
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa
File: b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa (raw, json)
Hash identifier: xmb7lVvQEsfMK7yZ3Cac1OxT0tx7BY/KgFzlfRZ5Hi8=
Subject key identifier: A7:0A:5D:63:9C:3E:49:BD:2C:8A:FC:CC:9B:61:75:B2:BE:77:FC:48
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 22C701B2B1EAD9D8806188983136484A35D5422C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa
Signing time: Thu 23 Jul 2026 15:10:54 +0000
ROA not before: Thu 23 Jul 2026 15:10:54 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:611b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c7:01:b2:b1:ea:d9:d8:80:61:88:98:31:36:48:4a:35:d5:42:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 23 15:10:54 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=e8d1e672e41bf17ed96d4513149ff1f2e804c9f1b616ca8f5ba6b3dca3ec95c0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:f8:e5:be:cd:82:53:b7:b0:0e:60:95:ff:
dd:87:95:20:05:f1:23:e5:2e:b7:0e:64:5f:9d:9a:
b4:ff:c1:c6:63:c3:21:c0:bf:9c:8d:cd:14:06:a6:
ef:18:d4:5d:f2:87:f4:59:17:07:e8:48:f2:4e:27:
d5:dd:ef:cb:db:0c:84:b3:34:cd:92:c5:13:69:99:
76:28:28:81:54:b9:b1:c5:0d:37:1d:a5:7f:f9:61:
42:ea:27:e6:5e:eb:11:18:2f:04:ba:6b:19:1a:4f:
06:c6:58:c5:4a:12:d8:9f:74:c6:e9:ed:86:79:28:
38:a8:70:04:88:5e:fe:5f:c1:81:5e:ec:59:bc:0e:
f5:f4:92:a7:83:ba:9c:bf:44:9a:be:18:39:1d:2e:
b4:b8:db:2d:a6:b4:45:86:86:b0:f1:0f:e9:e8:d9:
0e:06:37:d7:38:4f:f4:73:e3:f6:50:22:71:71:3b:
2b:90:d7:35:37:2a:08:0d:e0:85:82:0c:1a:52:7e:
76:2c:25:44:16:cf:e4:db:d0:52:57:b2:75:a4:28:
0f:54:e5:0a:95:e7:3e:80:ad:9c:c6:c9:df:38:53:
41:aa:a4:85:6b:8f:16:e4:23:1b:b8:55:3a:43:e8:
2d:06:69:a8:0d:63:90:61:0a:13:cc:d4:6e:3a:bb:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:0A:5D:63:9C:3E:49:BD:2C:8A:FC:CC:9B:61:75:B2:BE:77:FC:48
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b51f360b-51dd-46ed-9df1-5d5b37dcb02b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:611b::/48
Signature Algorithm: sha256WithRSAEncryption
01:b7:af:e3:2c:cc:9f:b8:8b:ed:19:54:b8:2f:ad:dc:3b:4c:
bd:99:a9:aa:5a:69:dc:a7:79:88:9a:01:22:13:f8:ca:31:87:
27:df:d6:cf:29:8c:3c:a7:96:3b:75:0b:c4:39:b7:ca:8c:bb:
c6:16:18:ff:99:06:1d:55:c4:e8:93:eb:1a:fc:3a:dd:26:cd:
fe:00:d2:1b:59:19:b3:bf:9a:2d:0a:f5:d7:0e:a4:b1:16:5b:
2b:f3:5d:55:da:22:ff:5f:de:77:73:67:6a:34:91:c0:48:f6:
28:57:2f:69:ca:e0:55:87:94:b3:3e:b7:10:51:a4:25:ad:c1:
98:02:ff:a0:c4:2f:82:b4:45:fb:fe:5a:4a:7e:78:d2:6b:ea:
89:51:68:1d:db:2f:a9:1e:87:c6:18:fb:d7:e8:ca:38:b4:de:
4e:90:70:57:f9:80:e6:a8:43:4f:de:13:14:b1:cd:6a:9f:6b:
8e:a3:7c:f0:41:d9:72:74:60:c3:e1:0c:7e:59:b8:8b:52:c2:
45:e9:55:b3:ba:8d:21:01:f4:54:17:a4:6f:6f:9b:f4:b2:74:
93:14:4c:31:ac:42:b3:2b:ca:8a:e7:18:89:26:fb:c2:df:bb:
b6:2a:c8:32:bd:19:fa:c4:02:e6:55:4c:0c:35:14:3a:16:af:
b5:81:33:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:42:59 2026 by rpki-client