
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa
File: 9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa (raw, json)
Hash identifier: Z/fhrA9Qo7RH7YE8dZMMCp5OR6yPbQwAHFRwYb1DYU8=
Subject key identifier: 41:E8:DE:62:61:7E:6F:69:95:60:1A:3C:98:74:60:4A:34:04:A8:ED
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 24F3659BB373D1B8F2B8724CAB20C6AA5B15C81A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa
Signing time: Tue 23 Jun 2026 00:00:39 +0000
ROA not before: Tue 23 Jun 2026 00:00:39 +0000
ROA not after: Mon 21 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:310::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:f3:65:9b:b3:73:d1:b8:f2:b8:72:4c:ab:20:c6:aa:5b:15:c8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jun 23 00:00:39 2026 GMT
Not After : Sep 21 23:59:59 2026 GMT
Subject: serialNumber=992e2a347c88eaf812abb8cc3bb74e955ca2f3bfa299bb70c511eb0bdba1848b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:ee:2b:e1:2b:85:58:f1:b7:cd:89:51:88:
5b:db:1a:fb:3d:d3:e1:d5:62:3d:fc:1d:1a:84:d6:
d9:78:4e:1d:7c:0e:49:27:b6:74:13:5c:43:9f:2b:
93:a4:88:e8:40:a0:f6:53:df:18:b0:96:8e:54:21:
10:d1:10:76:44:9a:c4:a4:a8:77:7c:46:aa:87:64:
f1:8f:74:34:6e:85:47:bd:df:99:68:e2:42:31:bd:
ab:fc:c7:29:79:61:99:aa:32:94:c5:ec:63:a8:9f:
2c:7d:7b:6c:75:72:26:d3:79:bb:a9:a8:ad:04:11:
97:54:d9:8b:23:80:9d:78:29:c6:fd:d2:1c:ca:c5:
30:9a:b1:72:58:45:43:dd:39:4c:64:d5:d2:5d:af:
95:43:36:f6:5a:a5:fc:41:b2:00:00:30:75:e9:96:
95:35:2e:5a:4d:89:61:d6:7e:5c:22:21:3b:84:9f:
db:80:50:89:5d:d7:59:3f:07:48:fd:88:0f:5e:86:
75:0f:19:e6:79:80:f5:c1:50:c9:72:84:40:7a:24:
c6:a0:93:05:55:11:cd:af:80:78:c3:40:84:2e:b1:
d7:29:ef:e3:d8:ba:72:20:26:ee:b1:42:15:57:e1:
6e:66:0e:ac:5d:c0:6a:40:45:d0:8f:47:b4:db:1a:
65:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E8:DE:62:61:7E:6F:69:95:60:1A:3C:98:74:60:4A:34:04:A8:ED
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9c6cb166-7b28-4512-ae3d-5e8054c669ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:310::/44
Signature Algorithm: sha256WithRSAEncryption
17:da:7f:8f:d8:8b:0b:a8:16:00:db:a3:15:f2:5f:2e:45:c0:
56:d8:af:fd:2b:b8:cf:56:03:b1:ce:82:5b:35:86:c6:16:f7:
c1:92:2e:bf:c4:c9:c5:5b:63:d0:6a:86:45:98:48:d1:3f:df:
b5:98:34:05:16:71:e3:bf:ae:53:2c:ca:65:a9:90:13:2f:74:
f2:45:2e:f6:79:25:28:a7:5c:c2:6e:dd:f6:36:92:3e:b1:94:
70:85:ca:96:bc:fd:dc:61:5e:0c:56:cb:33:e7:14:e1:21:d3:
d0:d3:47:cc:68:cd:02:1a:97:34:4d:cf:38:2c:2f:10:2c:88:
f2:5a:d9:33:83:e4:34:7d:82:f9:fa:2d:eb:80:49:fa:b2:6b:
2e:28:6c:14:d3:24:fe:b0:03:29:be:56:cb:4b:00:40:20:87:
2f:f8:60:21:d4:75:a2:7f:44:7e:e5:77:47:87:7c:51:f2:71:
c2:4c:87:dd:ea:85:7c:b0:fc:af:84:5c:d0:62:fc:d4:83:21:
25:8a:c3:53:ea:da:de:7b:c4:d1:2e:49:bc:25:56:9f:e9:b4:
6f:da:29:ad:26:07:ad:01:97:ea:23:84:76:99:08:32:f0:dd:
7f:2a:7a:d2:80:1c:ca:76:f8:ef:10:84:39:79:1a:81:fe:ef:
2c:97:d8:d6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:53:39 2026 by rpki-client