
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
File: b624d9cc-a7a2-4009-8cac-c0856276648d.roa (raw, json)
Hash identifier: gGtVwRgeF7kS6au1yoQlcC9Xuv/2qDzPm6oVF3jse1E=
Subject key identifier: AA:73:28:7C:43:6A:3B:A1:FF:6E:AA:34:33:40:DE:B9:F5:EC:55:07
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A2B790890F6E6082988C26D626F95CF76B112CF
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
Signing time: Sat 14 Feb 2026 00:51:13 +0000
ROA not before: Sat 14 Feb 2026 00:51:13 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 209.114.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:2b:79:08:90:f6:e6:08:29:88:c2:6d:62:6f:95:cf:76:b1:12:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:51:13 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=ea41e8b6227a339ef65cde7b65120acdb2a87118588a249acc32eb6a8323d400, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:52:41:f6:d5:84:9f:74:69:fc:da:c9:58:
44:58:25:3f:3a:03:b1:1b:a6:1c:aa:7e:1d:dd:09:
a2:1f:d9:c6:ec:bb:cf:23:63:30:9f:0e:51:c8:b2:
27:5a:06:d2:e3:d4:c4:32:e3:3c:08:fb:96:cf:3c:
0a:3a:10:6b:f9:53:42:a3:0e:b0:4d:79:ae:ef:87:
f4:e7:7d:63:c7:9c:76:13:ff:fa:b2:c9:35:82:d0:
bc:8f:2f:8b:38:cd:6f:fa:e4:50:a5:58:4f:14:35:
d5:dd:5b:95:cd:b6:d9:4d:5e:3a:fa:dc:28:44:3d:
cb:a5:06:60:48:57:95:33:c4:a5:1a:e4:2e:61:08:
f8:ac:7c:d0:e9:f3:b8:20:79:65:ee:1a:dd:b9:d9:
06:b0:07:28:3c:dd:a2:e8:59:7f:a9:a8:35:91:6c:
39:e3:c0:65:89:d6:fd:bc:ff:ed:36:9f:81:d0:34:
4e:09:8c:b7:0b:c6:8e:bd:bc:0d:d7:a0:5f:d1:22:
c7:33:aa:b1:5c:ab:5d:6a:0d:09:b0:dd:c5:11:c1:
42:ba:2a:43:19:e0:28:45:88:b7:15:df:69:44:9c:
4a:51:50:0e:30:2e:5c:b9:f4:80:60:ee:36:eb:de:
f4:ec:a1:ad:20:ee:f1:e8:ef:ac:6c:5c:61:55:e5:
a7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:28:7C:43:6A:3B:A1:FF:6E:AA:34:33:40:DE:B9:F5:EC:55:07
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b624d9cc-a7a2-4009-8cac-c0856276648d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.114.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8a:09:32:8d:92:38:f8:d0:3a:46:95:fe:e2:f6:9b:2d:7e:51:
d9:40:24:fe:be:5c:07:93:3d:b4:b0:5c:a0:7f:68:8b:b1:dc:
02:06:cd:ef:eb:a7:f7:bd:97:ec:bf:82:ed:a2:e7:6c:a2:e6:
12:69:01:8e:df:00:a9:af:ed:9c:d7:bf:37:8c:31:3b:4b:b9:
f0:d6:41:3a:f6:fe:ef:eb:b8:2a:c4:e9:8b:df:e6:3a:c7:23:
3e:a1:e6:a2:53:0e:4f:00:36:bc:b3:8c:8d:ad:49:fd:15:40:
c9:50:02:cf:52:b5:e6:f4:54:25:79:26:79:6c:f1:0f:54:76:
5e:37:3d:42:55:ba:30:c2:d3:50:a0:ff:8c:2d:7c:45:14:d3:
79:2b:30:5b:47:89:13:32:bb:20:bc:b3:00:0e:93:5a:54:e3:
e5:c4:b1:4b:b0:bb:e2:40:a4:bc:61:4d:20:c9:f3:10:f8:1a:
ba:55:06:58:ab:bb:78:8e:ee:40:5e:c9:78:74:2a:21:9f:33:
62:52:7a:62:ca:87:33:69:54:b7:64:84:9e:77:7f:ba:49:77:
77:cc:a7:c5:fc:5d:8d:9c:52:19:f6:72:69:13:1b:de:13:36:
f7:7f:1b:03:8a:21:97:10:7f:18:f7:8f:c5:56:bc:5f:aa:b7:
0d:b2:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:38 2026 by rpki-client