
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8937b5f0-d9e0-41bc-ab89-c61a14eb3df1.roa
File: 8937b5f0-d9e0-41bc-ab89-c61a14eb3df1.roa (raw, json)
Hash identifier: kxT5OnF1T1lg1pCFhp7/jxq3j4lzL+D2+YxqCkvrmxw=
Subject key identifier: 95:A1:D1:CC:40:95:62:2A:61:36:41:D0:15:AA:A1:F8:43:02:DD:B5
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 50159E3464FBA319FBBBEC5F8FDDEA94C9410F9D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8937b5f0-d9e0-41bc-ab89-c61a14eb3df1.roa
Signing time: Mon 22 Jun 2026 00:20:11 +0000
ROA not before: Mon 22 Jun 2026 00:20:11 +0000
ROA not after: Sun 20 Sep 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:e0d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:15:9e:34:64:fb:a3:19:fb:bb:ec:5f:8f:dd:ea:94:c9:41:0f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jun 22 00:20:11 2026 GMT
Not After : Sep 20 23:59:59 2026 GMT
Subject: serialNumber=8600a86ce34afdddb8aa0365eeb4b663c74cc076c5554b0edd04481140c54380, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cf:59:3d:fc:01:2c:08:32:52:78:25:72:b2:
4d:87:89:d8:a1:ac:01:72:20:ec:8b:6b:ce:e1:56:
40:70:83:ca:3d:76:25:85:99:c6:dc:51:f2:b8:35:
39:d1:58:2e:5e:5b:3a:c6:18:78:74:76:39:09:7e:
9c:74:93:e9:09:39:ac:b5:ff:21:a9:bc:01:8e:7b:
2b:49:a9:0f:b8:6c:9a:18:94:d9:ca:ae:b2:21:66:
5b:9d:b3:fc:14:1b:7b:aa:86:5c:c2:75:55:a3:03:
d6:3d:13:80:1e:6e:2e:cb:5d:d0:24:32:50:da:ae:
bc:38:db:e0:b0:ba:cc:8b:80:9f:9f:ae:f6:93:8c:
c3:db:f9:71:e9:f7:99:57:bb:a7:01:93:5f:fd:05:
53:13:6b:1f:fc:11:61:12:67:11:7a:b9:e9:52:80:
c0:58:48:e9:c4:36:ea:31:46:55:a2:92:02:32:35:
d0:31:c6:32:8f:3d:ef:c0:dc:55:b7:1c:91:d9:9a:
1a:fd:f2:e2:c7:00:2a:8c:eb:f6:c0:f8:2b:9d:ba:
80:1c:13:65:ad:bd:05:d7:23:33:3c:b5:d2:a4:e7:
31:68:2d:df:12:02:80:88:7d:97:d1:92:7c:76:ed:
c6:43:53:a9:30:14:17:03:e1:f9:d7:bd:ff:b0:cb:
50:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A1:D1:CC:40:95:62:2A:61:36:41:D0:15:AA:A1:F8:43:02:DD:B5
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8937b5f0-d9e0-41bc-ab89-c61a14eb3df1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:e0d::/48
Signature Algorithm: sha256WithRSAEncryption
6e:c8:3a:be:3c:2f:0b:05:cb:69:9a:d5:6e:07:25:3b:2c:46:
3e:3b:e4:7a:35:f3:a8:28:2b:5e:8a:09:c9:d7:f7:63:09:40:
a0:45:1f:c9:55:19:44:4c:2f:61:a3:07:28:7c:5d:ee:6b:d5:
96:16:d5:84:64:38:5a:e0:34:7e:5b:f9:bc:83:70:29:42:34:
39:06:58:63:f8:ca:64:a7:9b:db:0e:31:78:80:47:c8:bd:e1:
19:79:12:8d:2e:f6:86:b8:02:6f:fe:33:af:9a:e3:81:fd:88:
d3:46:e4:59:fb:c8:52:8d:0d:82:79:13:01:0c:77:53:db:e8:
a0:a1:1d:ac:6b:f1:6c:91:16:ef:31:f0:1b:01:9a:62:fb:dd:
c6:07:9a:e7:ae:62:c3:af:7e:89:fa:8a:3b:eb:ce:75:27:33:
2f:ec:93:e8:d0:0d:bd:2b:5c:30:d3:6a:cb:1c:82:e2:c8:84:
cd:5a:05:66:71:ed:57:5d:a8:e1:ca:a3:52:9f:72:9d:c5:19:
b2:b0:08:a6:10:fc:f0:b4:e2:be:65:b7:b1:df:fd:74:f7:60:
ed:57:a2:9d:4b:be:ad:38:71:73:2e:b2:4c:9d:bb:38:97:50:
e3:a9:30:6c:46:e7:d0:7a:da:6a:ea:70:89:50:5b:17:9e:b8:
5e:b7:a9:6d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUUBWeNGT7oxn7u+xfj93qlMlBD50wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjIyMDAyMDExWhcNMjYwOTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A4NjAwYTg2Y2UzNGFmZGRkYjhhYTAzNjVlZWI0YjY2M2M3
NGNjMDc2YzU1NTRiMGVkZDA0NDgxMTQwYzU0MzgwMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpz1k9/AEsCDJSeCVysk2HidihrAFyIOyLa87hVkBwg8o9
diWFmcbcUfK4NTnRWC5eWzrGGHh0djkJfpx0k+kJOay1/yGpvAGOeytJqQ+4bJoY
lNnKrrIhZluds/wUG3uqhlzCdVWjA9Y9E4Aebi7LXdAkMlDarrw42+CwusyLgJ+f
rvaTjMPb+XHp95lXu6cBk1/9BVMTax/8EWESZxF6uelSgMBYSOnENuoxRlWikgIy
NdAxxjKPPe/A3FW3HJHZmhr98uLHACqM6/bA+CuduoAcE2WtvQXXIzM8tdKk5zFo
Ld8SAoCIfZfRknx27cZDU6kwFBcD4fnXvf+wy1AvAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUlaHRzECVYiphNkHQFaqh+EMC3bUwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2Lzg5MzdiNWYwLWQ5ZTAtNDFiYy1hYjg5LWM2MWExNGViM2RmMS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwDg0wDQYJKoZIhvcNAQELBQADggEBAG7IOr48LwsFy2ma1W4HJTss
Rj475Ho186goK16KCcnX92MJQKBFH8lVGURML2GjByh8Xe5r1ZYW1YRkOFrgNH5b
+byDcClCNDkGWGP4ymSnm9sOMXiAR8i94Rl5Eo0u9oa4Am/+M6+a44H9iNNG5Fn7
yFKNDYJ5EwEMd1Pb6KChHaxr8WyRFu8x8BsBmmL73cYHmueuYsOvfon6ijvrznUn
My/sk+jQDb0rXDDTasscguLIhM1aBWZx7VddqOHKo1Kfcp3FGbKwCKYQ/PC04r5l
t7Hf/XT3YO1Xop1Lvq04cXMuskyduziXUOOpMGxG59B62mrqcIlQWxeeuF63qW0=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:45 2026 by rpki-client