
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa
File: 332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa (raw, json)
Hash identifier: FxB1XFsTwArfWn3i3wS/4Qg3aNUNVpsl9uaSeHZBP4g=
Subject key identifier: A8:83:8F:E5:D9:9F:1A:A0:5B:5B:29:60:46:9C:2E:E2:22:2B:C4:72
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 33EDC701467E44013822BEEC32A8293FBB2D38A8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa
Signing time: Thu 09 Jul 2026 00:00:08 +0000
ROA not before: Thu 09 Jul 2026 00:00:08 +0000
ROA not after: Wed 07 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f1:8a00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ed:c7:01:46:7e:44:01:38:22:be:ec:32:a8:29:3f:bb:2d:38:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 9 00:00:08 2026 GMT
Not After : Oct 7 23:59:59 2026 GMT
Subject: serialNumber=a433e202af60f7616dbab75457e6b6d9562d0de122dfd1c06c2e33e696adbaaa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:3a:70:a5:4a:2e:86:6b:b9:57:40:12:62:
c5:5e:f1:17:62:1a:c3:93:d2:a0:da:0e:a9:f0:98:
3f:e8:e6:44:4a:79:8b:6f:00:a0:f6:fc:bf:de:1f:
55:8f:19:1c:35:78:3a:da:46:52:d5:18:d1:6d:93:
35:e1:26:c8:11:a4:9d:1a:22:fa:2e:70:47:0c:96:
03:46:13:b3:8f:a8:d5:01:c0:c4:c6:aa:7a:43:a4:
9e:05:3a:c8:c2:11:0a:88:cc:16:25:cf:d0:34:b6:
1b:0c:02:20:2a:d4:d3:bc:6e:08:a3:e1:b5:3b:fd:
ad:2d:b4:fb:66:6b:56:43:98:fc:e6:d8:27:9a:de:
d9:e8:6d:44:30:8a:b2:6a:6f:36:4f:bc:f3:33:96:
76:32:c5:72:eb:34:87:37:dd:b2:db:ac:da:56:69:
b8:42:d5:52:01:20:b0:6e:36:11:a9:12:49:da:ee:
79:75:29:6e:c8:ad:8e:75:84:dd:e9:20:cd:bc:eb:
0b:10:93:19:86:a2:2e:48:9d:33:4b:52:fc:e6:56:
ad:38:16:e1:41:98:77:81:b4:ab:2e:8a:5a:04:1f:
a6:b1:95:60:7a:d9:5a:97:77:8b:03:c2:f2:f7:de:
8b:16:c9:92:a1:0e:40:6c:12:b9:5f:49:b7:fb:d8:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:83:8F:E5:D9:9F:1A:A0:5B:5B:29:60:46:9C:2E:E2:22:2B:C4:72
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/332b30d9-b6cd-4931-94c2-b827ba9c7d7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:8a00::/44
Signature Algorithm: sha256WithRSAEncryption
56:ed:45:f6:5a:6f:8a:1e:d5:8a:40:42:44:49:a4:9f:c0:3e:
61:e0:4c:63:d7:60:30:b9:4a:51:bb:9d:c8:03:e5:ee:43:ab:
ec:db:58:ca:85:a3:ca:de:9a:21:91:e1:53:a8:ef:f5:b1:f0:
36:e6:41:83:00:26:ae:4e:01:a6:d6:81:45:b1:df:de:78:67:
35:bc:a4:59:d4:fc:76:3e:3b:1c:79:73:36:1b:95:a6:bb:8d:
9d:06:7e:6d:b6:0b:2f:c5:b8:1e:bb:f2:13:f7:5a:a9:af:ce:
2a:d5:47:b9:ed:3c:26:99:24:48:fc:67:76:e7:cd:ff:96:05:
0b:1c:31:52:d5:b5:e8:c4:cb:42:05:5d:a3:de:94:44:fc:a7:
69:f7:81:72:3a:e8:95:14:d6:5a:d0:35:32:25:8e:d3:be:fc:
f4:fa:d4:cd:6e:61:3c:51:18:d0:2a:c9:da:9b:51:61:05:65:
c4:07:76:da:58:df:9f:dc:e6:99:95:ac:4b:14:b2:51:74:49:
bb:9a:38:5e:fa:c5:b5:7a:8e:44:21:a2:d4:30:75:a9:2b:05:
84:aa:00:6b:56:b7:b8:20:9a:9a:6d:47:a1:8e:c1:5c:64:7d:
fc:61:18:e1:e4:dc:38:fc:e4:f7:44:5f:a5:63:72:ea:0a:40:
ad:1a:6d:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:50:50 2026 by rpki-client