
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89063f4b-2eef-4634-94ad-28e141c8095a.roa
File: 89063f4b-2eef-4634-94ad-28e141c8095a.roa (raw, json)
Hash identifier: ZctG8tAkAX+UIedE48miz+hDPALBMILTW+kyRzpeeJY=
Subject key identifier: D7:1C:6D:7A:87:DE:A8:6B:6D:63:B5:CB:8E:F5:95:0C:B3:82:66:6A
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A0C796DDD54DE131F2FA72F83117D2A29F45DA6
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89063f4b-2eef-4634-94ad-28e141c8095a.roa
Signing time: Fri 13 Feb 2026 00:10:35 +0000
ROA not before: Fri 13 Feb 2026 00:10:35 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 206.72.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:0c:79:6d:dd:54:de:13:1f:2f:a7:2f:83:11:7d:2a:29:f4:5d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 13 00:10:35 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=a5da85e985c3ef65bb7085b923d2074a3435236261cd7f0c4187eaf67a214677, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:79:4b:08:87:73:f6:9a:4a:a2:04:49:0c:b2:
f3:28:69:7c:3a:d9:36:45:f2:91:e8:39:b0:bf:d5:
82:c7:cb:78:af:ee:35:06:ca:37:c2:92:d9:b7:99:
26:18:77:bc:9f:4e:96:54:33:31:d3:c4:3b:9b:16:
92:25:d0:10:6c:c7:82:7e:24:99:54:e9:44:4e:f2:
98:da:3e:70:52:6f:95:6e:f0:db:e9:c6:9a:8b:b9:
52:12:32:ea:43:c9:bc:d1:76:e9:d9:ce:8a:a6:02:
f1:89:93:4e:74:a0:16:f3:11:12:6e:a9:18:8e:39:
69:3d:2e:56:48:d9:56:15:9c:8f:dd:55:cb:55:8a:
98:eb:39:a0:9d:46:0e:0f:b3:fe:b1:63:9e:ef:e6:
ae:57:12:8d:b1:b7:85:37:08:0b:dc:cf:27:64:7b:
dc:f1:23:3b:ed:1b:ca:f8:ca:99:39:4d:ca:c2:9f:
01:b0:20:d1:59:d8:ae:91:52:4f:f4:a6:8d:18:0e:
cd:87:0a:a3:69:fd:87:d4:de:5f:5e:52:83:f4:3f:
ce:21:f6:53:d5:b9:73:80:8c:80:1c:c4:e3:99:6e:
f3:12:64:cd:ba:be:33:38:2f:b4:fe:f1:70:8f:3e:
54:4f:4e:6b:3f:96:f6:3a:f9:82:40:c2:e1:c8:25:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1C:6D:7A:87:DE:A8:6B:6D:63:B5:CB:8E:F5:95:0C:B3:82:66:6A
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/89063f4b-2eef-4634-94ad-28e141c8095a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.72.209.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d5:ac:d9:d7:1b:6f:bd:0a:af:6d:a4:e2:5e:3a:15:a7:ce:
4a:16:ce:2e:e4:f0:89:05:16:d1:01:3a:e8:8a:fe:fb:f9:9f:
a8:5b:2c:df:9e:27:7b:17:e4:db:7d:ac:8d:bb:f5:1f:ae:12:
54:aa:69:eb:48:81:18:1d:53:8b:9d:11:d2:7c:15:03:70:a4:
8a:83:b7:25:95:00:9b:58:95:f2:d4:72:c4:1b:33:1f:62:8e:
e2:f5:f5:76:02:42:a5:5b:1c:7d:10:09:f4:d8:07:ef:03:44:
6e:17:08:09:9c:0f:d4:02:ce:14:a4:ec:14:5d:c0:e6:28:2a:
1f:10:0e:51:33:d2:9e:f9:b2:79:94:b4:0d:a3:78:79:d2:94:
72:81:cd:9d:05:67:39:b8:91:bc:1c:e8:67:12:63:33:76:b5:
1d:3c:4e:82:f8:eb:c6:1d:b8:be:86:ed:84:23:c2:4f:ad:dc:
8a:f1:86:93:49:c8:d5:96:89:1d:97:4b:b6:d0:35:3d:05:ca:
ee:c3:a5:dc:0e:2d:5c:5e:92:0e:0f:55:58:d0:05:e4:e0:5f:
76:ea:59:83:e9:43:32:8a:5f:9e:7d:ce:b9:1d:1e:41:53:67:
28:f7:50:69:4a:5e:bb:48:ee:4c:2c:4f:36:3f:07:38:b4:10:
57:6d:15:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:36:42 2026 by rpki-client