
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa
File: f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa (raw, json)
Hash identifier: Kys9Ymhb48xWqCFTfMlCtwN8/tDeWwLpOOXcDLuOvL0=
Subject key identifier: 5D:3B:AD:FB:2A:3F:F0:94:6B:E2:30:EF:9C:E7:1A:5D:7F:E5:82:20
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 0E1A995274A8DA75B826D8E5E0BD429BC6702690
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa
Signing time: Thu 23 Jul 2026 15:10:15 +0000
ROA not before: Thu 23 Jul 2026 15:10:15 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:6117::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:1a:99:52:74:a8:da:75:b8:26:d8:e5:e0:bd:42:9b:c6:70:26:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 23 15:10:15 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=da2a0cd9f20305ab3de9dd037eee59609bba089fd8ce693be2ae7049cbcde574, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:fe:ac:24:c7:0f:d3:08:dd:af:9d:e9:a0:
fa:aa:f9:14:db:08:d6:54:09:ae:e2:d6:ff:f5:be:
05:e3:17:60:a4:26:19:63:e5:92:40:58:d5:64:7b:
14:a7:c5:f6:05:de:fe:77:e5:85:6c:f5:f2:15:d3:
0b:f3:6e:c9:63:52:be:6a:c8:64:3e:97:92:53:18:
ac:03:72:01:29:2b:23:61:df:49:be:ce:fe:78:03:
bf:15:5b:aa:9b:cf:6b:b0:e6:28:44:6f:8f:12:98:
db:bd:56:ac:b8:da:cb:97:a4:64:c4:8a:df:58:19:
eb:93:eb:34:65:d0:4a:b0:e1:9f:b6:f7:82:fe:44:
64:b0:ba:fc:ed:c4:5c:2b:0e:c7:97:bd:9f:6e:a3:
9d:f5:53:0f:44:16:41:23:d0:ff:de:91:1e:eb:b9:
28:07:7d:7f:f0:e9:0c:98:02:ad:71:fa:45:c8:35:
46:de:a6:2a:9a:10:0d:d6:cd:46:7a:46:e2:24:76:
ca:7a:a1:f6:e8:9c:00:23:b6:ef:e2:61:7a:28:7d:
35:1f:3a:19:36:28:eb:90:ca:df:2b:ac:68:7f:6b:
32:af:d9:b4:89:33:b1:db:76:a1:0c:da:ae:3d:b1:
97:d1:1a:db:55:16:61:06:03:8a:fa:89:1b:6b:60:
e8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3B:AD:FB:2A:3F:F0:94:6B:E2:30:EF:9C:E7:1A:5D:7F:E5:82:20
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f937d10a-ab1d-4f0c-85f2-3661bd103bc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6117::/48
Signature Algorithm: sha256WithRSAEncryption
38:47:40:40:be:f3:f7:54:3e:ef:72:44:71:e8:5a:73:e5:64:
10:06:30:dc:0f:0b:fc:1e:d9:cb:b2:d1:08:b9:12:bb:6c:16:
69:f9:a4:9d:14:85:dc:48:ba:09:43:45:20:13:17:db:c7:fc:
23:84:6f:9c:a3:1d:93:da:19:22:b8:06:30:3e:01:8e:bb:72:
ea:e9:04:f1:30:6c:3d:6d:86:d9:d0:9e:a7:32:6c:d0:fa:16:
e1:be:57:40:7f:d9:9f:b7:cd:4b:54:98:bd:51:d3:b4:39:2b:
97:9a:16:a3:db:94:de:6d:49:1d:4a:29:d4:ff:f7:18:81:03:
d6:bc:dd:89:04:f5:dd:7d:a2:8b:25:07:6a:ab:ec:80:d7:cc:
5e:53:6e:39:e0:01:dd:8d:78:d8:20:b1:0d:16:5c:b9:79:d6:
9b:9a:f0:46:b4:cf:6e:4d:e4:cd:a2:fe:62:5d:c5:c6:4d:e5:
89:f0:22:40:99:b7:a8:c0:ac:f9:23:28:26:d2:0c:8e:00:83:
e6:28:80:af:08:22:87:aa:66:e1:52:1f:2b:f4:24:30:88:f1:
37:b6:10:e4:f8:75:97:e7:9b:5b:10:6e:9f:e9:53:00:8e:22:
3c:6e:2c:1a:2a:2d:70:13:27:5f:5e:dd:5e:2c:1e:d6:85:f9:
09:06:74:c0
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUDhqZUnSo2nW4Jtjl4L1Cm8ZwJpAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzIzMTUxMDE1WhcNMjYxMDIxMjM1OTU5
WjB6MUkwRwYDVQQFE0BkYTJhMGNkOWYyMDMwNWFiM2RlOWRkMDM3ZWVlNTk2MDli
YmEwODlmZDhjZTY5M2JlMmFlNzA0OWNiY2RlNTc0MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpk/6sJMcP0wjdr53poPqq+RTbCNZUCa7i1v/1vgXjF2Ck
Jhlj5ZJAWNVkexSnxfYF3v535YVs9fIV0wvzbsljUr5qyGQ+l5JTGKwDcgEpKyNh
30m+zv54A78VW6qbz2uw5ihEb48SmNu9Vqy42suXpGTEit9YGeuT6zRl0Eqw4Z+2
94L+RGSwuvztxFwrDseXvZ9uo531Uw9EFkEj0P/ekR7ruSgHfX/w6QyYAq1x+kXI
NUbepiqaEA3WzUZ6RuIkdsp6ofbonAAjtu/iYXoofTUfOhk2KOuQyt8rrGh/azKv
2bSJM7HbdqEM2q49sZfRGttVFmEGA4r6iRtrYOhfAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUXTut+yo/8JRr4jDvnOcaXX/lgiAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2Y5MzdkMTBhLWFiMWQtNGYwYy04NWYyLTM2NjFiZDEwM2JjOS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwYRcwDQYJKoZIhvcNAQELBQADggEBADhHQEC+8/dUPu9yRHHoWnPl
ZBAGMNwPC/we2cuy0Qi5ErtsFmn5pJ0UhdxIuglDRSATF9vH/COEb5yjHZPaGSK4
BjA+AY67curpBPEwbD1thtnQnqcybND6FuG+V0B/2Z+3zUtUmL1R07Q5K5eaFqPb
lN5tSR1KKdT/9xiBA9a83YkE9d19ooslB2qr7IDXzF5TbjngAd2NeNggsQ0WXLl5
1pua8Ea0z25N5M2i/mJdxcZN5YnwIkCZt6jArPkjKCbSDI4Ag+YogK8IIoeqZuFS
Hyv0JDCI8Te2EOT4dZfnm1sQbp/pUwCOIjxuLBoqLXATJ19e3V4sHtaF+QkGdMA=
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:00 2026 by rpki-client