
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa
File: f6826d5c-b428-498f-80be-06e94897140e.roa (raw, json)
Hash identifier: Q3hx3BsLctg1X2Xg5fVU55iNDDFwb0OY75snbnUZT9A=
Subject key identifier: F6:BC:3E:80:F4:59:5D:2A:17:A3:69:1F:4D:65:A1:60:F1:E3:04:3B
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 60CECF77BD439F41C5909FF4805BAB8C4703EA6F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa
Signing time: Mon 04 May 2026 15:10:05 +0000
ROA not before: Mon 04 May 2026 15:10:05 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:6106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ce:cf:77:bd:43:9f:41:c5:90:9f:f4:80:5b:ab:8c:47:03:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 4 15:10:05 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=b63df6a63b6e08b7652d6099155c1926e9a4318221c9b86aded1413fd8df643a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b8:61:42:92:8f:40:6b:76:be:dc:5d:8e:a6:
e0:8b:fb:c6:71:15:85:ec:27:22:6b:ef:f8:2d:71:
02:d0:e8:b2:63:f9:3c:c4:2e:4b:ef:02:ea:e5:8c:
f9:fe:50:5b:0d:68:c6:68:ae:b2:a6:c8:39:48:e5:
b7:ee:16:79:fa:27:fc:04:9c:61:88:2f:58:e2:5c:
3c:5e:d0:46:46:99:63:49:07:f9:4b:d4:68:3a:2c:
83:dd:c5:de:42:b5:1c:75:c7:4b:ba:ef:18:30:a8:
5c:a2:4a:88:d0:5b:79:64:ff:a5:04:42:76:bb:09:
d2:21:2f:1a:b8:51:39:8b:c3:db:a9:5f:32:d6:fc:
4c:95:58:e2:cd:ac:69:a2:9c:4e:27:bf:9c:c3:dd:
08:83:cc:e8:f5:45:57:a0:c2:80:7c:e7:21:10:d6:
e7:a1:35:31:11:d2:57:55:3d:6f:cd:65:ff:b3:29:
39:02:a5:9d:f2:53:60:08:da:ba:92:87:a4:b7:a1:
6a:ae:7d:d9:69:4a:a9:35:ab:e1:3a:77:f1:1b:01:
01:4f:b9:d5:e3:ac:d6:22:28:8a:4e:9b:b0:40:ab:
f5:32:d3:d5:e9:99:9e:50:3b:70:00:04:27:db:fd:
0e:0b:cf:f5:88:6f:61:a4:99:1b:89:fb:99:cc:3c:
6c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BC:3E:80:F4:59:5D:2A:17:A3:69:1F:4D:65:A1:60:F1:E3:04:3B
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f6826d5c-b428-498f-80be-06e94897140e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6106::/48
Signature Algorithm: sha256WithRSAEncryption
75:ac:9a:38:bb:03:7d:a5:46:e0:80:aa:76:ed:73:0a:29:95:
f0:5d:d1:2b:fd:9c:1a:87:30:71:07:a8:f3:a9:f1:16:df:ba:
dd:84:bc:23:f0:db:d7:09:15:08:fb:79:5c:4a:56:40:19:a9:
9c:f8:36:09:8e:4e:85:84:d5:55:ef:ce:44:79:fb:84:52:75:
aa:e4:2d:f3:24:12:22:c2:d8:22:ea:d9:df:09:07:f0:66:2d:
69:0c:80:fa:a8:45:66:b0:14:da:2e:3f:1b:04:a0:2c:e3:7a:
15:1b:5f:10:30:7f:db:6c:03:d3:39:33:08:77:5d:d5:b5:01:
db:9c:9f:45:6d:3c:a4:6d:e4:3b:28:43:c9:1b:a3:4b:ee:5e:
47:ba:b9:d5:f2:44:c4:2a:0c:a7:bd:d8:cf:2c:40:79:24:f6:
bd:eb:a6:e8:79:c4:20:55:82:93:dc:6e:1f:6a:f9:b4:27:38:
99:83:e0:da:54:2b:f0:60:15:12:bf:36:99:b2:75:d6:f5:89:
c1:01:14:bf:8f:d5:85:60:35:30:f2:34:1c:d1:1b:d4:2f:06:
e8:52:2d:c2:da:dd:1d:f6:f6:42:e5:66:64:3c:2a:76:26:77:
3e:5f:41:22:6e:af:bf:93:77:23:9e:4b:3d:a8:c2:27:0d:3c:
11:6b:01:94
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:23 2026 by rpki-client