
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11ccec99-97d0-483e-ae2d-3c0377baa4fb.roa
File: 11ccec99-97d0-483e-ae2d-3c0377baa4fb.roa (raw, json)
Hash identifier: SD/5PP2eSEKvzcVz6IEe/qEae0xxixMD0vZJP6snDq4=
Subject key identifier: 0F:26:B5:06:3D:02:63:1B:7F:65:AA:6A:06:66:B9:7F:4A:9D:41:B0
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6FC98AE286681C0F6C967DFE220AB9CD4E25233A
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11ccec99-97d0-483e-ae2d-3c0377baa4fb.roa
Signing time: Wed 07 Oct 2026 21:01:53 +0000
ROA not before: Wed 07 Oct 2026 21:01:53 +0000
ROA not after: Tue 05 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f2:740c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:c9:8a:e2:86:68:1c:0f:6c:96:7d:fe:22:0a:b9:cd:4e:25:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 7 21:01:53 2026 GMT
Not After : Jan 5 23:59:59 2027 GMT
Subject: serialNumber=a6687519f7350d8026279a8d874956d49de9589f4cbe635fbd87a717d8354703, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:16:9e:fb:d6:2d:3b:12:08:c2:4b:10:20:
94:97:d3:2e:8f:2d:6e:f3:93:9f:f2:84:fe:0e:e0:
04:76:e2:7f:58:03:4b:f7:1c:36:a3:dc:69:3c:d1:
cc:c2:e2:35:5f:3d:fd:95:0e:8c:a2:fb:72:df:b4:
75:2a:c0:ff:10:c7:c5:78:58:16:01:7a:88:e5:7e:
60:bf:0a:70:ac:3c:73:f7:9f:3c:20:1e:e2:8e:4e:
59:bf:98:0f:d1:ce:93:49:2c:e3:b9:26:de:fe:47:
20:3c:57:dd:fc:0b:1e:19:ce:c7:8d:a8:5f:d3:05:
84:29:91:a2:2c:2c:51:e0:3b:f6:c3:e9:4e:38:c1:
7d:24:ab:6a:9f:ee:b6:3b:3e:2e:b9:6e:71:4e:03:
88:4d:8e:d1:d6:15:58:ac:57:da:ae:37:24:9e:8f:
71:bc:c5:33:c0:2d:b1:b3:6a:0d:99:fe:22:73:76:
3a:ed:db:82:c9:23:a4:ff:88:ff:04:5f:48:a3:4d:
1f:09:53:86:a6:f7:5a:2f:be:ac:59:66:5b:59:26:
f7:a9:50:4c:e3:be:2c:e3:a2:60:2f:e6:c6:2b:58:
a8:0f:92:24:8b:6b:ca:18:d7:98:b4:56:f6:26:ee:
55:54:73:31:cc:e5:6b:41:b2:f5:08:86:68:fc:2c:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:26:B5:06:3D:02:63:1B:7F:65:AA:6A:06:66:B9:7F:4A:9D:41:B0
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/11ccec99-97d0-483e-ae2d-3c0377baa4fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:740c::/48
Signature Algorithm: sha256WithRSAEncryption
43:13:21:00:c8:6f:9d:3a:a8:19:b6:a4:9a:25:a7:42:1e:77:
15:a1:34:2b:8b:f8:38:29:56:d7:8c:49:5f:f5:46:54:75:b4:
30:b5:9f:59:ca:ce:a0:75:77:0a:2f:91:74:2b:57:20:7e:8c:
52:29:9c:ab:e2:5a:24:83:91:c6:32:32:fd:64:fa:b0:12:af:
1e:1e:9c:10:91:6b:a5:5a:85:ed:13:f4:bf:58:13:09:0f:ee:
97:64:b2:f9:29:39:df:d5:20:c5:b7:83:2e:40:61:5f:48:43:
b3:e0:eb:fa:02:a4:3f:cb:7f:50:6d:59:e0:aa:44:5d:9a:ee:
c5:c5:54:c2:27:54:a2:4f:57:8f:a1:fd:4b:0f:e3:e7:f6:3a:
c5:d4:9c:71:b4:ab:5e:50:3b:f0:35:51:ce:2e:4a:cf:a1:70:
60:36:f1:11:9e:d4:42:52:89:07:60:f8:7d:b9:06:f7:5b:25:
19:3d:29:a1:bf:c1:83:0f:bc:1e:b6:af:58:c0:8d:18:f9:31:
6e:15:ee:ba:a5:e2:4c:d1:d5:f1:51:5c:96:83:4e:aa:9d:f0:
08:f7:ba:7e:22:0f:59:24:69:1f:98:32:5c:11:55:c9:e2:10:
69:6b:be:c3:74:94:5e:14:3c:9f:a6:7e:71:d5:66:59:66:ee:
9f:e6:e2:c6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:18 2026 by rpki-client