
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa
File: 14cb127f-8fa4-40c0-b06e-cd65866872dd.roa (raw, json)
Hash identifier: MSFmf3wLBY0mU2Y+qZn3B9pthCJPEfYfB2MpKtNF/cg=
Subject key identifier: DD:A2:3B:AC:84:13:93:3F:61:B4:8E:9D:D9:2C:E0:D2:8D:44:C3:29
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 500835D29ABCB45A8315BB9FEEE72C6850042796
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa
Signing time: Mon 27 Jul 2026 03:10:10 +0000
ROA not before: Mon 27 Jul 2026 03:10:10 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 10 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:08:35:d2:9a:bc:b4:5a:83:15:bb:9f:ee:e7:2c:68:50:04:27:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 27 03:10:10 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=e5b0fca67764f91eb8a9493d826073641b58ff8408f7bb18108c3cb3fb19cc8c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:60:ac:4a:d7:0a:45:92:4c:10:2f:58:57:3b:
87:4c:84:40:14:c3:2a:12:8d:3f:e0:63:53:ad:63:
ad:b8:60:15:fd:2e:57:4f:28:3c:ae:91:89:49:a4:
bc:fb:36:6d:39:67:53:b4:1b:fd:06:2e:9c:c1:75:
ac:90:14:f8:ec:f3:99:da:14:1a:fa:8f:97:2e:e1:
74:80:c0:9c:3f:b0:2d:ed:83:3e:c3:a4:55:51:d5:
a6:7e:ba:63:e9:b8:09:09:53:bc:46:cf:f8:78:64:
75:db:04:2b:5c:18:fd:e7:27:7a:ab:08:9b:4a:52:
7a:d8:46:d5:55:da:66:d6:f4:ea:b6:c4:a0:77:be:
ca:79:b5:e9:ca:a2:11:8f:98:30:55:d0:b9:c9:cd:
1d:96:06:a3:85:75:09:0b:7d:ae:2a:00:b4:22:3d:
c5:2e:5f:15:2e:f7:01:e3:43:51:a8:d1:e9:e9:3b:
da:8e:99:3d:c5:04:d9:26:7f:b6:15:aa:a8:cb:2f:
2e:b5:28:3c:86:8c:17:fd:7b:e9:c1:85:74:13:ad:
e4:46:ee:06:06:06:d3:91:ea:c1:99:fb:b4:9a:17:
30:c7:a1:0d:c7:8a:f0:78:d6:96:fe:13:e9:6e:a9:
62:18:41:45:16:51:1a:d7:f6:31:70:8d:f3:49:82:
5b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A2:3B:AC:84:13:93:3F:61:B4:8E:9D:D9:2C:E0:D2:8D:44:C3:29
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/14cb127f-8fa4-40c0-b06e-cd65866872dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:700::/40
Signature Algorithm: sha256WithRSAEncryption
77:82:8e:24:b8:82:bb:6f:55:e2:a3:9e:a4:cc:a4:44:78:af:
df:0b:06:41:5e:cd:60:0d:2d:cc:e7:c3:d0:b5:e0:2a:79:c0:
fe:48:e4:6d:73:65:3f:5e:5e:a7:84:e6:75:69:7b:97:8d:fd:
29:36:ce:51:4a:08:b7:55:9b:cc:58:14:b0:bc:d7:cb:c6:a9:
16:4b:35:b3:e5:f5:19:6a:85:f3:4e:38:bc:3a:2e:90:ee:41:
61:13:16:1e:16:28:6c:8d:6b:50:24:ac:cd:d6:7b:f3:cd:7e:
9f:bd:fb:39:4c:67:d1:59:57:87:11:a4:9c:04:c7:d9:5b:ef:
ea:0f:9a:2b:57:6c:c0:a4:bb:f5:c7:80:fc:57:d9:f5:02:ea:
ab:6d:4c:74:b0:01:3f:07:e6:df:e8:16:58:9e:77:f7:45:ed:
a0:ef:9b:ce:1a:af:48:8c:9c:84:b5:2f:12:b2:8e:86:35:00:
b9:eb:e1:e4:cd:68:71:c5:83:5e:48:1a:01:6a:65:79:61:ed:
b5:97:ba:1b:53:48:7d:4f:b6:17:d8:d4:f5:b7:d9:82:ff:34:
cd:3a:4b:89:7e:82:c3:bc:c8:f2:0e:95:be:62:ab:1c:2d:15:
eb:7e:df:01:1e:8b:e9:df:bf:a9:d3:19:7f:be:2c:aa:c4:ed:
4e:51:c3:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:43:44 2026 by rpki-client