
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa
File: 853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa (raw, json)
Hash identifier: jZBUrMIh8TFAq76Oe4SS4GKB3wcNUZTslxl0Z41HoZA=
Subject key identifier: E6:BC:0C:46:8B:BC:4A:1B:0E:44:1B:85:BB:77:7D:8D:1C:59:7B:43
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 367D4559D400A4324E6520611BE422EC751FF956
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa
Signing time: Mon 04 May 2026 14:50:45 +0000
ROA not before: Mon 04 May 2026 14:50:45 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:9cc0:c11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:7d:45:59:d4:00:a4:32:4e:65:20:61:1b:e4:22:ec:75:1f:f9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 4 14:50:45 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=02eda43675b7b1b21dfcb40645edd72026d4274a8e43d75da15069e4e289f4ca, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:b1:f7:fb:67:93:5e:44:38:4d:5b:84:b8:
c3:8c:51:87:d3:5d:a1:5b:a2:64:eb:56:8e:16:63:
5e:15:65:60:01:e7:cd:81:17:4f:25:d6:7b:84:09:
90:81:65:ba:ba:88:81:03:2b:34:8b:da:c0:f7:ea:
cf:fe:86:c4:3b:1a:d2:2f:bb:9d:f8:a3:5f:55:26:
1e:96:79:f6:54:10:df:b4:7d:63:5f:2d:3c:38:64:
ff:e1:d2:a9:63:99:2c:57:09:ed:93:23:63:ed:eb:
c9:5a:4c:f8:d7:60:9d:fe:57:81:15:fa:48:85:50:
d2:bf:be:7a:81:79:0c:8c:e6:f4:f4:31:47:10:45:
3c:78:1a:c0:50:16:6e:41:ec:d7:76:57:1f:29:e2:
65:d5:62:80:68:e4:9f:d9:98:78:7d:2f:ea:d1:29:
87:ea:70:68:a9:84:d1:5d:bf:e5:bb:89:8a:30:40:
3e:32:8f:f0:ee:2a:df:8b:c7:64:f0:16:d2:4c:c2:
9a:ee:43:91:f0:0f:e3:fd:f1:96:25:d6:3e:4c:e6:
3a:72:87:83:9a:2b:74:8a:3f:fe:57:1c:e5:0b:29:
7b:3d:c3:0d:da:75:30:1e:40:32:e3:01:8c:14:ec:
4c:88:b4:96:89:37:d3:6b:da:fd:9a:88:01:4a:86:
09:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:BC:0C:46:8B:BC:4A:1B:0E:44:1B:85:BB:77:7D:8D:1C:59:7B:43
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/853b3b65-1306-46a2-bc1b-93ee2b22e8e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c11::/48
Signature Algorithm: sha256WithRSAEncryption
7a:01:21:24:6d:93:80:6a:5f:8a:67:00:1a:8d:26:c3:6b:e0:
8c:df:4c:ab:98:88:d2:53:1d:66:58:91:f9:ab:57:60:b2:dd:
be:63:8d:67:a0:02:2d:76:ef:66:20:c5:1d:c0:71:5b:64:af:
a6:32:6d:2d:c7:0d:b5:d2:58:a2:fd:9d:88:62:0a:c8:e7:b1:
84:47:5f:7a:e7:16:8d:f6:9d:03:e1:03:4f:d1:76:c9:b7:45:
94:21:a1:b2:3c:79:1c:1b:4b:cc:91:0b:86:3b:60:c2:e0:ae:
5f:e6:44:fd:86:07:76:de:26:0d:7b:7d:52:a6:88:ca:27:a0:
46:ae:88:57:cb:36:94:53:d4:a3:ba:7e:f5:0c:ba:8a:a8:82:
98:61:7a:df:b0:b6:93:d2:90:0a:a1:fe:89:c3:b1:91:02:b0:
59:17:42:19:4f:53:0a:66:b0:3c:90:b2:68:4c:2f:6c:53:bc:
c3:2f:b0:c5:f0:23:84:0b:52:96:c4:0e:20:91:72:24:e9:7b:
00:4f:5e:51:c2:4c:b6:54:ef:a0:14:47:c0:80:1d:fa:51:ef:
10:0f:5a:cd:8d:76:1d:12:87:b5:9f:a2:ed:1e:07:ac:c3:67:
27:60:30:cb:48:9f:4a:ee:e9:c9:f1:45:7a:d4:60:27:6e:19:
ba:52:7d:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 12 23:13:03 2026 by rpki-client