
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
File: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (raw, json)
Hash identifier: XxgeqeS0ttq0Y7BPyk36ze1e4J83aEnIbW7R2exGF14=
Subject key identifier: CF:11:1D:71:94:3B:CF:03:CA:5C:14:9D:AA:1E:34:C0:6F:A1:40:45
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 0F7C6AD5A466333E50F21F7C864498D298A6E77C
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
Signing time: Fri 08 May 2026 00:10:05 +0000
ROA not before: Fri 08 May 2026 00:10:05 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:b140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7c:6a:d5:a4:66:33:3e:50:f2:1f:7c:86:44:98:d2:98:a6:e7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: May 8 00:10:05 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=92a0b8ec51eef371755dcc155467f1b21daea38388c245f726aa432b5dae2af5, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:ea:84:51:67:23:d7:e1:50:08:df:85:59:
08:4d:46:6e:f3:98:ca:98:fa:4a:b3:6a:d9:bb:82:
9f:51:00:1a:51:c9:55:56:e5:20:ac:90:3a:4a:e8:
37:bc:ba:50:ff:c6:16:f4:9d:92:06:98:e2:46:44:
70:53:68:59:09:43:fa:75:fe:15:8b:d3:e6:e7:5c:
a2:57:de:dd:e9:4c:b1:a2:af:32:65:25:a5:d6:30:
d9:41:08:4d:2e:3b:80:7c:f7:85:7e:cf:08:d3:c6:
7f:9e:6d:87:e2:23:52:f8:9c:7c:68:bf:8c:5a:ce:
8e:bf:60:d8:ee:c9:c6:ba:ff:27:11:b3:46:09:79:
8b:1b:dd:f3:e1:73:a2:f9:72:ce:61:fc:95:dc:22:
e8:56:57:a8:d5:5e:ea:ea:dc:21:8b:7c:10:9d:2f:
0a:60:03:3d:50:d0:6a:ab:18:18:21:f4:bc:62:9c:
0d:65:65:e6:ba:71:2c:10:94:36:e9:df:44:e2:84:
08:a7:c8:ae:a4:50:b1:dc:14:12:55:29:aa:d9:69:
80:25:20:9e:30:eb:39:dc:79:d3:e5:31:a3:92:50:
15:2d:ab:42:6f:6a:e8:21:b8:87:95:cd:be:4c:33:
d5:33:01:d4:23:fa:17:3f:ba:70:51:8b:b1:ff:29:
e8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:1D:71:94:3B:CF:03:CA:5C:14:9D:AA:1E:34:C0:6F:A1:40:45
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/9318efc3-4d3a-413f-86c6-169a71d2eccb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:b140::/32
Signature Algorithm: sha256WithRSAEncryption
67:e1:4d:c5:ba:d2:fd:9a:7a:01:2b:4b:b2:df:49:03:b4:bc:
0a:4b:d8:dc:20:5d:a1:cc:d7:d0:42:db:03:c9:a4:47:81:43:
68:c2:ad:71:94:35:81:9d:97:75:83:77:09:b2:0b:3f:2f:48:
d8:bd:92:3e:73:2c:1c:2e:c3:b2:84:c8:71:c6:9f:0d:be:50:
f7:7b:cb:4e:2a:d8:10:c1:f6:68:25:2d:b3:51:0b:60:3c:1b:
42:40:ff:ae:a4:82:8e:5d:af:15:17:a5:37:03:25:8e:80:38:
95:64:34:11:71:b4:78:96:7f:16:15:bd:62:60:fb:f3:8f:02:
ed:19:7e:71:61:67:4b:4a:13:38:34:7e:96:2b:d0:11:2d:c6:
2e:34:c9:16:0e:1f:a2:f2:dd:29:85:06:08:89:45:ac:4f:8c:
2b:a2:05:f2:24:4d:4a:e1:9b:47:c4:68:1f:cb:a1:61:8a:fb:
13:21:0d:3e:ce:3d:57:58:a4:e5:9a:d8:c1:82:a1:62:d3:f5:
1b:2f:51:d9:b3:90:e7:24:37:bf:fc:69:7b:ec:ec:1d:9d:d8:
de:51:5e:73:8e:68:3f:bd:e3:fd:08:2e:19:40:80:06:7c:32:
79:f6:d5:1d:eb:8d:79:53:d0:34:51:2a:9e:75:38:b4:62:fd:
9b:1b:b4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:29:48 2026 by rpki-client