
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04306634-1dbc-4569-a40a-6081987ab549.roa
File: 04306634-1dbc-4569-a40a-6081987ab549.roa (raw, json)
Hash identifier: a+69gDct63TXWm3cym2QlIU3cziVUpx48x6CIhhC0ME=
Subject key identifier: F5:A9:F0:FF:F5:F4:45:D8:E9:EF:4C:5D:D4:1E:16:E7:73:A9:F3:5C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6BCDA5439FA582F69F79116398ED77D38839C37B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04306634-1dbc-4569-a40a-6081987ab549.roa
Signing time: Wed 18 Feb 2026 00:20:36 +0000
ROA not before: Wed 18 Feb 2026 00:20:36 +0000
ROA not after: Tue 19 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 72.40.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:cd:a5:43:9f:a5:82:f6:9f:79:11:63:98:ed:77:d3:88:39:c3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 18 00:20:36 2026 GMT
Not After : May 19 23:59:59 2026 GMT
Subject: serialNumber=d265fdc628e0782004c41720c79d649d7e484295a23b51b9b7dbefda8a4516e8, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:5d:cc:ca:cd:a4:f7:78:df:29:69:de:62:
96:75:e6:94:20:5a:b1:e8:80:2a:6a:ab:cf:fb:6b:
d8:a6:3a:68:37:81:54:23:85:0d:04:20:42:46:4f:
92:56:fd:44:17:99:13:d9:af:6a:32:12:c2:d2:76:
c2:3a:ec:2e:67:9a:f4:e9:36:21:1c:b9:32:9e:45:
f6:74:6b:79:42:61:8d:8c:3f:6b:5a:0d:91:c8:f0:
02:49:92:f4:5b:68:45:fc:3d:35:27:c3:d4:b4:4b:
ec:52:b1:9a:cf:31:35:e3:70:18:7e:b1:4b:fa:d2:
11:f3:2d:ef:06:6a:90:5c:ff:c2:d6:48:a7:1c:76:
9d:23:9b:d2:b6:16:fc:d3:9f:72:a9:44:56:fe:65:
4e:b1:2c:ba:f5:92:10:7a:64:86:a0:3c:5b:d6:87:
1f:60:5c:98:c7:4b:b6:31:f0:43:a7:ec:70:43:92:
a6:ac:82:db:de:52:2a:15:fa:cd:2e:7b:31:e0:c1:
70:3d:38:97:9c:5f:22:70:f4:cc:a5:40:e4:c8:cf:
f3:f8:b7:b8:68:2d:56:c6:0b:04:12:7a:56:c1:90:
c0:e8:a6:6d:b7:4c:74:0f:ba:b6:5a:5b:8c:2a:69:
9d:bd:47:9e:06:2f:6f:b5:5b:48:42:e8:1d:57:d2:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:F0:FF:F5:F4:45:D8:E9:EF:4C:5D:D4:1E:16:E7:73:A9:F3:5C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/04306634-1dbc-4569-a40a-6081987ab549.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.40.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0a:3d:3a:f2:22:68:20:ee:0e:01:d9:de:1d:2a:6e:b8:09:f6:
29:9c:0f:92:4c:e3:37:3f:aa:fe:0c:c8:15:b6:0e:f3:9d:3a:
77:70:62:19:54:29:e0:b6:4c:4c:b2:6e:60:30:da:0d:ff:fe:
b9:bf:7e:9b:22:66:21:7f:54:14:34:65:57:0a:7a:2d:13:98:
8c:f8:b1:56:cc:21:25:29:19:fc:66:4c:a1:67:ff:c7:9a:ed:
aa:cf:7b:23:c8:2d:3d:41:29:0a:aa:e5:4b:d5:a0:3d:a5:8f:
ec:56:17:36:f2:d2:e0:0b:9f:01:78:9b:d8:0c:d6:d7:35:90:
13:1b:89:94:09:de:b8:08:fb:08:0f:d2:2d:01:bb:cf:13:81:
a3:93:c6:2e:00:ae:9f:8d:3d:7c:f1:d0:a2:e7:5b:18:e7:8f:
7e:69:33:6c:d4:b4:85:c3:50:9b:66:7f:b4:92:80:ba:8e:8b:
58:ca:a5:ea:72:c6:11:3a:6c:b4:50:fc:21:5a:9a:89:68:1c:
fc:27:c6:c9:cb:9b:f2:1d:84:7f:09:a0:77:db:77:1a:1b:07:
69:6e:b5:57:44:5d:f1:6d:9c:56:57:77:f9:f7:0c:99:8c:f3:
a2:02:01:85:af:63:40:42:35:fc:91:2e:a8:34:f2:01:ce:48:
40:f8:9d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:56 2026 by rpki-client