
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa
File: 5839d967-961c-4062-bf2f-ef1c508fea8e.roa (raw, json)
Hash identifier: BCnGE6nHUt1G9VvmeN3kqkj73CtglauoJtnnqQj72HY=
Subject key identifier: B1:C5:17:A6:E9:89:DC:DE:60:28:EC:34:E0:81:91:49:83:CC:B5:AD
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 727DDF38908F998B172E2FCF007DAFB53157E7
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa
Signing time: Thu 23 Jul 2026 15:10:12 +0000
ROA not before: Thu 23 Jul 2026 15:10:12 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:611e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:7d:df:38:90:8f:99:8b:17:2e:2f:cf:00:7d:af:b5:31:57:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 23 15:10:12 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=979614878a8b2c3a512802e085a412273d92e2a73aa6c7ec54a0986df27c2c0a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:06:1b:b2:6f:1d:f7:4c:03:64:65:0d:17:
36:11:61:33:bb:bb:2e:da:b4:01:2b:95:8a:3e:b2:
1f:2b:9a:fb:be:7c:b6:0d:14:94:67:e5:1d:59:c1:
8a:98:59:22:e6:88:86:8d:45:fc:fb:db:c7:de:22:
86:26:fc:41:60:6d:02:86:30:26:22:14:1f:e1:99:
ca:c5:34:71:0e:5b:34:a8:c0:e4:ed:f4:0b:62:08:
05:f1:70:ed:6a:15:9f:29:e8:d0:3e:1b:6f:dc:69:
95:19:66:78:fe:d8:2c:e0:f1:38:43:e8:41:44:22:
4a:63:28:d6:79:7f:b5:af:e9:2e:fe:c1:22:b8:bb:
de:62:00:d4:0c:d4:a6:36:48:47:e6:22:23:1c:20:
cd:d0:61:f3:54:1f:ca:40:81:25:79:7f:a1:ca:d2:
dc:50:91:59:64:7e:49:83:08:17:6d:1c:19:fc:c4:
9e:dc:40:97:7a:86:62:b3:23:bd:27:03:78:8a:75:
17:5c:38:d2:2d:45:8a:22:1a:c3:85:b6:21:d6:d7:
aa:e7:e2:c8:d1:6f:93:4a:59:bb:a8:c3:72:82:58:
b6:b6:57:eb:e2:26:57:05:2d:35:7e:ae:12:fd:82:
4e:4a:a0:8f:c5:f7:57:02:98:26:fb:9f:e1:dd:b5:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C5:17:A6:E9:89:DC:DE:60:28:EC:34:E0:81:91:49:83:CC:B5:AD
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5839d967-961c-4062-bf2f-ef1c508fea8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:611e::/48
Signature Algorithm: sha256WithRSAEncryption
15:74:db:05:d1:a9:34:f7:a7:f7:9d:bd:4e:51:0f:39:ff:5d:
e8:71:bd:89:a3:05:0c:6d:f8:b4:8f:13:b0:cb:91:b5:ca:df:
fe:9a:58:39:11:96:07:f1:e4:99:23:95:9f:33:e7:6b:4f:54:
97:e4:84:79:b6:fa:04:60:9c:e0:a4:5c:98:67:99:16:22:73:
aa:61:dd:56:83:be:91:cc:2f:db:cb:85:79:b1:c6:17:26:7e:
fc:92:f4:39:d2:03:cf:af:7a:7f:ad:e0:d0:59:ec:b2:f0:fc:
89:fb:f3:a1:d1:18:14:26:4d:36:1f:93:62:79:ee:83:24:a9:
96:c8:a1:b5:ff:e0:2f:b7:cd:22:c7:3b:c7:ce:0f:ac:64:2a:
f8:6b:bd:e9:b5:eb:8f:31:fd:8f:d5:ae:a8:6d:23:13:14:b4:
dc:99:3b:1f:1d:a2:00:e8:98:54:2b:80:98:b4:70:6a:9f:51:
1b:58:1f:20:e0:7d:a8:e0:c9:d0:c5:66:ab:e6:ab:b4:f3:be:
e7:e8:a1:38:bf:3d:dc:dc:35:65:84:be:3d:5c:af:47:34:ab:
65:95:a0:b9:1b:ac:bb:51:41:4b:83:f9:97:8a:90:c6:79:54:
7f:fc:86:49:f7:a4:bc:f7:d3:44:6a:b9:aa:e7:86:82:8d:82:
45:56:a3:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:41:32 2026 by rpki-client