
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa
File: 5463f2e9-c071-45ba-a891-46817c1759f6.roa (raw, json)
Hash identifier: NoNmAK6m9NhQVfdUVdT0VhRMLw/mI4k28AhSibKRQP0=
Subject key identifier: 94:99:80:17:DF:82:19:8F:26:F6:EC:7C:9E:E8:9E:4A:52:49:62:12
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6400EA2394D6D3813C72F9C8C541F448389F10AF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa
Signing time: Thu 23 Jul 2026 15:00:32 +0000
ROA not before: Thu 23 Jul 2026 15:00:32 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:611a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:00:ea:23:94:d6:d3:81:3c:72:f9:c8:c5:41:f4:48:38:9f:10:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 23 15:00:32 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=e1e2865fb54208167f0c6824fa6bef2b29cb8bab92c76065eed6be9c7b5e8394, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:29:90:b6:b8:b5:62:7f:53:ec:c3:cc:29:
de:60:c9:66:dc:75:86:95:a6:86:a9:a4:87:3b:74:
a0:68:c7:ea:ce:b6:80:ac:5a:e5:2b:77:c5:d9:89:
49:55:83:1d:1e:f8:61:ed:b0:29:f0:f2:e7:ac:35:
0e:02:90:32:64:10:37:5a:a5:7c:df:a9:12:9b:2f:
81:3a:40:27:e0:fe:9f:54:5f:68:99:5a:a1:40:0a:
c0:0d:95:6f:a9:b7:b8:2b:c2:d2:e3:be:30:a2:d1:
56:66:f9:70:2d:3a:97:25:e0:1e:7f:4b:a7:63:f4:
fd:63:10:af:5a:f8:ee:5b:d0:c2:bf:0d:dd:45:77:
89:87:fc:0f:e6:20:3a:6c:9f:eb:81:53:f0:97:43:
a2:62:1e:a1:17:fc:16:b6:0c:a6:95:46:98:e5:f8:
48:b3:ed:92:5d:73:d3:69:14:39:59:2f:0d:f1:07:
68:13:d3:0f:87:e1:5e:ac:ec:47:4d:3c:da:b1:1f:
4a:cb:3a:9f:d1:6b:8f:39:70:8f:2f:56:9b:90:25:
72:44:a2:a8:9f:34:8d:8a:e4:c5:06:49:c1:6a:3b:
49:46:08:af:cf:20:4a:52:91:b2:a7:59:09:13:e8:
67:a2:0a:bf:8a:c8:26:5f:b6:a0:b8:c8:ed:2f:e8:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:80:17:DF:82:19:8F:26:F6:EC:7C:9E:E8:9E:4A:52:49:62:12
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5463f2e9-c071-45ba-a891-46817c1759f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:611a::/48
Signature Algorithm: sha256WithRSAEncryption
a6:56:18:4b:d8:a6:78:6c:49:4f:d9:1f:1b:94:ca:40:b0:b6:
a7:2f:8e:37:67:de:af:00:fe:f5:a8:5a:ef:b3:b7:82:91:26:
fc:f6:e8:6b:d6:3e:37:27:0d:dd:79:c4:d0:ac:56:33:f6:d3:
7f:a7:4a:d5:ed:56:12:7c:a0:ac:a5:fe:e2:d9:44:bd:f3:c2:
37:2b:ce:ee:72:31:a6:b6:d5:0e:83:29:fe:c0:be:ef:97:5d:
8e:79:1c:e7:bd:3a:db:cd:f9:56:ae:06:b7:12:ca:0d:62:05:
be:36:a7:4f:15:00:43:b3:8e:cd:17:66:9a:ff:b1:08:d5:97:
8b:c3:51:b6:60:21:5b:c9:e4:50:64:2c:6f:5c:f5:5d:b0:8e:
2b:62:ac:8d:f1:62:b7:66:08:2a:55:d5:aa:6d:76:98:09:ee:
2c:b7:08:4b:fd:a1:a4:5f:1e:1c:e4:94:32:2c:74:71:34:15:
d7:0a:69:83:21:f8:6f:47:fb:a6:84:ea:d8:27:70:c2:0d:56:
9d:53:35:ca:23:1c:7a:15:0e:8f:e1:33:b1:a6:3c:6f:60:45:
15:7d:b6:f6:2d:7b:53:ef:b6:36:c7:49:cb:d7:66:02:17:75:
2a:25:41:9d:42:c5:a9:e7:d3:10:d5:a8:15:19:f9:9e:54:03:
04:d4:e7:19
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZADqI5TW04E8cvnIxUH0SDifEK8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUwMDMyWhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BlMWUyODY1ZmI1NDIwODE2N2YwYzY4MjRmYTZiZWYyYjI5
Y2I4YmFiOTJjNzYwNjVlZWQ2YmU5YzdiNWU4Mzk0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC73SmQtri1Yn9T7MPMKd5gyWbcdYaVpoappIc7dKBox+rO
toCsWuUrd8XZiUlVgx0e+GHtsCnw8uesNQ4CkDJkEDdapXzfqRKbL4E6QCfg/p9U
X2iZWqFACsANlW+pt7grwtLjvjCi0VZm+XAtOpcl4B5/S6dj9P1jEK9a+O5b0MK/
Dd1Fd4mH/A/mIDpsn+uBU/CXQ6JiHqEX/Ba2DKaVRpjl+Eiz7ZJdc9NpFDlZLw3x
B2gT0w+H4V6s7EdNPNqxH0rLOp/Ra485cI8vVpuQJXJEoqifNI2K5MUGScFqO0lG
CK/PIEpSkbKnWQkT6GeiCr+KyCZftqC4yO0v6KGpAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUlJmAF9+CGY8m9ux8nuieSlJJYhIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzU0NjNmMmU5LWMwNzEtNDViYS1hODkxLTQ2ODE3YzE3NTlmNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYRowDQYJKoZIhvcNAQELBQADggEBAKZWGEvYpnhsSU/ZHxuUykCw
tqcvjjdn3q8A/vWoWu+zt4KRJvz26GvWPjcnDd15xNCsVjP203+nStXtVhJ8oKyl
/uLZRL3zwjcrzu5yMaa21Q6DKf7Avu+XXY55HOe9OtvN+VauBrcSyg1iBb42p08V
AEOzjs0XZpr/sQjVl4vDUbZgIVvJ5FBkLG9c9V2wjitirI3xYrdmCCpV1aptdpgJ
7iy3CEv9oaRfHhzklDIsdHE0FdcKaYMh+G9H+6aE6tgncMINVp1TNcojHHoVDo/h
M7GmPG9gRRV9tvYte1PvtjbHScvXZgIXdSolQZ1Cxann0xDVqBUZ+Z5UAwTU5xk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:02 2026 by rpki-client