
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/abd82657-873c-4247-976a-fa627e8bd542.roa
File: abd82657-873c-4247-976a-fa627e8bd542.roa (raw, json)
Hash identifier: Sgn9+rlMk/nCpuFw9ZxGJQvITJSymJqYtDh/ivmAADg=
Subject key identifier: DA:F7:D9:52:CA:17:A9:E5:77:80:23:8E:97:E6:C9:04:5D:CE:25:44
Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
Certificate serial: 21A61F19D25025B3C00E9221735BFD357C108B67
Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/abd82657-873c-4247-976a-fa627e8bd542.roa
Signing time: Fri 24 Jul 2026 00:00:05 +0000
ROA not before: Fri 24 Jul 2026 00:00:05 +0000
ROA not after: Thu 22 Oct 2026 23:59:59 +0000
asID: 54113
IP address blocks: 2606:2cc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:a6:1f:19:d2:50:25:b3:c0:0e:92:21:73:5b:fd:35:7c:10:8b:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257
Validity
Not Before: Jul 24 00:00:05 2026 GMT
Not After : Oct 22 23:59:59 2026 GMT
Subject: serialNumber=34c57e78baf1773327337af365f8387858c3410c6d15c4727894a40736f265b3, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:d7:3f:be:38:94:cb:64:c1:82:22:a5:31:
4c:01:0d:00:fa:39:ee:77:99:08:d7:b8:a4:3a:1c:
ae:8c:9e:82:f0:16:72:bd:85:8f:39:00:f4:66:91:
a1:4a:0c:19:61:67:db:86:b2:74:35:2b:78:35:13:
39:7b:6a:f9:84:b8:37:e7:42:17:52:7b:22:bd:84:
f9:a5:f1:22:55:e1:ef:7e:70:e2:9e:b4:20:3d:ce:
a8:02:44:91:9c:ca:17:9e:76:6f:3a:68:e9:8a:e9:
e5:a8:f1:6e:2a:75:19:04:80:98:b4:1a:28:44:fc:
02:b5:70:68:5b:44:bb:9b:8e:48:cf:8e:c6:e3:d9:
d4:c9:35:8f:ed:e8:53:f1:7f:a4:cc:b4:6d:e0:dc:
a3:c4:c1:98:58:81:a0:54:f1:8a:22:1d:ea:e4:59:
c1:67:53:47:f3:7e:1a:fe:5d:4a:e4:a3:0f:39:9c:
22:85:73:69:e6:35:be:41:6d:61:2b:05:7b:98:bb:
fc:b7:19:36:f2:57:6f:19:d8:42:98:29:0f:64:81:
75:d4:ff:4d:b3:13:e1:14:8a:ab:cb:77:bb:a3:83:
3b:67:e0:f5:d4:0c:50:62:4a:8a:ad:a1:bb:27:a6:
66:77:b2:10:81:a1:6e:58:7b:f1:ef:45:f1:b6:5a:
67:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:D9:52:CA:17:A9:E5:77:80:23:8E:97:E6:C9:04:5D:CE:25:44
X509v3 Authority Key Identifier:
keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/abd82657-873c-4247-976a-fa627e8bd542.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:2cc0::/32
Signature Algorithm: sha256WithRSAEncryption
72:86:64:5b:7d:36:23:ea:16:1e:9f:93:40:f5:bf:5a:f9:25:
ad:f0:f8:bf:16:54:9d:5f:8b:5c:6a:a9:38:e3:29:3c:25:f4:
88:05:73:50:8c:86:ea:47:63:e9:7b:bb:89:1d:b8:5f:cd:77:
d4:ca:11:85:f4:49:0e:4d:24:22:e7:d6:a5:5d:41:91:42:02:
b6:16:99:5e:d4:85:b8:94:14:6a:a6:9e:8a:98:95:7c:ae:88:
6b:9a:99:3d:ab:05:31:47:f2:6e:81:a6:9b:34:8f:6d:f0:09:
48:92:31:7f:97:26:0c:9f:bf:b1:64:37:03:ac:42:b4:c2:23:
67:f9:ba:6d:f9:95:85:3d:2b:b5:81:ea:c0:2c:77:58:bd:35:
5c:78:db:ea:4f:b4:d6:39:13:5e:8f:11:67:3a:1e:7f:87:f6:
7d:b9:a0:2c:25:2e:8e:95:7a:e4:93:c7:c6:53:93:3a:7e:cc:
34:58:9e:45:8d:c7:ab:d3:9b:f1:de:3b:eb:e5:23:50:2e:ff:
6d:70:c5:6a:86:e3:28:e1:93:40:97:22:ec:fa:8a:82:69:a4:
fb:f1:aa:d9:e9:79:25:6e:1f:a8:f4:12:81:61:4c:83:1f:57:
e3:e8:22:fd:e6:9a:7a:18:d3:35:73:59:8d:4f:9d:e3:ed:37:
fd:ef:a2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:30:41 2026 by rpki-client