
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa
File: 7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa (raw, json)
Hash identifier: 7oNbz36KXRK0hQnYIfrclM/aM6YyeLGB7btF7EvhdUs=
Subject key identifier: DF:F5:9C:EC:A1:30:51:E9:D2:75:7E:08:FB:19:7B:F9:F0:00:E2:9B
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4CA17C6F9D6FA75EFA5327378677074A6DDF20DA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa
Signing time: Mon 04 May 2026 15:20:05 +0000
ROA not before: Mon 04 May 2026 15:20:05 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:6104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:a1:7c:6f:9d:6f:a7:5e:fa:53:27:37:86:77:07:4a:6d:df:20:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 4 15:20:05 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=3084d384a887d86f17fb2b7693374279ed71457bf351756cc2f1eb14d8cfdad2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:29:96:03:c7:8e:1d:14:32:00:74:c1:b9:4b:
19:ba:c4:01:4c:2d:71:d4:26:fb:ea:09:64:b1:05:
86:ce:84:3e:d9:a9:6f:1f:7d:63:58:35:e1:5a:b7:
15:78:42:aa:67:68:82:56:15:1e:2c:f7:e1:98:cd:
f3:ce:3a:aa:6c:16:76:a7:28:a0:37:b2:66:4e:7e:
3f:c6:84:a2:9f:e9:3e:9d:0c:4b:94:21:28:cc:0c:
ed:33:a3:8d:e2:6c:e7:21:f2:0b:00:d6:6a:92:d7:
56:57:a9:42:16:a0:a7:02:2d:dd:db:f9:5d:23:e9:
d4:27:04:21:69:bc:ff:c4:51:56:05:f0:31:b4:41:
4a:5f:f6:6a:ae:1d:cf:cf:70:9a:cc:a8:17:8c:5a:
17:22:5e:89:45:cb:9c:fc:e2:d1:62:87:a5:a5:9c:
e1:c6:4e:db:0c:d3:42:30:be:79:ae:7f:08:14:a7:
4a:c4:1b:b7:f9:f8:53:71:3d:58:3a:d0:2b:56:71:
41:c5:cc:82:79:ea:68:a3:fa:e9:3c:aa:8c:c6:b2:
5c:1a:1d:47:71:b4:cc:8f:02:78:11:b6:f5:2d:7c:
60:df:c2:67:ff:7f:c5:09:25:79:dc:a6:db:4f:37:
b3:b0:22:9b:56:6c:31:68:7b:b5:11:cd:4f:7e:99:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F5:9C:EC:A1:30:51:E9:D2:75:7E:08:FB:19:7B:F9:F0:00:E2:9B
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/7d9a8ca7-b2e8-4d92-842d-b3b2a7c92f6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6104::/48
Signature Algorithm: sha256WithRSAEncryption
0e:dc:0f:f9:92:49:15:30:a2:25:05:ce:ec:4e:73:fd:9c:3e:
17:54:6e:bc:5b:08:2e:fe:25:14:a9:44:c7:2f:34:0b:c2:42:
f5:b1:a1:5c:b8:2d:36:33:52:ab:3c:8c:9b:70:7e:54:23:cf:
51:f0:04:f8:44:2c:c7:d2:75:ff:cb:85:e3:7a:8f:c8:8c:72:
d3:80:e6:e2:48:41:e0:87:39:3b:11:48:8c:6c:54:22:33:38:
8d:c1:37:62:e7:24:95:68:10:e5:dd:a6:5a:37:fb:2a:9d:3c:
0f:51:a5:b5:e9:a8:c1:08:61:1c:e7:24:07:ae:be:0e:a5:7a:
17:65:ad:a2:5e:06:01:cf:c8:d2:67:93:47:c6:6f:b3:e5:aa:
bb:a3:b2:86:ad:4a:0f:58:9b:e0:3f:e8:31:f5:39:2a:ad:16:
7c:ce:dd:9c:2e:52:91:31:33:d5:3c:4c:f4:a3:4a:f4:0f:f2:
52:84:78:d2:4a:e1:da:c9:a2:d7:13:77:fc:6e:fc:d2:71:ff:
aa:29:84:f5:ba:1c:ec:f5:eb:22:8f:47:82:18:7a:60:ba:c5:
2e:3b:27:16:2b:df:19:40:34:a8:7d:b9:a9:bc:46:e4:f7:af:
b0:bb:af:e2:33:bd:fe:aa:5c:09:f3:0e:b6:db:c5:4a:30:bc:
4a:09:6f:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:25:34 2026 by rpki-client