
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa
File: c686f937-000a-490a-846c-e2773b637b26.roa (raw, json)
Hash identifier: tPWCaxPNqmCFzTarKeGacvpq8pgHiQo0ZecQewHwZuc=
Subject key identifier: A2:B3:AB:FE:3C:8D:E4:31:36:2D:2B:6E:06:1E:95:3C:12:9F:80:AA
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 1571045E1AC937375849B913AAF3F332DC8A3813
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa
Signing time: Fri 08 May 2026 00:00:52 +0000
ROA not before: Fri 08 May 2026 00:00:52 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2606:f40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:71:04:5e:1a:c9:37:37:58:49:b9:13:aa:f3:f3:32:dc:8a:38:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: May 8 00:00:52 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=a68f1f9fcb16207c678315ce979117c07384e49c6c1dd9b3335a97bcf97a0180, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:af:ad:7d:ec:b9:40:04:8c:c2:b2:44:8f:
46:ab:ba:7b:cc:3a:ff:20:1e:fd:25:3a:1e:d7:7f:
3c:71:2c:46:51:bf:12:47:dc:83:4b:9c:ea:75:6e:
da:88:c3:59:11:6a:2b:96:86:75:72:bb:18:23:23:
d0:ba:d5:c7:24:0b:51:2f:ed:ea:14:78:12:81:1b:
b9:16:ce:c4:ec:13:04:f9:e9:ed:4b:94:0b:19:90:
0f:61:ec:77:c2:27:66:1a:7e:84:86:f4:90:54:e1:
e6:3d:13:6c:b8:eb:1a:23:14:d9:5d:98:4f:91:24:
72:f7:ae:86:3e:31:8b:01:a2:ba:e7:1d:a2:f0:e5:
97:35:e4:38:f0:3f:4c:c5:ca:99:84:d0:ab:78:e5:
f9:ab:d3:bb:e8:fd:2e:48:d4:68:3c:93:9a:47:8f:
4c:74:11:e3:3b:dd:43:86:c7:2c:33:82:2b:6a:1f:
03:cd:d0:0e:d1:8d:5a:b6:25:56:12:7d:c3:86:c6:
55:31:d2:44:92:96:0f:1a:87:d0:fc:52:57:fe:9c:
21:e7:5d:9e:cb:19:a2:c4:ac:0f:19:df:07:4e:10:
ac:12:02:ae:e4:b7:f9:1f:2d:e0:2b:d5:31:b0:95:
cc:d0:2f:7c:4f:73:35:f1:bd:d6:f3:c0:41:06:06:
82:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:AB:FE:3C:8D:E4:31:36:2D:2B:6E:06:1E:95:3C:12:9F:80:AA
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/c686f937-000a-490a-846c-e2773b637b26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:f40::/32
Signature Algorithm: sha256WithRSAEncryption
66:9a:f4:ea:3d:e0:21:c8:44:c4:65:cf:e3:ee:a6:74:18:37:
32:6e:f3:e6:30:86:c2:92:bb:09:ff:ff:01:3f:5f:25:f6:9b:
54:5f:a6:73:69:c8:13:7d:68:de:09:c2:e0:36:6f:b2:20:75:
af:14:67:b4:4e:e7:da:9d:c6:c8:62:42:10:eb:f2:d0:3a:9a:
50:f3:c2:5f:49:eb:6e:05:7c:a9:1f:3f:88:46:cb:13:6b:13:
c8:02:96:2d:0b:bb:d8:7f:b0:90:51:9f:2d:60:7b:fe:63:83:
b5:99:21:9c:eb:7b:ce:2b:cf:c9:ab:98:fb:aa:cd:2b:17:29:
83:9c:b6:4b:c9:4e:f0:f9:24:50:26:35:5c:38:ae:78:f0:e1:
21:bd:e3:5a:7e:42:cf:49:9b:f9:f3:13:82:26:b1:b7:c5:7e:
dd:81:ef:cb:8d:34:22:01:ee:74:db:61:79:9a:f2:b4:e6:25:
ac:22:21:f2:32:cd:9b:a0:32:27:aa:ee:18:f3:97:02:2c:b8:
2c:42:a0:de:5a:b5:eb:e2:67:2d:97:81:1b:95:3a:2b:80:ed:
17:16:ba:ac:2d:91:e9:37:d7:0b:62:d3:07:90:f8:8d:ab:59:
7a:f8:2b:ee:3c:ba:18:9a:54:8d:6d:37:6a:58:cc:72:01:e6:
39:91:85:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:05:12 2026 by rpki-client