
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa
File: f5b1d1bf-721f-4a57-a400-f549c190180c.roa (raw, json)
Hash identifier: p8SLb8StQrZLPdLSSDBavZCTs0rnDrqVmIA17VFg61E=
Subject key identifier: 3B:7D:06:92:29:5A:AF:23:A7:B3:47:5C:33:75:60:F0:9A:17:83:4C
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 39C2321973C77BB227EABA06388604CDC093A951
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa
Signing time: Thu 23 Jul 2026 15:00:21 +0000
ROA not before: Thu 23 Jul 2026 15:00:21 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2606:8140:400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c2:32:19:73:c7:7b:b2:27:ea:ba:06:38:86:04:cd:c0:93:a9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jul 23 15:00:21 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=e1e858ded22ca058a80c0b072e1f7362e51a01d1ebaa7226f8312565a4e44e0d, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c7:19:2a:38:c2:c2:26:a2:70:9c:08:c6:6d:
80:c5:01:50:0b:b5:41:53:18:4e:b2:d9:06:8b:8e:
d8:b1:9e:e1:b6:71:10:fb:7d:d6:43:0c:e0:f7:c2:
23:3e:e6:a5:35:59:e4:1d:3a:bf:16:af:14:24:5c:
69:68:5f:b1:a2:0c:38:09:5e:bb:bd:89:b8:9d:61:
b5:00:7c:6a:5c:33:2d:46:b9:e3:98:4e:f2:97:a5:
7d:6e:cf:b7:c0:62:b8:27:9e:70:46:ab:ec:19:8f:
5e:07:df:7b:6b:de:f1:8f:fc:d5:17:93:7e:ad:81:
4f:b9:f0:d8:a3:91:ed:2d:09:c7:99:3c:84:23:f1:
7e:4f:20:ac:a3:58:03:de:c6:dc:01:11:1f:6f:6c:
16:7d:c1:44:f7:37:e3:98:16:f7:eb:87:c8:b2:da:
24:2e:ae:94:0b:87:82:fe:7b:9d:19:4f:8f:bc:af:
de:e6:d6:fe:af:ea:33:b3:d7:c0:bb:39:54:10:82:
34:ca:da:cb:ec:4a:cd:f6:6a:49:0b:28:dc:6f:c8:
81:12:52:e2:e2:83:29:3f:d9:e4:66:07:9c:cc:8c:
2c:44:b1:0a:69:5e:6f:15:79:3f:3e:f6:85:f7:e5:
80:70:7a:7a:bc:2c:8a:2f:d1:ec:f7:21:90:89:72:
78:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:7D:06:92:29:5A:AF:23:A7:B3:47:5C:33:75:60:F0:9A:17:83:4C
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f5b1d1bf-721f-4a57-a400-f549c190180c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:8140:400::/40
Signature Algorithm: sha256WithRSAEncryption
6c:c5:f0:d5:9f:1d:e7:cc:c8:db:4f:7e:bf:47:da:33:96:d8:
20:3a:1a:60:e8:b8:24:d0:53:f2:d7:aa:67:96:a3:13:f0:b9:
23:32:05:fd:43:52:bf:36:21:7a:bd:c9:79:85:1f:84:6d:b3:
40:f9:a4:63:b3:51:7a:b3:da:23:03:78:e0:fe:79:00:08:2c:
43:1a:55:c8:f4:1f:4f:a6:0f:23:29:2e:3e:2b:82:b5:7e:f2:
69:a7:1f:e3:77:ae:c3:08:e9:e9:8f:23:21:cd:87:cc:a9:5d:
32:5f:31:28:94:b9:5f:60:ce:b7:a2:4b:88:72:d7:90:d6:e5:
c2:a6:bd:c3:6d:ed:40:51:96:0d:1f:90:03:61:31:39:74:f3:
14:58:ec:71:59:ac:53:b4:49:e4:65:da:85:73:27:b8:20:af:
49:f7:e1:c7:70:91:81:0d:1e:a3:3e:fe:93:99:26:ca:97:7f:
35:ec:fb:8e:93:10:cf:08:6b:26:f3:bb:0a:98:86:f7:ca:6a:
51:20:38:59:3d:0b:b4:7a:8d:a3:71:fc:17:b0:ef:eb:71:f5:
c7:e8:a2:d9:2d:df:27:e7:86:e1:e7:ec:33:67:24:5d:40:e1:
52:24:7c:68:a0:c9:e0:5c:4d:99:b3:0a:79:be:e0:5a:14:b1:
07:17:94:c3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:41:27 2026 by rpki-client