
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b685dd41-8f09-47b5-8997-53c2dc02d7af.roa
File: b685dd41-8f09-47b5-8997-53c2dc02d7af.roa (raw, json)
Hash identifier: NQkFbkirEjbVmsgnsXfJQvMQhqE+xW6cplXPgKp4JOU=
Subject key identifier: A4:55:C7:40:7F:67:2B:8B:9D:07:3C:55:63:AC:E2:9A:FB:A1:FE:BF
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 1ECE93B9DC7C7DD3879034212E3C84FC7987E76B
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b685dd41-8f09-47b5-8997-53c2dc02d7af.roa
Signing time: Sat 14 Feb 2026 00:20:48 +0000
ROA not before: Sat 14 Feb 2026 00:20:48 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 184.72.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:ce:93:b9:dc:7c:7d:d3:87:90:34:21:2e:3c:84:fc:79:87:e7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:20:48 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=0396f45e9f603b0500e4fab7e123bdf78fcc5edc920f4b1915ed44f68d81c134, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:ae:80:eb:01:48:0b:47:48:ab:46:2b:d3:
04:c2:20:8f:c2:71:cd:62:f4:20:ac:ab:bb:3c:fa:
7f:c0:7c:85:68:4a:80:9f:7d:7d:fc:99:ec:2a:99:
60:73:21:56:33:59:75:ab:89:15:bd:21:47:1a:fc:
26:f1:43:bc:ee:e2:0c:14:fc:77:b4:81:11:60:04:
0c:6d:3d:b5:bc:49:10:1f:fe:d3:85:e5:e6:56:c5:
65:98:45:2d:0d:76:8d:86:1c:ec:09:b9:91:dd:50:
f8:aa:f2:18:5e:79:ca:a7:48:86:b2:b5:9c:9b:26:
07:16:10:75:b4:5b:7e:6d:3f:4a:46:8d:d7:54:5d:
b7:cf:bd:35:9b:a0:b2:5e:00:a7:f2:98:42:a2:f8:
31:80:60:e1:4f:a2:d5:74:ae:a0:cd:f7:cb:36:e6:
81:d4:0b:29:66:5b:9c:02:49:2b:03:af:a1:3e:9c:
09:60:2e:8d:14:b0:93:83:11:2a:7d:8d:15:9e:86:
80:bb:80:d1:e2:93:c7:45:a8:e5:15:68:64:37:46:
be:81:3e:aa:d6:b9:6a:29:54:11:e3:47:f9:19:fa:
da:36:b1:4e:44:0b:56:cb:50:2c:f4:f4:0e:65:8f:
b6:43:10:e8:9c:46:5b:4b:5d:cb:44:39:55:9a:6b:
ab:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:C7:40:7F:67:2B:8B:9D:07:3C:55:63:AC:E2:9A:FB:A1:FE:BF
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b685dd41-8f09-47b5-8997-53c2dc02d7af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.94.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:3a:7a:cb:9e:c2:b6:f6:c9:ef:25:3b:67:17:29:33:2d:8b:
38:28:aa:c8:86:34:a8:db:25:1b:2d:d6:79:b8:78:3d:d9:c5:
90:dd:bd:11:6e:a1:37:d3:8a:14:07:fa:9a:6f:c2:bc:19:71:
61:61:31:5f:e3:ab:e7:7d:7d:1c:e4:fb:54:f1:93:84:11:58:
cc:b7:d5:ce:ec:7d:32:60:77:82:f5:47:29:b9:d4:f0:b8:82:
24:04:13:7f:7d:ee:35:9f:ab:51:7c:1e:9f:39:8e:7f:19:78:
a0:ff:04:b5:35:5f:1f:0f:69:07:4d:f1:c2:b0:b5:cc:22:06:
72:02:6d:4f:53:d7:b9:ed:a7:20:9e:39:4c:02:ee:c8:d4:38:
35:ac:e6:70:72:ac:51:08:c7:7c:be:a2:40:55:81:ec:b5:5d:
36:83:23:7c:f7:3b:14:53:38:b3:2b:d2:94:1c:e8:fc:03:ef:
ac:da:5d:dd:0b:a4:20:e2:69:c0:26:11:e1:f7:c3:40:61:63:
4d:ef:0e:64:11:4e:b1:e1:8d:db:9b:4f:7f:3b:16:ad:9c:98:
3b:24:a5:73:6b:99:d5:0b:60:a0:89:5d:9c:da:93:4a:67:f0:
b8:65:c2:99:51:6d:5e:67:ae:af:99:d7:5f:91:af:8e:73:9f:
83:5b:31:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:03 2026 by rpki-client