
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa
File: f2365433-7c93-4016-ad7e-0a4383160d29.roa (raw, json)
Hash identifier: OgamD5nYCd1Pd4O4DWNthNfiQhWR2+mmjDJl5TEPgOg=
Subject key identifier: 31:67:78:76:65:99:4C:8D:D5:ED:5F:0F:3D:67:A9:AE:5F:BE:1E:CE
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3D613EAE2E419A83AE2D8C7DF7B350521A60B344
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa
Signing time: Sat 14 Feb 2026 00:21:15 +0000
ROA not before: Sat 14 Feb 2026 00:21:15 +0000
ROA not after: Fri 15 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 184.72.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:61:3e:ae:2e:41:9a:83:ae:2d:8c:7d:f7:b3:50:52:1a:60:b3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 14 00:21:15 2026 GMT
Not After : May 15 23:59:59 2026 GMT
Subject: serialNumber=019b0e822dae8ea2589eb7d69144285695adf3b5d24687687dfc2e48fe15dd8b, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:8a:d3:b5:81:66:83:52:95:b1:3c:92:98:
ce:8b:ee:b0:e3:a1:e5:f5:e7:36:06:f0:cd:df:10:
28:1a:a4:a0:aa:2d:00:db:bf:1e:6b:97:9a:d9:a8:
cb:be:2f:79:2c:89:95:bc:63:d9:10:57:17:0b:1b:
63:93:bc:0c:0d:ce:b5:87:0c:cf:f7:b2:83:45:55:
35:77:7e:fc:f5:50:61:59:88:9d:4d:bb:0f:89:8b:
1b:1e:af:f3:67:63:5a:5d:72:db:65:7d:ca:22:ae:
2e:25:29:45:8a:25:29:45:dd:e1:c0:54:98:0e:45:
3b:d6:de:52:08:39:c6:b7:61:b3:6b:c6:8d:08:68:
01:45:85:a0:d4:ec:89:f3:46:b7:56:39:61:66:b2:
ad:63:18:9c:9c:77:d4:8e:36:15:8f:1a:31:da:ee:
76:e8:de:5b:3e:20:c4:73:75:1b:29:59:82:2c:57:
2b:02:26:0d:1d:8b:d3:87:04:b0:3b:e6:c4:fc:44:
b1:4a:39:0b:a5:88:d4:35:cc:ba:fb:e6:3e:5c:c0:
fb:ab:eb:97:29:09:06:45:ed:30:74:8e:93:7c:82:
ce:70:9c:9b:8e:74:cc:2a:94:f0:4a:4d:8e:08:d0:
43:d3:76:42:45:4d:3b:35:50:ce:20:a5:49:f0:08:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:78:76:65:99:4C:8D:D5:ED:5F:0F:3D:67:A9:AE:5F:BE:1E:CE
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/f2365433-7c93-4016-ad7e-0a4383160d29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
184.72.93.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a6:0b:77:7a:3f:88:97:c8:6e:8c:99:69:e3:fb:b0:02:97:
68:5e:90:d6:0e:0b:ba:87:3a:55:9e:63:b4:f3:b9:3b:e4:f3:
4e:30:1c:2e:71:92:49:f1:8e:2f:31:a1:12:39:1e:16:16:dd:
79:0d:04:11:87:f1:e7:a1:64:07:84:be:a0:e5:f5:49:67:70:
07:53:27:92:e3:d0:b6:c7:d6:84:90:09:89:aa:87:7c:cb:90:
f8:f9:9a:cd:43:1a:14:6d:01:70:28:b6:d8:68:a8:91:38:3a:
61:23:6d:ac:b2:bb:81:2f:51:18:cf:57:f3:71:4e:0a:bc:f6:
ca:20:60:2a:d6:72:69:5c:27:aa:bf:41:7e:c9:3d:d7:68:0c:
b6:59:a0:1f:f7:f7:3c:7f:39:36:dc:9a:96:aa:a1:23:d9:e9:
23:20:44:46:56:4c:13:e7:53:22:28:f8:09:35:61:67:64:97:
32:4e:95:13:2f:ff:67:28:55:76:69:d4:10:c4:2b:68:c4:89:
0e:3c:99:7c:94:a8:00:cc:e7:81:13:84:07:6a:fe:01:1b:ec:
34:04:96:5e:71:ac:b4:34:e0:4f:2c:76:df:55:20:3b:94:61:
03:36:79:c1:1e:49:f9:9c:fc:c1:6d:f0:6b:45:8a:9f:99:ca:
01:70:35:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:38:17 2026 by rpki-client