
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/8c9c4759-1a2c-4b10-83fa-7437ca673594.roa
File: 8c9c4759-1a2c-4b10-83fa-7437ca673594.roa (raw, json)
Hash identifier: LEaXOf8HL9bLWN09RnWDrbsZgWDNkg+Csd4WahTmYGM=
Subject key identifier: AB:5B:AE:57:28:42:CF:AD:4B:C6:17:66:9D:B7:CE:2D:0F:13:EF:13
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 1FD73D7955C53D51F4040E2D1C7A18FC08EC6615
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/8c9c4759-1a2c-4b10-83fa-7437ca673594.roa
Signing time: Wed 21 Oct 2026 00:09:18 +0000
ROA not before: Wed 21 Oct 2026 00:09:18 +0000
ROA not after: Tue 19 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2605:8380:1300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d7:3d:79:55:c5:3d:51:f4:04:0e:2d:1c:7a:18:fc:08:ec:66:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Oct 21 00:09:18 2026 GMT
Not After : Jan 19 23:59:59 2027 GMT
Subject: serialNumber=bbed4f43bb4a9331189458eebdc63026509fd325aabdc06cb98d96b6a4b981b0, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:28:90:73:6f:62:17:ea:ed:fa:ea:f8:78:ec:
52:b0:18:95:31:0f:f9:d1:a9:d8:98:30:8b:4f:ea:
fd:12:17:3c:c6:8c:39:1a:bb:f9:07:d0:33:9b:eb:
eb:60:a7:dc:4a:28:bd:a9:17:34:65:1d:36:52:04:
69:86:6b:ba:a8:b1:7c:33:03:09:ce:98:55:9c:08:
66:4b:c5:b7:bd:f6:30:26:5c:0d:41:92:46:92:70:
8e:3e:70:f3:4e:72:ca:78:b7:22:e9:69:2f:28:48:
80:3d:80:b5:33:d3:30:4a:c1:ce:cc:44:09:81:e1:
09:d5:33:9a:b2:6a:b1:18:a0:6b:2b:48:02:0c:9e:
66:6c:d1:5c:f3:aa:a5:f7:5a:37:3b:85:43:36:85:
78:e8:59:fa:ad:e4:2c:d9:6f:e2:74:10:76:e1:5d:
cb:42:74:16:6e:f9:ee:1e:17:ee:36:23:96:87:45:
57:b1:08:8c:1f:ba:96:85:06:8b:92:4c:69:6d:ae:
b2:83:db:09:78:13:77:d5:b8:e2:26:0e:03:bb:1b:
6b:4a:5c:cf:d5:2b:f2:b1:8b:d6:5f:7d:74:1d:5d:
99:ab:56:d0:c4:1e:53:07:e9:a1:42:df:bd:76:15:
51:4b:2c:42:19:98:7d:9d:2f:7c:1b:0d:3e:de:a0:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:AE:57:28:42:CF:AD:4B:C6:17:66:9D:B7:CE:2D:0F:13:EF:13
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/8c9c4759-1a2c-4b10-83fa-7437ca673594.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:8380:1300::/40
Signature Algorithm: sha256WithRSAEncryption
04:9e:4e:7d:bc:13:7d:ff:a2:a8:23:20:af:80:9a:e5:82:11:
29:fc:82:d3:f5:61:c8:3e:60:9c:75:09:c8:2c:bd:c4:2d:d6:
3f:36:08:02:88:d9:be:92:07:24:54:fe:f7:3d:c2:8c:8f:41:
ea:fd:53:ae:07:f5:0a:6b:c3:0e:85:5f:bc:e8:a0:11:e2:3a:
34:2f:3e:91:25:76:cf:34:03:7f:8a:30:81:93:63:78:f6:e8:
81:56:72:04:f6:c3:f0:1d:4d:bd:41:07:b0:ad:81:d9:a5:ba:
24:e4:25:60:35:86:a8:25:5f:4a:ff:a7:d4:31:b0:48:56:6c:
30:cf:b8:9b:c9:d6:80:22:2c:08:d7:69:82:89:68:b7:8c:38:
39:48:15:ec:b2:7b:6d:c5:d0:0b:b4:2d:3a:dc:43:ea:57:d5:
0a:c2:ff:38:e7:ea:2b:8c:0d:d3:6f:c0:73:2c:c1:31:f2:4c:
15:12:ef:0d:74:45:7f:ad:2d:d7:46:96:68:4c:96:34:30:de:
c0:a0:66:9f:71:9a:eb:7e:51:04:77:a1:c9:fe:f6:92:0d:59:
1b:61:82:19:4c:0d:8d:74:dc:ec:86:8a:14:83:bc:2f:60:18:
3b:9a:b4:ef:b9:f5:76:99:16:6b:ef:53:af:a9:97:0c:8e:be:
18:cc:ce:fc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 12 16:16:53 2026 by rpki-client