
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa
File: 75c1ad27-f269-4ce6-80db-a3279c123941.roa (raw, json)
Hash identifier: tPBK784kUOrIcGbN4583IhK5JN/MDvKaI4SoOqjXd9A=
Subject key identifier: 3E:AB:FB:52:24:97:53:B5:B7:3B:AA:7E:7F:63:4D:BC:89:35:50:F1
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 70FF054B0DDF9DA9923441158898B5018411A177
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa
Signing time: Thu 23 Jul 2026 15:00:04 +0000
ROA not before: Thu 23 Jul 2026 15:00:04 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:610d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:ff:05:4b:0d:df:9d:a9:92:34:41:15:88:98:b5:01:84:11:a1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 23 15:00:04 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=af565ae4e40eb1fdcf4e8bfe795e4e4870ee63c498cef6c7e1b6b524e5ad5e23, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:be:f6:8b:b7:d8:6d:43:63:82:13:3f:2b:
60:56:10:04:be:f5:14:a7:67:cc:f2:63:a2:37:a8:
18:26:92:23:81:ab:53:66:af:75:60:90:1c:3e:59:
5b:4b:12:48:78:d6:f0:56:b9:64:fe:a8:8b:53:71:
60:4d:e7:d5:32:8a:60:8f:bd:ce:0b:a2:9a:9f:e1:
c2:43:2d:62:f2:f7:bb:6b:7d:e6:31:e6:a4:e7:8d:
06:e7:0e:b0:f7:14:f4:f2:f6:b4:19:fd:8a:ee:12:
c5:49:aa:f8:d0:ca:36:3b:79:8e:20:33:b4:ee:32:
40:c3:e0:63:1b:23:e0:4c:5c:3a:9e:f5:a6:0b:0e:
ac:46:d5:e4:dc:3e:a9:da:78:d7:2e:7f:3d:ce:ff:
39:da:9f:aa:cd:38:92:bc:d2:4e:e7:e7:f7:d5:0c:
8f:11:14:62:ef:d6:4b:70:8d:84:bd:43:3e:f5:16:
85:50:64:39:62:be:01:cc:de:6a:f7:e2:73:93:69:
0d:f4:4f:6a:76:92:5f:16:a8:a6:f0:54:45:e5:0b:
ae:c8:86:d4:d5:f5:b2:92:06:91:35:ae:2b:c3:8f:
89:18:af:f3:6f:31:c2:ea:ac:0c:2e:6d:57:76:19:
dd:ce:0e:f4:bb:6e:54:8a:f8:1a:80:c4:c2:ab:be:
11:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:AB:FB:52:24:97:53:B5:B7:3B:AA:7E:7F:63:4D:BC:89:35:50:F1
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/75c1ad27-f269-4ce6-80db-a3279c123941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:610d::/48
Signature Algorithm: sha256WithRSAEncryption
51:c5:40:4e:16:47:72:1c:e2:92:e0:1d:51:a2:6a:d4:78:b2:
df:45:e7:04:bc:73:f5:f8:24:5b:55:e1:27:57:7e:64:2d:ec:
03:c7:01:2f:3b:4c:8e:40:af:12:ac:4d:20:9a:02:f0:0d:7f:
f6:61:33:1c:0e:1a:eb:e9:ec:46:5d:d9:d9:79:90:bf:af:34:
d6:b9:a4:11:97:03:a7:dd:24:a9:4d:de:ca:8e:f3:83:d9:73:
e1:a4:e2:98:42:32:0d:d8:48:21:e8:52:a7:c8:cb:48:11:e4:
86:bd:5c:65:3a:87:ae:78:10:35:31:c8:6f:49:c1:05:79:d6:
05:8e:e8:0c:6b:b2:60:d7:4c:e0:27:90:cd:ec:d6:1a:48:65:
7f:8a:d6:d1:e2:ad:b4:00:7c:62:9f:96:37:97:e1:71:2b:02:
5c:55:ce:d4:8f:64:02:95:aa:7b:b1:97:97:2c:e9:62:64:35:
83:85:57:e1:f3:82:21:bf:79:01:16:c9:68:8e:2a:86:22:9d:
35:ec:b8:7f:90:a5:9a:31:c5:8d:80:d8:ea:b6:8c:66:3e:1c:
35:c2:03:8b:93:b5:31:9b:27:7c:33:ba:a8:02:7d:d2:8d:60:
a8:e4:03:d8:d9:88:45:a1:71:29:02:35:9d:73:a2:d7:be:fa:
a0:11:1e:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:47 2026 by rpki-client