
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa
File: 06e0a97e-b500-434c-94b4-3eadd34e5d34.roa (raw, json)
Hash identifier: lMsnLrf0aiYNvDsrGmIGMvksy1rF6zuLOcQfHSt+6bc=
Subject key identifier: 0D:8D:EC:DC:1E:D7:B2:20:9D:3D:AD:0B:4E:21:68:55:DB:4D:DD:71
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 214EA5C8DD0F51CCC1C5B3578E4147719C7089D4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa
Signing time: Sat 08 Aug 2026 00:50:26 +0000
ROA not before: Sat 08 Aug 2026 00:50:26 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:f103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4e:a5:c8:dd:0f:51:cc:c1:c5:b3:57:8e:41:47:71:9c:70:89:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 8 00:50:26 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=83a214472daf73599a4b8036311a19b5eb889ea2dbbd938343e6ad13700c04dd, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5a:1b:fc:07:cc:db:33:ec:a9:e8:8f:47:65:
53:cf:92:27:70:22:f0:86:c3:7d:36:e9:35:11:3f:
78:a1:7f:f7:96:8d:c7:90:fe:22:d2:49:76:45:e9:
7c:e8:c7:7e:7c:c5:d8:d3:be:4d:69:a5:a1:d3:fe:
2a:44:95:11:5e:d8:f0:a4:03:6b:c7:50:cb:ef:3a:
e8:db:ef:61:36:07:fe:f9:68:3a:44:b2:30:b5:0b:
1e:a8:84:2f:20:6b:65:9a:1d:d5:23:83:cc:c7:71:
c2:9b:7a:f8:04:1f:9f:93:1b:c1:56:b4:e8:68:2a:
34:b4:08:cf:eb:87:7c:4d:41:36:ce:90:bf:d9:c6:
5e:06:c2:1c:91:2a:f6:1d:f3:1b:c3:ce:37:d7:79:
48:66:69:f3:13:7e:c8:a2:ec:11:de:d2:83:ee:48:
2c:ce:42:f6:df:3e:42:07:13:f1:3f:8a:c4:d7:7c:
c3:c6:42:57:ab:83:20:3f:09:fb:6f:2d:fb:77:8e:
0e:50:5a:38:70:9a:34:3e:dc:81:20:cb:87:5e:ae:
20:cf:3e:3d:da:46:98:8d:e5:b3:07:6a:77:ac:ac:
0b:ea:5c:ae:3a:35:e3:ef:28:38:39:25:3a:83:4e:
14:2f:60:a0:73:0a:00:a0:4c:a6:81:a4:00:29:73:
82:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8D:EC:DC:1E:D7:B2:20:9D:3D:AD:0B:4E:21:68:55:DB:4D:DD:71
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/06e0a97e-b500-434c-94b4-3eadd34e5d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f103::/48
Signature Algorithm: sha256WithRSAEncryption
63:d6:0c:ea:dc:4b:09:ed:c1:9c:39:8a:87:9f:f8:11:7a:df:
e8:5f:f8:64:58:72:38:53:4a:68:aa:7a:13:2b:a0:c8:ab:89:
35:06:74:3a:d7:21:91:75:1b:a2:f5:45:11:3a:4d:35:4b:fb:
7b:8a:5c:2e:0f:ba:68:93:80:99:e1:05:60:bf:7b:8e:93:7b:
9d:36:75:71:26:ae:4a:1c:e1:67:a5:b2:d1:98:bd:0e:34:04:
2a:b8:76:54:0c:7e:d5:7e:7f:06:a5:ef:c4:c9:3b:ab:56:50:
d0:c0:d5:c1:89:9f:c1:9d:dd:46:9d:8b:0c:00:27:05:f0:60:
6a:ae:83:80:5b:f0:48:e4:1c:8d:82:c6:7c:e6:fd:45:72:3c:
97:53:cd:86:c1:09:07:c4:f8:44:03:66:35:2b:78:11:ec:3a:
8b:8f:62:5b:87:17:7a:3e:7c:55:94:aa:c5:98:8c:ff:9b:ca:
ba:19:8a:c4:7b:7e:ae:53:fe:76:82:64:3e:70:33:2a:62:88:
6f:2c:06:a7:83:a8:39:ef:f3:7f:cf:c2:ae:3a:85:b0:49:18:
f6:b0:91:42:1a:f1:c1:b1:c1:19:35:40:e5:62:2f:3e:58:f6:
05:1c:de:50:f8:4c:1a:4d:4a:1b:00:f7:71:de:ce:68:99:04:
63:5b:e4:be
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUIU6lyN0PUczBxbNXjkFHcZxwidQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDI2WhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A4M2EyMTQ0NzJkYWY3MzU5OWE0YjgwMzYzMTFhMTliNWVi
ODg5ZWEyZGJiZDkzODM0M2U2YWQxMzcwMGMwNGRkMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDHWhv8B8zbM+yp6I9HZVPPkidwIvCGw3026TURP3ihf/eW
jceQ/iLSSXZF6Xzox358xdjTvk1ppaHT/ipElRFe2PCkA2vHUMvvOujb72E2B/75
aDpEsjC1Cx6ohC8ga2WaHdUjg8zHccKbevgEH5+TG8FWtOhoKjS0CM/rh3xNQTbO
kL/Zxl4GwhyRKvYd8xvDzjfXeUhmafMTfsii7BHe0oPuSCzOQvbfPkIHE/E/isTX
fMPGQlergyA/CftvLft3jg5QWjhwmjQ+3IEgy4deriDPPj3aRpiN5bMHanesrAvq
XK46NePvKDg5JTqDThQvYKBzCgCgTKaBpAApc4IrAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUDY3s3B7XsiCdPa0LTiFoVdtN3XEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzA2ZTBhOTdlLWI1MDAtNDM0Yy05NGI0LTNlYWRkMzRlNWQzNC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPD78QMwDQYJKoZIhvcNAQELBQADggEBAGPWDOrcSwntwZw5ioef+BF6
3+hf+GRYcjhTSmiqehMroMiriTUGdDrXIZF1G6L1RRE6TTVL+3uKXC4PumiTgJnh
BWC/e46Te502dXEmrkoc4WelstGYvQ40BCq4dlQMftV+fwal78TJO6tWUNDA1cGJ
n8Gd3UadiwwAJwXwYGqug4Bb8EjkHI2Cxnzm/UVyPJdTzYbBCQfE+EQDZjUreBHs
OouPYluHF3o+fFWUqsWYjP+byroZisR7fq5T/naCZD5wMypiiG8sBqeDqDnv83/P
wq46hbBJGPawkUIa8cGxwRk1QOViLz5Y9gUc3lD4TBpNShsA93HezmiZBGNb5L4=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:16:02 2026 by rpki-client