
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa
File: b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa (raw, json)
Hash identifier: Z/svtq6HPy4GsInGbM7k5XnnFLl5naP3jqI8g4qVz/o=
Subject key identifier: 51:44:B7:50:AF:CF:F5:9D:F9:F6:83:B7:E0:26:FB:0F:11:5C:EC:3F
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5BC7EBD9F1E04BCFA8E50AC54217ADA560BC88
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa
Signing time: Fri 08 May 2026 00:30:47 +0000
ROA not before: Fri 08 May 2026 00:30:47 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:1f15:c800::/37 maxlen: 37
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c7:eb:d9:f1:e0:4b:cf:a8:e5:0a:c5:42:17:ad:a5:60:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 8 00:30:47 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=74f4de6695475efcf66581c5a392b259444f8bfc3a86ed3efb1d379f01adbeae, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:27:17:3a:7c:73:d6:a5:4f:5d:bb:5e:c9:ca:
26:0c:d0:6c:e9:6d:0a:fa:8f:83:30:8d:a7:af:25:
69:81:c3:86:df:82:94:e7:1c:ae:37:42:c4:f3:2f:
4a:c3:da:d7:08:6d:47:fb:91:c3:e2:3f:26:db:aa:
1a:f1:65:01:08:f9:91:c6:8c:c9:8e:e4:96:7e:aa:
48:25:9f:e3:67:8d:6a:a9:bf:78:e6:33:9e:e1:0f:
34:c2:86:fa:96:15:b1:18:29:2e:d0:9d:bc:7e:cd:
4f:4e:a4:a6:60:03:8c:06:a2:aa:c1:37:6b:1b:c8:
5d:38:3e:b8:0c:fb:aa:8d:2e:73:7a:4e:0a:07:8f:
cd:7d:ec:ba:24:a3:b6:2c:28:64:86:bf:9a:d0:a6:
0a:78:70:e5:f7:d0:24:98:53:96:1b:15:1c:ac:21:
9e:5a:67:54:24:b6:29:f6:ad:6c:7d:9e:cd:fb:24:
5b:ad:50:fa:7c:c7:82:b7:26:87:fe:32:ee:11:44:
d0:2d:c7:37:b8:af:44:1e:05:64:44:07:d5:91:48:
2b:93:5d:47:51:bc:c1:84:e3:b2:21:83:10:63:84:
dc:2c:3b:cd:1c:27:d5:be:7a:39:8e:f4:61:b0:42:
38:ab:78:6d:80:96:0e:da:b2:08:7c:78:a2:e0:b6:
8d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:44:B7:50:AF:CF:F5:9D:F9:F6:83:B7:E0:26:FB:0F:11:5C:EC:3F
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/b2f7eaf5-fb23-4e3d-8236-f34d872d769a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:1f15:c800::/37
Signature Algorithm: sha256WithRSAEncryption
ac:80:bb:8b:ff:f7:38:4f:72:49:36:2b:3e:01:1c:86:90:27:
9d:19:27:d6:60:31:91:9f:bb:3b:1d:41:13:89:b0:2d:50:41:
a8:91:4a:d2:79:8b:97:bb:07:d3:b5:a7:23:d5:dc:e6:0e:29:
94:cf:03:4a:17:15:e7:a3:83:58:b4:60:e0:b0:33:11:ef:85:
3d:c0:b9:bf:86:f7:83:02:db:a2:ac:57:39:2c:2e:39:5f:4a:
f6:66:de:f6:14:ea:1f:f3:6e:74:6f:d9:41:26:aa:90:f0:88:
12:27:b9:d4:ab:8a:84:13:ab:c8:dd:bd:a4:58:0a:ff:f2:aa:
fd:f9:41:ab:52:54:09:e3:9a:2c:67:93:ab:af:7d:ce:fd:35:
45:5d:36:a5:44:a7:a7:68:ed:2c:79:c5:30:c1:13:d1:b4:ee:
22:67:da:82:93:cd:34:b9:39:ea:6b:5b:6c:95:1e:0b:62:a1:
c0:fe:0c:5e:e3:b4:60:dd:c7:66:b5:f2:04:65:6e:04:12:8b:
12:64:6a:c1:c8:17:d0:e3:65:97:f0:8d:58:52:7b:db:80:11:
92:9f:82:4e:25:9b:d2:a0:b1:ff:b9:c0:9d:d3:cd:49:f0:77:
7a:f3:6e:3d:50:62:71:da:18:f2:04:ff:38:cd:f3:90:76:f8:
69:74:53:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:03 2026 by rpki-client