
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
File: fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa (raw, json)
Hash identifier: ehZRBb+pDSjM6f/a1YpG1Zyb0BUPJon8r75VTZfirlY=
Subject key identifier: 6C:B9:D6:F1:40:9C:8F:CD:71:52:55:59:4F:B3:D0:A6:18:A9:C1:E4
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 207F2E17295C5ABFDC366443543C6962316AF2B5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
Signing time: Sat 16 May 2026 01:10:50 +0000
ROA not before: Sat 16 May 2026 01:10:50 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 208.86.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:7f:2e:17:29:5c:5a:bf:dc:36:64:43:54:3c:69:62:31:6a:f2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 01:10:50 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=116ded8a3474279899ba212b927822399dc4ed436ac7d873a886b7f296f0706f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:ec:aa:34:18:d4:f7:81:90:cc:6a:30:00:
4b:20:22:1c:b4:98:42:59:df:33:c5:ac:fd:c6:20:
5a:b2:b2:42:d2:db:d0:67:27:89:c3:67:e7:c0:f7:
b5:0e:62:d9:c4:d7:d4:4c:f3:f2:61:da:97:eb:bf:
42:f6:86:73:da:6f:63:a3:4e:7d:b8:1a:12:61:aa:
bf:90:90:14:3a:49:d0:13:a5:ec:b4:91:7d:a7:1f:
03:ef:66:30:3e:9f:95:05:29:89:b4:5e:1d:2c:08:
98:00:77:43:2f:b4:28:7d:70:a1:ef:34:78:f9:1b:
3a:3f:c8:98:ea:bc:b0:92:a9:6a:fa:6e:d5:e3:c1:
a4:af:55:5d:63:11:3d:d6:48:f0:ae:e9:d1:f9:4d:
d2:57:bd:81:3f:c8:fe:d0:eb:7d:0b:d8:8a:0a:fa:
a5:21:32:21:e2:95:16:20:c8:c7:91:f7:56:44:d1:
cf:5c:0a:06:1c:d0:7d:a6:d2:bf:d3:df:4e:69:14:
db:67:e7:e4:94:d1:22:cb:7d:e0:15:0c:e8:a0:77:
f2:18:a4:f1:18:7b:aa:38:67:07:1f:b7:40:7d:2a:
ab:84:e5:9b:fb:95:38:21:22:33:ca:60:b8:96:50:
a7:b0:43:ad:fb:2f:d1:32:89:25:4b:7d:01:7c:7a:
b3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B9:D6:F1:40:9C:8F:CD:71:52:55:59:4F:B3:D0:A6:18:A9:C1:E4
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/fcc84d81-9bf8-4cbf-b279-54c2fcd679e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.86.88.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:32:5b:4e:c8:62:0d:19:20:70:d0:42:2a:34:75:45:7a:00:
c5:f1:78:c7:30:1a:3d:12:4c:cd:00:ab:71:20:e2:7d:0a:d6:
f1:fe:ca:47:2e:d7:9d:9f:2c:97:a6:4c:62:cd:f7:2b:f0:b4:
cd:3a:74:b5:b9:83:55:59:58:01:60:67:f9:35:b7:94:71:c8:
32:af:82:de:33:67:b9:d7:04:f8:26:a8:a3:e2:14:68:23:d0:
bc:50:62:e2:51:d9:34:1d:02:83:9b:de:fb:a2:65:f3:27:17:
3f:d5:f3:3a:00:27:6e:65:ee:94:e1:f9:79:29:88:86:10:0c:
97:4b:16:a3:68:b0:13:ad:c5:ee:d3:f7:7a:7b:af:ef:07:3d:
81:a9:8b:27:4f:ce:aa:f8:dd:3c:8b:d7:ac:f4:1b:2b:0a:01:
ed:6b:d0:f8:ec:18:7b:1b:13:47:35:41:19:57:f8:01:ad:6a:
90:07:de:2d:53:3f:1d:3b:06:78:ee:4f:31:59:58:a2:b9:ba:
90:e6:4a:5b:f8:31:9d:76:ad:0b:7b:61:b1:65:70:51:72:92:
e6:f5:9c:b9:ed:5c:e7:75:20:e1:e0:1a:5f:d5:ce:cd:3c:d3:
e6:6b:89:af:05:69:a0:5d:29:09:0e:fa:e5:d6:29:c9:7f:c0:
24:f7:6b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:47:37 2026 by rpki-client