
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d918b08-5949-4bd8-b2b5-7d51afda2a59.roa
File: 0d918b08-5949-4bd8-b2b5-7d51afda2a59.roa (raw, json)
Hash identifier: FD3mCtWhEPq3huyYq8rJ9abySZRSRar+rOLersPumC0=
Subject key identifier: 36:62:1F:D0:35:62:EB:BE:1D:C0:E7:5E:51:25:5A:05:D1:5F:82:65
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 13947B2EE21E6196038052344A0BB578655EAD5D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d918b08-5949-4bd8-b2b5-7d51afda2a59.roa
Signing time: Sat 18 Jul 2026 00:00:05 +0000
ROA not before: Sat 18 Jul 2026 00:00:05 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f1:14::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:94:7b:2e:e2:1e:61:96:03:80:52:34:4a:0b:b5:78:65:5e:ad:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 18 00:00:05 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=01d61a2daf62ddc0cd580eee9a751fc26c981544f848c25fd06d432760bb0ae4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:bd:7b:1d:3a:c0:7f:9b:76:22:53:63:dd:87:
78:0d:e9:15:1b:a4:02:86:87:ed:f3:4c:3f:c3:a1:
cc:3a:92:c9:3c:b8:7b:13:a8:16:ef:77:73:d9:8b:
c4:80:3b:10:b7:11:a6:f0:37:b3:bc:68:ee:dd:fa:
92:a5:0d:f5:d8:3f:11:40:98:68:6e:ad:31:17:d5:
40:20:9a:98:0f:d7:ae:e1:b5:bb:d3:dd:d6:fd:8f:
00:cb:02:a3:21:0e:6c:99:7c:2f:39:11:0d:dc:28:
4d:d9:b3:90:9f:41:15:a9:57:16:f7:a3:0f:3b:d9:
39:50:da:6d:e0:39:33:c3:13:8b:f0:6c:c4:47:27:
7f:55:cb:9c:44:ea:0e:53:07:0e:3d:f5:5d:ea:23:
02:86:51:1a:25:5b:03:07:b6:ca:5e:26:a4:4f:0d:
6d:10:4c:2f:2f:15:53:28:8b:1c:e5:88:ff:86:ae:
15:6d:96:93:d5:eb:2b:db:f4:10:ab:5a:22:94:e7:
78:bd:fc:ba:3a:2b:64:c1:4d:df:f4:ed:1c:d4:2b:
0f:ea:9e:b4:28:bc:41:59:ef:e2:f0:d7:1f:34:b0:
60:11:38:01:f4:3c:8d:d0:ad:db:3d:4e:7e:29:7b:
f6:c1:15:c8:0b:c8:74:ae:87:1d:ee:61:92:35:7f:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:1F:D0:35:62:EB:BE:1D:C0:E7:5E:51:25:5A:05:D1:5F:82:65
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0d918b08-5949-4bd8-b2b5-7d51afda2a59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:14::/46
Signature Algorithm: sha256WithRSAEncryption
94:ac:40:da:85:c1:a6:ec:f2:eb:1a:ab:f4:cc:8b:2f:b1:a7:
25:81:50:96:e8:55:33:03:cc:32:d0:04:9b:e3:89:7f:0c:0e:
3d:24:9f:4e:a3:5a:c6:41:d1:90:39:f8:29:d8:06:fd:ac:ae:
9c:4e:4c:47:af:29:f9:61:9b:e4:e6:48:51:b9:67:80:32:65:
8d:1c:88:10:20:22:c0:ba:2d:54:65:6e:05:0a:5f:aa:3f:9e:
0d:79:99:0e:6e:be:6a:0d:a1:7e:c1:18:20:dd:2f:5e:11:ad:
82:06:ee:fe:20:c1:b1:9a:94:d4:cc:ff:f5:66:5c:53:ff:14:
94:f8:34:db:d0:ca:f2:7e:86:a2:12:10:61:4c:4f:15:d1:4d:
e4:03:4a:82:c4:6b:cd:c0:ae:13:6c:6c:f9:97:a3:ba:9e:4c:
d4:58:7b:f0:e7:c3:f6:18:f3:06:b2:62:98:b6:6e:98:08:45:
db:af:b7:13:23:6b:b1:42:ce:5f:21:44:59:72:64:03:7c:2f:
d3:48:76:0e:76:ab:1c:68:f0:ec:bb:70:86:a5:37:1d:b8:51:
b8:b6:cc:6d:63:ad:17:50:9d:0d:9a:3b:1a:e7:07:e9:79:00:
dc:e3:47:a8:2f:68:30:a5:43:30:54:e5:48:12:cf:12:82:44:
20:eb:20:4f
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUE5R7LuIeYZYDgFI0Sgu1eGVerV0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzE4MDAwMDA1WhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0AwMWQ2MWEyZGFmNjJkZGMwY2Q1ODBlZWU5YTc1MWZjMjZj
OTgxNTQ0Zjg0OGMyNWZkMDZkNDMyNzYwYmIwYWU0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDWvXsdOsB/m3YiU2Pdh3gN6RUbpAKGh+3zTD/Docw6ksk8
uHsTqBbvd3PZi8SAOxC3EabwN7O8aO7d+pKlDfXYPxFAmGhurTEX1UAgmpgP167h
tbvT3db9jwDLAqMhDmyZfC85EQ3cKE3Zs5CfQRWpVxb3ow872TlQ2m3gOTPDE4vw
bMRHJ39Vy5xE6g5TBw499V3qIwKGURolWwMHtspeJqRPDW0QTC8vFVMoixzliP+G
rhVtlpPV6yvb9BCrWiKU53i9/Lo6K2TBTd/07RzUKw/qnrQovEFZ7+Lw1x80sGAR
OAH0PI3Qrds9Tn4pe/bBFcgLyHSuhx3uYZI1fy8PAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUNmIf0DVi674dwOdeUSVaBdFfgmUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzBkOTE4YjA4LTU5NDktNGJkOC1iMmI1LTdkNTFhZmRhMmE1OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwImAPDxABQwDQYJKoZIhvcNAQELBQADggEBAJSsQNqFwabs8usaq/TMiy+x
pyWBUJboVTMDzDLQBJvjiX8MDj0kn06jWsZB0ZA5+CnYBv2srpxOTEevKflhm+Tm
SFG5Z4AyZY0ciBAgIsC6LVRlbgUKX6o/ng15mQ5uvmoNoX7BGCDdL14RrYIG7v4g
wbGalNTM//VmXFP/FJT4NNvQyvJ+hqISEGFMTxXRTeQDSoLEa83ArhNsbPmXo7qe
TNRYe/Dnw/YY8wayYpi2bpgIRduvtxMja7FCzl8hRFlyZAN8L9NIdg52qxxo8Oy7
cIalNx24Ubi2zG1jrRdQnQ2aOxrnB+l5ANzjR6gvaDClQzBU5UgSzxKCRCDrIE8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:50:36 2026 by rpki-client