
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e38fd2-258c-4ee2-b47d-b15038a29e00.roa
File: 67e38fd2-258c-4ee2-b47d-b15038a29e00.roa (raw, json)
Hash identifier: 6TCg2vvLVOeelDCHMDyJvf9vbrlPrsHgPDQWSfNLtoM=
Subject key identifier: 3A:01:FC:9C:A3:38:10:65:FE:29:14:38:7E:09:98:A1:6B:45:7B:F1
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 0BC09785B2A391CA3FF6D5079CF35B25003339B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e38fd2-258c-4ee2-b47d-b15038a29e00.roa
Signing time: Sat 14 Feb 2026 00:51:44 +0000
ROA not before: Sat 14 Feb 2026 00:51:44 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 184.72.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:c0:97:85:b2:a3:91:ca:3f:f6:d5:07:9c:f3:5b:25:00:33:39:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:51:44 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=50c7469cf792f337dbdd8f81d39b981b0f3a5e3db0fb1b3b5e7d4abcd3588a4b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:57:78:2e:d7:26:53:d2:e9:b9:9d:9a:f8:
aa:54:58:68:e9:3a:1e:66:1f:5f:96:46:10:1c:27:
5d:23:72:97:dd:1e:0e:15:40:c5:21:70:a1:f4:d9:
95:37:92:af:ff:79:56:fd:4e:8d:db:fe:fe:4b:d3:
fe:85:42:13:87:7b:bf:45:9f:4e:ac:fc:45:ca:5b:
0b:32:cc:87:45:c4:07:3f:a8:57:32:67:c3:0a:7e:
c7:5f:af:af:3e:4b:03:25:08:f5:31:34:b0:a8:4d:
b4:c8:68:c4:62:24:13:d6:71:c3:a0:07:f5:6e:c1:
cb:3f:38:db:b3:8a:0f:28:66:00:6b:a1:4c:cd:a6:
32:d4:58:a7:3d:98:d7:2b:14:0e:98:c6:75:f5:df:
2a:e9:8c:36:2b:45:d1:f9:7a:79:6b:c8:c2:80:1f:
af:da:cd:88:89:e6:53:cb:c2:df:8f:46:59:8d:be:
3d:ae:49:98:a1:37:02:a4:d6:fd:97:09:da:e0:81:
51:f8:21:ad:ec:e0:2d:ea:fa:52:df:c2:05:75:76:
8a:df:0d:83:de:eb:61:f3:47:2f:e1:6e:d4:af:ca:
09:bc:cb:ee:2e:fd:cf:77:f9:c3:88:06:dd:80:b8:
19:d5:f7:1d:9c:77:56:dd:b2:14:90:78:83:fa:45:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:01:FC:9C:A3:38:10:65:FE:29:14:38:7E:09:98:A1:6B:45:7B:F1
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/67e38fd2-258c-4ee2-b47d-b15038a29e00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.64.0/19
Signature Algorithm: sha256WithRSAEncryption
d2:ac:3d:d4:65:80:49:1a:b0:42:ee:04:a4:bc:d5:9f:04:5c:
93:c2:15:84:cc:7e:02:08:29:bf:8f:85:9c:61:1c:6a:1a:1c:
37:3c:18:18:93:79:78:98:b4:5e:7f:ec:80:08:43:7f:45:c2:
45:a5:8e:0a:d7:5e:e9:9b:7b:8b:6b:34:7c:19:37:f8:7a:f9:
15:65:48:05:40:13:45:2d:2b:1f:b7:e3:32:82:5c:20:a3:19:
f8:2e:89:ca:64:b9:b3:10:5e:08:af:f3:0d:4c:58:6a:f8:6b:
fe:a0:d6:07:5a:15:26:aa:b1:66:0b:6e:35:4c:a9:bf:d2:49:
9b:e3:2b:15:db:ed:4d:07:09:66:3c:2f:50:04:a9:08:43:af:
75:33:08:b3:2f:bf:d8:94:3a:b2:45:78:3b:72:8e:ba:ee:2b:
da:bd:9b:0b:ef:58:a8:52:71:42:55:c4:07:a0:38:e1:61:7b:
f8:f1:88:5e:75:98:a8:e5:cb:a9:84:ed:a7:3f:69:35:9f:5d:
8e:fc:f6:1d:bd:12:3a:a3:9b:22:8d:d8:2a:55:2f:9d:e8:d8:
39:bc:5d:22:27:00:c4:79:a9:ea:04:01:83:88:71:6d:b3:d3:
ce:90:f0:27:c1:a4:da:ce:02:84:48:2a:67:31:27:0f:43:b3:
b9:e1:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:56:14 2026 by rpki-client