:2d:58:94:
c2:37:bf:3f:27:8a:56:2f:3a:18:3e:ed:7a:c6:26:
92:48:9a:0d:05:bd:2e:8a:e9:2c:a1:50:05:00:d5:
2f:d6:3f:dc:06:bb:42:10:e5:59:1d:f5:8c:22:de:
f6:e0:38:b1:08:50:1e:9c:a6:e8:01:fb:ab:8f:8e:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:35:B8:8B:CF:2D:C6:AC:41:E3:5D:EA:8E:83:03:A5:F5:DD:33:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f53bba0a-e58b-4da5-a53c-d04f7817e2ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1feb::/32
Signature Algorithm: sha256WithRSAEncryption
6a:71:f5:6d:7d:a9:e1:c7:6b:a8:8c:d2:2a:e0:66:50:1a:73:
86:35:b1:15:b1:82:b5:d9:05:36:72:b1:c8:5b:7d:0b:14:5a:
ad:fd:24:5e:20:16:64:04:14:72:e9:bd:d7:2a:c6:58:f8:7c:
2f:17:fd:33:8f:b0:08:41:42:b4:1b:4c:92:61:98:1f:50:8a:
34:2b:82:9e:29:05:71:bb:83:c5:49:0f:84:5e:6c:84:76:6f:
3b:dc:51:86:45:cf:1e:3f:cd:53:9b:2e:87:6e:73:d0:4b:a3:
ff:7c:82:8d:5a:7f:b5:8a:f4:90:f1:7d:cd:7a:71:91:34:40:
db:0f:1e:b7:d4:23:e0:bd:aa:20:65:40:a6:a2:b2:a7:37:47:
98:9b:f3:0d:37:82:d1:d9:b8:5e:cf:38:f3:cb:5c:ad:d2:c0:
b2:49:01:7b:2f:0b:ea:1e:81:86:90:ce:ae:34:d1:ad:4d:52:
3e:4a:18:a2:b3:f6:e1:d6:8d:45:d7:03:e8:fa:9a:7f:13:38:
d6:ba:f9:1a:2d:f6:ff:07:3c:ac:fa:15:e3:a6:dd:49:19:6b:
a4:e8:d9:01:00:c4:66:21:e8:25:31:1f:dd:06:fe:78:d8:c5:
e9:f4:67:3e:17:38:a9:c3:b0:36:13:1f:ec:e7:89:2a:e0:59:
b8:62:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:27:59 2026 by rpki-client