
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa
File: caf74530-3650-41ac-a970-9da97a34ad52.roa (raw, json)
Hash identifier: SoN4weIOT/c5tfhxD2ot32iQ4qDHgrZxLzWGysvvInE=
Subject key identifier: B2:F8:2A:B0:6A:62:38:39:0B:7F:86:58:C8:FD:22:D4:5E:82:D8:33
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 07B9163CFAE74693F430D32E66B8DB59B6132D3C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa
Signing time: Sat 14 Feb 2026 00:41:12 +0000
ROA not before: Sat 14 Feb 2026 00:41:12 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 184.72.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b9:16:3c:fa:e7:46:93:f4:30:d3:2e:66:b8:db:59:b6:13:2d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:41:12 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=80eaa789f9525077efa6e55336a7154a03ab0e7dab68993de9cfed8355b89e69, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:b1:c1:79:80:df:28:13:93:9e:48:e7:4d:
e9:91:c3:6c:51:1e:7b:50:ea:b6:a9:0d:c8:97:fa:
05:aa:c9:f6:94:77:57:3a:08:92:94:8c:1c:c6:61:
44:e4:36:ac:34:89:03:82:26:3d:8a:87:b5:43:27:
fe:28:47:74:ae:de:5a:7c:56:8e:7c:60:46:a7:c4:
bf:c7:c5:cf:8d:26:1b:14:ae:5d:fc:7b:41:97:0d:
2e:a3:20:56:9b:d0:04:f0:1d:70:47:a8:20:0b:d5:
ac:92:e5:49:a6:c3:73:04:6a:f5:53:55:2c:8f:d6:
76:aa:9f:ad:1d:6f:e2:f2:93:ce:21:9e:a8:b7:23:
0f:9c:c1:38:94:d4:74:23:c6:8b:e5:83:ea:7c:fe:
b3:33:ff:80:9e:ed:a7:14:8a:f4:ba:7b:d7:d5:83:
2c:fa:14:44:b7:48:eb:9f:2c:84:51:b7:9b:a5:28:
00:e0:4f:6b:be:c2:fd:58:82:fa:c2:73:a1:a1:f4:
0f:e8:f4:16:82:c5:98:8c:ae:d2:70:f4:ec:58:a1:
9a:3d:e2:a8:4d:b1:39:c3:27:00:28:60:b7:e5:35:
42:16:87:0c:3a:8a:59:6e:e5:ac:d1:aa:9f:e9:a2:
07:0f:f4:bf:e9:93:08:1b:fb:0a:69:66:d6:8f:ff:
22:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F8:2A:B0:6A:62:38:39:0B:7F:86:58:C8:FD:22:D4:5E:82:D8:33
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/caf74530-3650-41ac-a970-9da97a34ad52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.96.0/19
Signature Algorithm: sha256WithRSAEncryption
43:cd:cb:7f:49:f2:01:76:c0:cd:be:86:71:96:33:86:ff:84:
62:fa:27:aa:1d:ad:71:74:ec:9b:98:1a:30:dd:dd:5a:49:f2:
f5:f1:fe:28:3b:de:92:8f:2b:b3:67:8a:94:38:03:ea:e4:ba:
4c:c8:cf:51:7d:6c:b9:a1:41:26:02:57:1e:c5:68:08:63:bc:
eb:2b:6d:94:8c:9f:e2:98:69:9b:81:34:e6:a4:59:59:74:4e:
9d:36:99:50:4f:22:92:13:2a:e2:5f:eb:a0:52:9d:5d:5c:1f:
b5:18:e6:1b:3e:53:89:df:f6:56:6e:bc:f1:97:14:e8:d9:14:
48:4a:a9:0b:ba:82:05:80:c7:50:07:01:6d:1a:cb:0f:f8:12:
b5:78:18:94:7a:4b:93:d9:b4:59:4e:e3:bf:ee:27:b9:31:0d:
f0:e9:e4:94:79:79:d1:e1:8e:b2:6f:72:c5:12:70:71:93:64:
91:61:cc:f6:35:2e:1a:6a:db:f1:54:5d:32:fd:08:c0:d2:9a:
36:a3:77:75:a9:71:da:4a:6c:bc:41:c2:b8:63:90:2c:59:4a:
9b:1e:86:30:ff:8d:18:b4:2d:40:2d:83:7e:69:4c:80:ab:4b:
de:b1:f9:ed:f8:61:2b:5e:37:61:d0:4d:4d:c2:c4:e4:e1:9c:
80:9d:e4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:23 2026 by rpki-client