
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/e96975a7-11bb-4200-823e-7366c8ecefda.roa
File: e96975a7-11bb-4200-823e-7366c8ecefda.roa (raw, json)
Hash identifier: JhHVp+r0bMr6ksHJb0rZguyNMpTCtVO2g0EPrgrPUu4=
Subject key identifier: D6:68:B0:4D:15:CB:39:97:DE:74:9A:70:EB:BA:1F:E9:82:C0:AC:2E
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 520E0B2AD03EE54835C03B5860006E8E16B9F9EC
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/e96975a7-11bb-4200-823e-7366c8ecefda.roa
Signing time: Thu 14 May 2026 21:49:02 +0000
ROA not before: Thu 14 May 2026 21:49:02 +0000
ROA not after: Wed 12 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:8380:f00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 24 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0e:0b:2a:d0:3e:e5:48:35:c0:3b:58:60:00:6e:8e:16:b9:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: May 14 21:49:02 2026 GMT
Not After : Aug 12 23:59:59 2026 GMT
Subject: serialNumber=730bc29018ccc9deb75dbd60df867c404c1368889ff4969d418d6c7ed0440b58, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ec:bb:32:a4:85:74:64:6a:88:64:f5:fa:c1:
44:82:84:68:0c:c0:61:0b:db:43:5b:48:72:d5:8b:
97:9b:96:9e:ab:b4:7e:97:63:51:a6:9a:85:28:fb:
d4:2a:a0:f7:b1:36:c7:9d:57:43:85:1a:2b:df:71:
7d:0a:25:62:36:61:9a:5a:30:38:00:2f:6d:07:12:
32:65:61:20:f0:cd:88:1c:95:ee:29:75:d6:4e:a0:
6e:be:11:51:0b:00:28:04:4c:f0:c9:70:1b:94:81:
aa:cd:af:a1:ee:d7:7c:13:9c:42:c7:79:ce:0f:1c:
df:e7:ba:3b:e6:4c:a1:ee:a9:e0:6e:93:d6:cc:45:
9e:50:84:bc:80:fd:53:39:02:de:a6:70:b6:ea:20:
f3:90:45:ee:d1:56:f6:ed:01:c1:b7:87:26:eb:ac:
e1:96:78:90:74:e4:78:e3:bc:50:cd:1b:f8:81:97:
e2:06:8d:14:f0:86:76:cb:f7:bc:fa:73:a1:5a:21:
f3:1b:8f:4e:be:6b:72:19:e9:d7:24:81:b2:c4:11:
e9:9a:f1:3a:65:e0:52:32:5c:30:98:69:45:2a:ce:
50:06:e0:22:c8:6f:13:24:d6:35:21:4b:1f:24:cf:
9a:be:64:8f:3a:7a:6a:65:dd:1f:24:1c:45:70:5f:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:68:B0:4D:15:CB:39:97:DE:74:9A:70:EB:BA:1F:E9:82:C0:AC:2E
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/e96975a7-11bb-4200-823e-7366c8ecefda.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:8380:f00::/40
Signature Algorithm: sha256WithRSAEncryption
b1:c7:86:0c:09:62:20:c6:55:db:06:78:25:ad:dc:00:b3:9b:
60:4c:36:cf:bd:c2:75:5b:bd:7a:98:5b:fd:82:43:c5:56:3a:
0e:85:97:ea:a5:a2:88:e9:cd:e8:46:bb:53:ac:67:a9:27:b5:
b7:21:32:b8:03:58:e3:b3:eb:ff:44:91:fe:6b:98:69:4d:47:
2f:5c:f0:35:07:4c:22:c4:d7:c2:e3:89:4c:61:56:a2:24:02:
19:ee:7c:06:e1:52:c9:aa:da:95:75:93:52:1c:3f:75:c6:ed:
15:b3:d3:c8:5f:98:14:41:5b:21:ea:c8:e9:f1:bc:cd:13:fd:
03:76:9c:ce:7a:f1:50:3a:30:cb:72:ec:76:6b:ad:cb:76:c1:
af:04:40:5a:1a:93:68:da:b5:e2:32:7e:88:b0:b8:0a:c4:51:
d4:f1:01:f9:46:b2:51:97:15:39:2c:06:64:49:8a:77:36:47:
f3:6f:6b:44:de:20:ea:dc:f2:4b:a0:a2:f9:7b:00:5b:c1:e9:
9c:a6:5e:73:5b:80:45:9f:eb:ae:45:1f:87:d6:e5:24:72:c5:
fb:2e:f5:a2:f1:b8:f2:3c:12:b6:cf:83:d4:01:47:d1:a2:15:
45:d5:a8:f1:9d:00:ac:c2:3d:3f:1d:21:0c:92:a9:ab:29:6e:
78:84:39:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 22 16:04:32 2026 by rpki-client