
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8c0e65e5-4314-4c25-95ea-bd728ba417ff.roa
File: 8c0e65e5-4314-4c25-95ea-bd728ba417ff.roa (raw, json)
Hash identifier: b+RGxzPG6zyVC3Iah9OH9B99+8lrVjJk+hIUGtQRTj0=
Subject key identifier: EB:77:77:4A:FF:C0:99:D1:73:58:CE:8C:DF:C1:C4:2D:12:D3:0B:D5
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 55991436DA8C82717C619C5A6CFA706725502948
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8c0e65e5-4314-4c25-95ea-bd728ba417ff.roa
Signing time: Mon 04 May 2026 15:10:44 +0000
ROA not before: Mon 04 May 2026 15:10:44 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:f020::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:99:14:36:da:8c:82:71:7c:61:9c:5a:6c:fa:70:67:25:50:29:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 4 15:10:44 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=47e16e6604c23ef366534ee7c9fcaa17fcdd8e757b045451d9a10c3bff624890, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:c0:28:ff:9a:6b:d3:8a:96:20:54:87:1e:
e7:c3:cf:d7:78:5d:c0:61:bc:09:47:d4:de:33:a8:
5f:53:64:e0:64:e7:70:ca:83:a3:ff:61:82:f7:14:
75:3b:f7:ad:e6:a0:e4:c7:12:4e:66:69:41:88:3c:
91:63:5a:c8:e5:ca:59:87:aa:58:2c:97:3a:72:4d:
03:31:f6:f6:96:55:dc:0b:ce:c8:78:4a:b8:c4:9c:
5c:53:01:1b:8d:fb:82:4d:e1:2a:d4:a8:71:4c:73:
72:24:95:6e:96:98:66:83:23:29:24:ea:e6:ca:15:
97:2c:e6:0c:98:db:c3:db:a7:60:fe:dc:77:51:ef:
72:48:ff:ca:0e:6e:69:c4:43:ec:28:45:06:ca:d3:
76:0e:ea:db:44:69:4b:cd:1c:79:78:1b:82:96:1a:
71:51:e0:09:57:78:a2:b8:eb:1c:e0:98:ea:2a:47:
16:03:d3:1f:7e:34:b6:03:bf:e9:e3:92:9d:55:b7:
29:37:61:25:0f:16:0c:cc:4c:b0:55:e3:d8:c9:70:
35:fe:94:cf:b1:2d:af:ef:fb:51:98:fd:47:ef:8b:
a3:fe:43:4c:e6:51:ab:ac:c0:a3:f3:6b:06:72:3b:
2b:4c:6f:0b:5e:45:68:6b:85:35:26:9a:46:2e:d8:
45:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:77:77:4A:FF:C0:99:D1:73:58:CE:8C:DF:C1:C4:2D:12:D3:0B:D5
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/8c0e65e5-4314-4c25-95ea-bd728ba417ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f020::/44
Signature Algorithm: sha256WithRSAEncryption
19:d0:e4:9f:ee:e1:48:76:8d:40:f0:77:ff:75:8b:7d:ef:25:
56:14:e9:be:bf:37:3a:a8:3a:a8:41:ad:69:cc:80:2e:58:9b:
05:95:7d:9e:26:83:75:1b:e3:79:73:ce:eb:f1:64:aa:54:5c:
19:59:de:3d:d5:48:91:0a:a6:d4:e3:da:43:67:42:31:cf:d9:
4d:84:38:2f:26:c7:93:df:de:37:80:55:cd:5a:7e:19:fb:e2:
38:73:ac:32:9a:9e:23:74:aa:b3:b4:46:51:2e:b4:af:af:d8:
fe:2f:4d:8c:27:23:1c:26:ae:95:72:7f:2c:c3:da:70:d2:4d:
61:a2:6e:1e:0b:8f:f7:a4:66:66:e7:b7:2e:ed:f5:41:53:44:
03:17:7a:29:17:f7:ca:43:52:b3:0b:ce:44:85:a3:1a:ea:a1:
36:21:cd:34:ea:a6:05:9d:64:a4:84:2d:7d:78:bd:65:13:74:
39:de:c9:71:0e:7f:d7:33:cf:98:d7:ea:43:89:41:81:f4:d6:
24:81:dc:84:01:34:a9:70:6b:bb:7b:1d:7c:93:6c:30:27:18:
43:bd:45:cc:73:9a:25:ee:cb:8d:ad:88:4d:46:81:1e:81:ef:
79:a0:26:e3:28:7a:6e:05:53:c8:b2:76:5a:fb:46:2c:a4:e3:
60:a2:74:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:24:26 2026 by rpki-client