
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa
File: 14940c51-4f09-4f8f-b749-976965c7a655.roa (raw, json)
Hash identifier: 6JJFwBbfuakFu6nB6F+0FkZ5ThMtRKoDYL3AgbvR/Ek=
Subject key identifier: 8C:88:A9:C3:17:91:3D:54:4F:9F:1A:20:37:71:C7:29:6C:F4:C3:3F
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 60276176C158DDF4F3280798E87CF556BC0FC280
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa
Signing time: Sat 08 Aug 2026 00:50:44 +0000
ROA not before: Sat 08 Aug 2026 00:50:44 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:6124::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:27:61:76:c1:58:dd:f4:f3:28:07:98:e8:7c:f5:56:bc:0f:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 8 00:50:44 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=0ff88f1639b5eb2060438f91ee3aa185aa7c6015ba93b8e29809619513fe7a97, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:52:fe:61:ae:95:47:e6:14:37:05:a5:aa:
ad:02:e3:aa:dc:de:1f:25:fa:58:3e:3b:48:3a:96:
0b:8f:2e:67:02:2b:85:f5:a8:bc:f9:ab:aa:de:0a:
b2:2c:a9:65:7d:37:59:f4:9a:65:54:e8:15:f7:05:
c4:d6:5d:b7:10:6e:4b:62:57:61:fd:d9:56:c2:07:
39:e2:23:ef:ec:97:ad:b7:f2:4f:d0:73:ee:c1:d0:
54:60:12:a5:93:c1:60:63:8f:6c:7e:2c:f7:7d:d2:
67:63:4f:4c:78:b1:46:51:f8:5e:cd:8e:99:0c:13:
c1:f2:ae:e9:10:82:45:7a:c5:38:14:01:b7:51:0a:
dd:65:85:b1:46:99:16:75:31:ec:62:58:fc:3c:e5:
20:fe:4b:d3:5f:c3:c4:99:9d:da:41:1a:81:94:03:
cf:53:f8:7d:67:44:92:90:b9:e1:b3:70:58:ff:24:
a3:12:f5:67:80:d7:f1:e9:1b:49:31:9c:80:a7:29:
6b:30:89:b4:7c:bd:20:d3:2f:90:cc:99:cf:a5:da:
e9:62:ea:d3:7c:95:58:8b:21:81:ef:b8:37:e5:45:
2b:e7:4b:a4:ac:f0:53:2f:5c:28:9f:ad:0e:aa:27:
bc:37:cf:15:37:be:43:b5:27:09:e5:b6:e3:bb:45:
70:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:88:A9:C3:17:91:3D:54:4F:9F:1A:20:37:71:C7:29:6C:F4:C3:3F
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14940c51-4f09-4f8f-b749-976965c7a655.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:6124::/48
Signature Algorithm: sha256WithRSAEncryption
76:18:bc:83:d3:33:2e:15:0c:25:e5:32:18:43:dc:08:13:5e:
3e:3e:39:1c:54:76:ed:0b:7c:bc:37:9f:ba:a2:9a:a7:d0:8c:
96:df:1a:d9:fe:3d:8f:86:1c:72:20:96:23:e8:c4:a8:0f:2c:
a2:b0:84:28:82:f9:5e:1a:f7:28:d0:b4:cf:d4:f7:ae:64:28:
b8:f8:a3:8e:be:d9:65:4a:86:15:e6:94:54:25:22:c5:c4:06:
15:b0:cc:08:47:2e:01:c4:1f:62:ef:0a:f9:ee:16:0f:75:58:
dd:1c:fb:4b:d6:d8:68:41:ef:92:23:fb:e2:23:ce:3d:bf:bc:
f4:c5:62:50:a7:66:d6:23:7d:b2:1b:c3:26:33:33:b7:2b:ee:
d0:54:78:76:0d:e1:b6:64:ff:fe:d4:2c:00:24:43:b5:67:d2:
c9:68:db:31:b9:4d:15:d2:a9:e6:dd:50:c9:f8:b2:8c:f0:32:
7e:06:77:b0:13:b2:d6:56:55:58:79:2f:32:90:2f:8a:96:20:
dd:8d:2e:02:ef:48:75:1e:48:68:ce:ca:00:6a:29:84:c7:53:
23:61:cf:53:21:7b:db:90:41:c6:59:a3:05:6c:9b:23:d5:4e:
de:cf:c4:92:95:01:52:88:75:1a:f8:6c:b0:fc:07:19:6f:0f:
d0:0b:c6:be
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:18:11 2026 by rpki-client