
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06a0d8f0-7393-42fd-8c6e-cd68df477bb8.roa
File: 06a0d8f0-7393-42fd-8c6e-cd68df477bb8.roa (raw, json)
Hash identifier: zZHD3+sWIvxipNb451HlLWFVwf200RDRkVWnX5bA44A=
Subject key identifier: D6:C4:EB:55:CA:0D:FA:67:2E:CD:20:A3:5E:1B:60:AA:88:DB:6D:AE
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 494937A75E6394CC1CCCCB65D75AE3BE2171C14D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06a0d8f0-7393-42fd-8c6e-cd68df477bb8.roa
Signing time: Fri 13 Nov 2026 21:34:17 +0000
ROA not before: Fri 13 Nov 2026 21:34:17 +0000
ROA not after: Thu 11 Feb 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:431c::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:49:37:a7:5e:63:94:cc:1c:cc:cb:65:d7:5a:e3:be:21:71:c1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Nov 13 21:34:17 2026 GMT
Not After : Feb 11 23:59:59 2027 GMT
Subject: serialNumber=8262d4c35f0bbaac0d7d48405f1d5d052586e5bd28f7355df75ef089562f925d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:35:b1:bf:bb:94:81:8a:b6:a3:12:44:06:ca:
00:74:8a:cf:83:32:78:2d:82:1c:cf:dc:0f:77:69:
1c:26:c1:7a:34:2d:f0:d4:c8:c1:16:dd:40:be:58:
38:5b:b6:09:c8:a3:0c:85:b4:b9:f9:87:b5:b1:24:
31:8f:49:67:7e:05:62:2f:91:f2:28:c5:92:ce:86:
7c:f6:aa:b3:d1:bf:75:7f:62:3f:c9:df:a7:df:64:
2a:36:78:5a:c3:69:39:bf:12:d5:03:c1:62:36:47:
d7:bf:36:cc:6b:f8:32:90:e2:fe:33:fb:b2:d2:33:
04:5e:a6:08:c3:60:7e:33:f1:2b:58:b3:af:94:52:
d5:69:89:ef:a4:87:2c:2c:69:e0:07:a3:c3:81:5b:
cd:27:69:fa:d3:48:81:48:51:7a:61:e3:db:9c:8c:
1d:54:bf:4b:44:c7:47:e3:95:44:e6:c0:e2:ea:10:
9c:e7:d0:9b:e0:a0:34:13:4d:f7:f3:95:67:8f:79:
8b:19:70:48:90:1a:14:bc:38:cf:68:8d:99:35:ea:
3c:eb:b1:6d:8d:51:ec:f6:83:59:1a:92:ee:ac:b5:
d3:35:a9:c4:79:44:56:d2:2e:17:86:5a:e7:b7:c2:
e4:a0:f2:84:18:c0:b6:e9:09:9f:93:28:ea:c6:6a:
1f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C4:EB:55:CA:0D:FA:67:2E:CD:20:A3:5E:1B:60:AA:88:DB:6D:AE
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06a0d8f0-7393-42fd-8c6e-cd68df477bb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:431c::/46
Signature Algorithm: sha256WithRSAEncryption
7b:0f:86:3b:21:59:2e:cb:9d:fb:29:9f:77:ad:3b:26:10:00:
a3:99:6d:63:62:d3:0b:c7:ec:a9:b9:2a:ba:2b:6a:84:cd:e1:
1a:19:78:83:65:be:43:82:a3:7f:4d:ed:7f:4d:b7:3c:b2:3b:
fa:fb:99:6b:a1:98:6b:c7:79:36:90:eb:94:6b:8a:88:12:19:
3f:9a:e1:2b:b7:a3:98:62:ce:f4:a6:2a:e9:ea:6f:46:fd:db:
fe:8d:3c:92:66:69:0b:86:91:d4:8a:cd:76:cc:36:01:0e:e3:
68:08:46:8a:b1:77:aa:71:ec:e3:41:54:35:d0:63:22:0f:88:
ef:e4:0a:1b:55:1f:4e:6f:c4:17:6e:6a:bf:72:67:0a:cd:57:
e3:a3:79:c8:8c:e7:74:e2:45:0c:fe:a8:88:51:18:7d:50:71:
61:a4:ef:c8:17:0e:bb:5f:18:12:a1:5c:65:6b:34:6c:9c:88:
32:2f:13:6f:11:4a:74:c2:0b:49:f9:7a:21:be:e9:dd:da:ec:
10:21:78:a8:f9:8e:3f:db:1c:be:f1:70:1f:26:9e:22:29:fc:
fd:cd:c0:b2:58:65:4d:bf:33:ea:6e:1c:37:1f:64:79:51:85:
4d:de:a4:a4:a6:f4:30:82:b6:f6:f6:50:a4:81:67:21:73:7a:
d9:0e:02:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 05:43:13 2026 by rpki-client