
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9a4c690-0bd7-418d-a82c-90364d58e928.roa
File: e9a4c690-0bd7-418d-a82c-90364d58e928.roa (raw, json)
Hash identifier: qW4rynDZFAbgQMuwWAkcfyqR1d6pQDS3bA7VqHcISWE=
Subject key identifier: 32:2A:66:2C:3E:52:A3:58:86:E8:07:8F:7A:91:9C:FD:68:91:AE:25
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 371786874FB020A3E22880A0A5C144F9E5DD3E3B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9a4c690-0bd7-418d-a82c-90364d58e928.roa
Signing time: Thu 09 Jul 2026 00:00:08 +0000
ROA not before: Thu 09 Jul 2026 00:00:08 +0000
ROA not after: Wed 07 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f1:8a10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:17:86:87:4f:b0:20:a3:e2:28:80:a0:a5:c1:44:f9:e5:dd:3e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 9 00:00:08 2026 GMT
Not After : Oct 7 23:59:59 2026 GMT
Subject: serialNumber=c556fd2d4ace4382c739508a51460489241c38d403450991f72b46aafe8ace27, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:66:20:af:8f:7f:87:02:4e:e4:d9:c6:a9:62:
3a:22:5d:6d:7f:24:f3:0a:ea:aa:73:fb:8a:ba:8d:
6a:78:e6:5a:db:e3:f4:7a:d7:fe:2e:13:ad:ce:28:
94:7d:c5:cd:b1:8d:fc:7f:a6:3a:f8:0b:f2:5c:0a:
71:b4:6e:68:db:df:fc:22:e4:12:70:0c:d1:a9:6e:
db:40:17:7d:3b:cb:cc:26:b1:6b:32:69:9c:6e:dc:
d2:6e:79:f1:f1:ae:e9:60:77:7e:e2:4a:a3:09:c8:
e5:22:81:91:52:ca:e5:40:bf:a7:37:6c:af:fa:ec:
4d:58:b4:a2:bc:e0:13:84:9f:11:93:21:79:13:3a:
a3:1d:5d:fa:16:76:ee:fe:0c:5b:ab:d9:48:3a:13:
d8:5b:c6:02:b8:c6:5a:f9:0f:de:f2:39:15:0c:73:
1e:27:c4:fb:a2:99:c8:33:01:39:7f:5c:e6:e2:82:
e9:5c:e3:c1:6c:45:58:96:3c:dc:f7:b1:c6:e1:b0:
51:0b:b2:e2:7b:33:a4:a6:84:fd:21:03:5e:71:25:
29:1b:fc:af:d3:79:0a:6c:30:dd:eb:58:10:4f:aa:
1c:57:86:f6:da:f4:2d:a1:e8:6a:dd:5b:64:8a:9c:
8b:de:2a:0b:d3:2e:9a:ac:c3:93:86:a3:dc:18:d3:
d5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2A:66:2C:3E:52:A3:58:86:E8:07:8F:7A:91:9C:FD:68:91:AE:25
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/e9a4c690-0bd7-418d-a82c-90364d58e928.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:8a10::/48
Signature Algorithm: sha256WithRSAEncryption
05:89:a9:7b:05:9e:e9:6a:78:d2:e0:30:ce:cf:97:1a:a0:b1:
88:3f:b7:b2:32:af:cc:09:d9:f1:f7:a3:fa:92:da:ed:04:80:
ff:99:77:1d:ce:bf:dd:08:a1:15:66:4f:76:e8:6a:fb:5b:9c:
51:bd:c2:53:5b:10:54:4f:14:36:ee:3d:83:6c:5c:51:8b:e4:
f7:74:7f:ca:fc:31:1c:c6:80:7f:e1:c6:99:9c:ef:e9:4d:a1:
52:bc:fd:61:56:61:24:cf:67:52:da:82:36:dc:8a:62:ee:4b:
91:c3:d8:07:73:85:90:6d:e6:3c:c3:b7:f3:33:71:76:1b:ab:
0c:26:a8:ab:70:9e:35:f9:ae:cf:9c:d6:6c:14:2a:f7:f7:6e:
03:8a:1e:e8:e2:36:87:69:10:78:b8:13:75:7d:6b:b1:07:37:
49:fd:a1:50:dd:d2:46:db:c5:d2:d4:ab:63:59:90:19:34:43:
7f:47:c0:e2:2d:79:d2:e6:83:e1:16:5c:a9:86:4e:ac:25:19:
27:03:57:ed:77:fc:09:f0:7d:b8:d1:ae:d1:a3:54:07:80:36:
f7:88:19:2c:8a:62:00:99:89:5f:68:06:33:c9:ed:43:5c:98:
6e:e8:53:cd:5a:ef:53:cc:6a:85:1f:ae:bb:95:dd:ac:d5:c9:
b1:9f:89:43
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:52:58 2026 by rpki-client