
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa
File: e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa (raw, json)
Hash identifier: JEvrB83S12DS5TkVM0xnt9wG1ItnU3k+S3MfV9HbOPw=
Subject key identifier: 4E:D1:D0:08:AA:06:F0:5F:74:CD:6E:96:9D:E3:B8:38:10:67:D2:D0
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 022A8C1649565FF2808BBA348A59988AAD96A1FA
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa
Signing time: Mon 20 Jul 2026 00:50:07 +0000
ROA not before: Mon 20 Jul 2026 00:50:07 +0000
ROA not after: Sun 18 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f2:7100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2a:8c:16:49:56:5f:f2:80:8b:ba:34:8a:59:98:8a:ad:96:a1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 20 00:50:07 2026 GMT
Not After : Oct 18 23:59:59 2026 GMT
Subject: serialNumber=0a5d501c8fce2bf298dc9bffb2800bb0bda4622af8ba1e387fdf1289d7e4c33c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:0b:04:94:21:86:d9:9b:0f:64:84:21:8c:
b3:bd:ee:db:39:b8:18:34:78:01:7c:b9:70:14:5f:
69:39:d4:5d:e4:5e:4e:93:78:04:4e:d2:b7:26:83:
22:b6:c1:08:d5:3a:f0:1b:c2:e4:9e:f2:35:29:83:
a9:fe:0c:26:9b:db:e0:32:d6:05:49:85:f4:ac:b0:
57:37:2b:ba:98:ed:56:47:c3:29:64:97:75:5f:f4:
b2:cb:72:ea:43:7d:13:2c:77:97:5a:c1:1d:0b:4e:
0e:0b:2e:4e:6b:d5:84:ea:7b:b3:ab:fb:96:b5:14:
a1:0b:27:0b:fc:c3:5d:d3:16:9b:0f:c0:35:a2:c0:
e4:93:6c:d9:44:27:e2:f8:c3:83:87:df:f2:a1:9e:
5b:a2:7e:24:cc:8f:c9:cb:d0:b1:c4:95:f7:8d:5f:
fa:a1:b3:22:d6:35:97:f4:3a:33:19:44:c9:fb:bb:
ad:6e:ee:cf:62:16:86:0b:17:e8:e9:5f:c5:77:25:
e1:d0:cf:a0:77:6f:5a:97:9a:22:c0:92:f4:65:a8:
84:d8:cc:1f:b7:c7:06:31:e0:7b:20:69:d0:a5:87:
30:3a:04:c0:73:c7:07:60:ea:c4:c6:f7:6e:a5:a7:
a9:e4:99:92:dc:6b:da:e9:48:e8:42:43:4f:18:1c:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D1:D0:08:AA:06:F0:5F:74:CD:6E:96:9D:E3:B8:38:10:67:D2:D0
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e3ce5aef-713b-4ae9-8036-ef4b6d178716.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:7100::/40
Signature Algorithm: sha256WithRSAEncryption
48:bc:6e:0a:fe:fb:e8:0c:5d:37:6c:c5:2f:2c:d5:f6:86:60:
16:18:9f:d6:65:88:94:56:c9:62:c0:88:db:ba:34:d9:71:56:
b8:54:53:6d:64:28:f3:b0:0e:b2:dc:76:ac:11:a9:01:63:5c:
6c:ee:a2:3d:3f:51:91:b8:3c:62:19:c9:6d:a3:d9:ec:b0:33:
0b:fd:9f:32:bb:cc:33:4b:af:97:33:9b:a9:36:2b:f3:ab:5d:
cc:be:a6:fd:28:fc:6f:ac:71:d3:e4:63:89:b7:df:27:32:31:
92:68:78:6a:52:70:ef:4e:fb:c2:4b:34:6c:46:82:10:16:6b:
ec:49:26:43:51:a9:8b:9c:e6:b3:39:87:52:3a:49:7a:67:02:
1d:66:69:ef:dd:0e:b8:2e:26:64:53:cd:80:d9:57:be:75:c1:
84:25:bf:20:c3:28:69:6d:a2:fe:06:7c:ba:4c:70:de:0d:fb:
27:52:ac:ef:d3:bd:a5:48:a4:a1:e4:df:28:b5:60:c9:ec:1e:
63:e1:6a:09:ab:fd:78:a6:ab:34:ec:e9:f8:7b:cb:a0:26:4a:
06:2b:db:95:46:99:b0:db:a3:67:3c:a1:e5:80:4d:d3:82:24:
9f:a6:82:99:b1:39:d3:88:3f:9a:bc:b1:97:a9:9a:42:25:bb:
cf:25:84:d1
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUAiqMFklWX/KAi7o0ilmYiq2WofowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIwMDA1MDA3WhcNMjYxMDE4MjM1OTU5
WjB6MUkwRwYDVQQFE0AwYTVkNTAxYzhmY2UyYmYyOThkYzliZmZiMjgwMGJiMGJk
YTQ2MjJhZjhiYTFlMzg3ZmRmMTI4OWQ3ZTRjMzNjMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDkkAsElCGG2ZsPZIQhjLO97ts5uBg0eAF8uXAUX2k51F3k
Xk6TeARO0rcmgyK2wQjVOvAbwuSe8jUpg6n+DCab2+Ay1gVJhfSssFc3K7qY7VZH
wylkl3Vf9LLLcupDfRMsd5dawR0LTg4LLk5r1YTqe7Or+5a1FKELJwv8w13TFpsP
wDWiwOSTbNlEJ+L4w4OH3/KhnluifiTMj8nL0LHElfeNX/qhsyLWNZf0OjMZRMn7
u61u7s9iFoYLF+jpX8V3JeHQz6B3b1qXmiLAkvRlqITYzB+3xwYx4HsgadClhzA6
BMBzxwdg6sTG926lp6nkmZLca9rpSOhCQ08YHErVAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQUTtHQCKoG8F90zW6WneO4OBBn0tAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2UzY2U1YWVmLTcxM2ItNGFlOS04MDM2LWVmNGI2ZDE3ODcxNi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPDycTANBgkqhkiG9w0BAQsFAAOCAQEASLxuCv776AxdN2zFLyzV9oZg
Fhif1mWIlFbJYsCI27o02XFWuFRTbWQo87AOstx2rBGpAWNcbO6iPT9Rkbg8YhnJ
baPZ7LAzC/2fMrvMM0uvlzObqTYr86tdzL6m/Sj8b6xx0+RjibffJzIxkmh4alJw
7077wks0bEaCEBZr7EkmQ1Gpi5zmszmHUjpJemcCHWZp790OuC4mZFPNgNlXvnXB
hCW/IMMoaW2i/gZ8ukxw3g37J1Ks79O9pUikoeTfKLVgyeweY+FqCav9eKarNOzp
+HvLoCZKBivblUaZsNujZzyh5YBN04Ikn6aCmbE504g/mryxl6maQiW7zyWE0Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:15 2026 by rpki-client