
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa
File: 0fac8622-056c-4350-9d70-b107bedf3e94.roa (raw, json)
Hash identifier: cvC6JLPxuwi2+LOYbeHlrXweEo2t14puCcWGrQMrpW4=
Subject key identifier: E0:B9:DA:50:A6:BF:B3:F8:8B:6F:5E:77:FD:7B:CF:A8:52:2D:DC:ED
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 43E43721B1C5B798B5F325D3EF500BBB7671F6D1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa
Signing time: Sun 11 Oct 2026 15:10:33 +0000
ROA not before: Sun 11 Oct 2026 15:10:33 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:6103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e4:37:21:b1:c5:b7:98:b5:f3:25:d3:ef:50:0b:bb:76:71:f6:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 11 15:10:33 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=fd6531cc53a69b21461bb1c050312a4ceb3dbc00d487d10980309e616cf88350, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cc:c8:e0:48:59:41:7f:0a:9c:5c:ac:29:4a:
60:fb:3a:b0:ad:a8:55:14:a9:b5:3e:bd:cd:9e:2b:
6b:90:41:fc:f1:4e:0d:5e:cc:b2:9b:5c:b2:3f:8c:
05:ef:0c:e0:dd:94:06:2a:c6:5e:27:63:11:93:2c:
56:17:7f:09:5b:5c:58:15:08:f0:11:df:fb:82:b7:
a3:57:a3:07:23:70:b4:a2:48:ae:86:9f:d9:e4:f2:
ca:31:40:72:80:b6:4b:78:69:93:9c:d6:df:99:6c:
d2:b0:11:07:6c:95:d8:c4:56:92:cf:be:71:4b:52:
82:10:7d:95:04:c6:ff:ff:75:86:89:c5:89:a9:11:
1d:a3:31:fe:57:b5:38:90:ae:b3:00:8c:c1:9f:d6:
7c:2d:67:be:ee:53:03:f9:6c:57:7a:c6:34:27:69:
22:21:63:47:d3:20:82:14:d4:4f:28:62:8e:b5:14:
b0:7d:a6:16:65:2b:4c:41:42:35:97:c1:52:cf:ad:
ad:98:0a:91:e2:ef:85:11:4f:ad:61:47:b8:bc:1f:
da:a2:b3:c1:9f:d7:26:f6:8b:53:7d:65:75:56:fc:
1e:32:fa:9a:18:ab:21:5b:3f:6f:b7:72:a4:b3:cd:
33:89:8d:12:dd:24:33:51:43:b4:e3:0f:a9:8b:24:
cc:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:DA:50:A6:BF:B3:F8:8B:6F:5E:77:FD:7B:CF:A8:52:2D:DC:ED
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/0fac8622-056c-4350-9d70-b107bedf3e94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6103::/48
Signature Algorithm: sha256WithRSAEncryption
16:bf:40:8b:1c:ee:25:13:c0:2a:ba:65:db:26:f6:fa:e7:fa:
89:a9:09:41:c1:ed:14:6d:d2:46:c5:0d:c8:49:fd:18:e7:24:
48:64:57:44:e6:59:eb:8d:09:93:4a:ed:cf:67:59:96:18:be:
cb:a2:e5:28:bd:77:8f:47:cd:fa:6d:0c:36:59:92:9c:70:f9:
a8:e9:00:d6:35:37:a8:50:76:b8:16:87:45:e9:1d:5d:aa:fb:
ab:47:62:44:59:2e:89:55:c9:be:7a:fb:58:fc:ed:90:d8:38:
ef:44:06:64:8b:cf:2f:d3:39:9c:c9:a8:86:6a:c4:dc:a4:80:
6e:78:e0:3c:a7:24:67:b3:d5:2e:ab:5e:53:71:04:71:fc:ac:
a1:2a:a2:e3:f6:e8:e1:b5:e3:d4:01:04:0b:fb:62:34:ee:97:
f2:a0:fd:d1:59:cc:10:e2:1b:1a:37:cd:27:11:6e:9e:29:ff:
c1:52:84:97:28:b4:30:63:64:a6:7d:f3:16:9d:0b:a5:68:83:
4b:ea:c5:05:50:0b:82:aa:b1:40:5d:1d:d5:84:db:bf:8a:9c:
e1:e5:5f:29:55:48:4d:2d:35:67:3d:a7:ad:92:d8:14:4f:2d:
15:73:59:86:fe:6a:ae:1b:34:c5:04:4f:80:84:79:87:f0:9f:
e0:f0:63:e2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:05:39 2026 by rpki-client