
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa
File: 8098420f-108f-4bc5-8d8c-6d62621f83e9.roa (raw, json)
Hash identifier: XltflBN7CfF0acVEwOZImuXp2tPWnuqCPeOsOTtoBG8=
Subject key identifier: F4:B1:5E:BC:00:06:E0:18:B9:43:0D:45:ED:22:4F:01:C0:80:D0:22
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 32F6DEBA6A8B231F825D0F403E1E5DB723FA089D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa
Signing time: Mon 11 May 2026 01:30:15 +0000
ROA not before: Mon 11 May 2026 01:30:15 +0000
ROA not after: Sun 09 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f2:7012::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:f6:de:ba:6a:8b:23:1f:82:5d:0f:40:3e:1e:5d:b7:23:fa:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 11 01:30:15 2026 GMT
Not After : Aug 9 23:59:59 2026 GMT
Subject: serialNumber=cf3d04914066d4218aa4c623d1a920c4746bf7d5ca58a840a09cfe427741fb5c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f3:97:0b:58:db:b0:08:8f:4d:82:e7:e8:9a:
19:fb:fa:d2:bf:07:b9:05:4b:5c:c1:ef:e7:9f:d3:
4c:c0:21:b0:ea:15:79:98:5c:4d:51:b7:76:ea:e4:
59:02:7d:04:75:74:32:87:59:63:4c:10:29:7d:05:
9b:e8:d5:1d:39:2e:f8:a7:f8:4b:8c:dc:fe:9b:a6:
78:bf:d6:a8:b8:a5:6c:2b:ae:05:fc:4d:13:a5:84:
fc:4d:2a:92:4a:5a:49:e8:4c:04:97:ed:30:de:4f:
6b:22:60:68:3b:68:19:20:aa:ef:9e:2b:94:4d:df:
38:c9:25:34:a0:46:f4:87:87:cc:14:ab:2d:58:56:
bb:89:c3:f7:3d:80:1b:88:e3:de:bf:4a:82:9c:44:
74:b8:bf:60:92:d3:46:6a:72:ac:09:a0:40:8f:28:
4a:ec:dd:30:2e:7c:c9:45:d0:b5:60:ed:f1:74:94:
40:ec:5a:68:36:5c:f6:59:6b:55:1e:77:e6:03:54:
cd:53:1d:1b:e5:e1:ed:09:67:51:63:7e:a7:21:14:
91:fe:b4:d1:03:87:a4:e2:ee:c5:da:52:e3:9a:f7:
36:6d:40:f1:e7:f9:aa:d2:5e:3f:c9:07:cb:75:56:
ad:1f:de:ef:c1:ef:53:9f:28:cd:90:8f:32:1b:56:
8a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B1:5E:BC:00:06:E0:18:B9:43:0D:45:ED:22:4F:01:C0:80:D0:22
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8098420f-108f-4bc5-8d8c-6d62621f83e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:7012::/48
Signature Algorithm: sha256WithRSAEncryption
9e:11:15:2d:87:f2:46:25:a3:fc:80:1a:13:db:b2:f6:60:43:
c7:1c:5e:8e:d4:6a:11:cd:28:05:e5:87:48:1f:ca:62:44:1b:
08:01:99:45:a0:84:bc:40:64:d0:76:ed:d0:00:db:e5:44:96:
3d:be:33:d2:17:d9:26:c2:57:05:f3:07:99:52:27:d4:e3:9b:
b9:1a:89:8a:e1:ea:7c:a2:9b:7a:30:a7:f4:5d:1e:94:a2:04:
8e:4e:60:2f:94:52:75:93:a7:b3:c8:44:e2:56:20:ad:76:4a:
bd:00:10:bf:27:02:bc:f2:5e:48:ad:af:2e:51:00:1f:f6:0d:
ab:c0:5b:f4:57:4c:d6:bd:94:0c:24:4c:46:09:4a:7e:ed:a5:
59:96:16:ea:e7:cf:85:ae:ed:2a:9e:77:e2:cf:9e:af:6b:0f:
e6:17:95:3a:88:81:79:3f:68:b2:61:14:d6:df:3e:dc:26:04:
2a:42:37:7b:28:25:a2:6f:2c:96:b1:19:df:ad:f1:57:23:56:
39:11:84:f8:2c:e9:29:6a:66:54:37:73:ec:5d:da:d7:16:80:
cd:98:bf:95:d6:f9:a9:7e:03:f4:29:f0:de:58:49:2a:f5:63:
04:19:d5:30:a2:e7:1b:52:6d:8e:d2:c5:73:57:f3:87:a2:1c:
ec:f4:0e:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:12 2026 by rpki-client