
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
File: 2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa (raw, json)
Hash identifier: vzEiyKP8s7rlNJmNKYmzdNh2a4GwMCXoPqR03cnF0w0=
Subject key identifier: 8C:44:37:84:9B:6A:23:57:D9:6B:68:16:B1:8E:32:CA:C7:57:24:BB
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 01A894F12B09A68925CFB242A61E82B32BF66CBB
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
Signing time: Thu 30 Jul 2026 01:20:03 +0000
ROA not before: Thu 30 Jul 2026 01:20:03 +0000
ROA not after: Wed 28 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f1:80::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a8:94:f1:2b:09:a6:89:25:cf:b2:42:a6:1e:82:b3:2b:f6:6c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 30 01:20:03 2026 GMT
Not After : Oct 28 23:59:59 2026 GMT
Subject: serialNumber=86906aa8a643ed7e455769f920e004e51542a9f272634c5155a87afb065c7a6a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:16:be:f6:85:96:a8:ed:17:f5:bb:b8:d0:
19:10:e5:bb:72:fc:73:d8:08:03:58:1e:a9:f3:af:
ef:12:76:c4:3e:e0:3b:74:18:05:dd:4e:15:ee:1c:
c7:dc:06:b3:d1:7a:f3:e1:fc:cc:05:eb:eb:36:9b:
b9:17:87:53:2e:f9:9a:04:b3:6d:f6:04:c8:43:55:
bf:83:59:9c:f3:63:14:69:0c:e2:7b:db:30:1e:83:
6b:05:23:f2:a6:32:21:37:6e:a0:fe:21:5e:93:5d:
03:54:10:df:03:56:a5:b7:5f:90:53:9b:92:5b:0c:
6a:d0:b0:91:8f:5d:5c:4f:2d:fd:fd:17:88:90:05:
e1:6b:2b:16:de:24:47:0c:16:27:2b:98:7d:a7:28:
e6:55:7a:48:b4:44:24:c3:23:3f:71:99:a6:cf:d7:
c0:89:66:59:c0:ff:d6:37:6e:62:7b:4d:b6:d5:7b:
33:da:82:2d:cb:fa:4a:d4:7c:24:53:48:00:a6:10:
84:42:14:22:51:8a:55:f5:cb:fc:5d:84:ec:8f:30:
40:0e:66:45:a3:e6:e0:90:1e:41:69:6b:a0:0e:fb:
fb:ad:07:21:8e:77:25:d4:91:5a:30:a9:46:c2:1e:
55:65:ee:da:a6:cc:51:2e:92:48:ee:c0:83:9a:88:
47:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:44:37:84:9B:6A:23:57:D9:6B:68:16:B1:8E:32:CA:C7:57:24:BB
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/2b89621a-6c29-4cbf-8976-3930c4e5d91c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:80::/44
Signature Algorithm: sha256WithRSAEncryption
6b:28:71:37:b1:a5:40:a6:6f:7b:3e:e5:2a:6e:a0:e8:76:17:
6e:de:4a:ba:f6:46:e5:76:9f:37:bb:08:42:76:cc:3b:ea:f3:
d7:7c:fb:f1:eb:8c:91:f9:4e:8b:98:1d:28:b0:eb:f5:85:92:
a6:2b:3a:2f:cb:10:df:98:12:c7:00:54:da:1e:a6:49:cc:5e:
74:98:c1:51:8a:b6:d9:1f:d3:01:26:10:7a:dc:b8:43:38:6e:
28:67:9c:dd:5c:c4:d5:4d:7b:70:02:4d:7b:77:85:43:9d:d4:
ba:42:f7:81:4e:ed:84:00:48:dc:b2:83:e5:7a:53:ee:71:ae:
d3:52:e1:5d:17:87:f8:5b:54:58:9f:27:ca:4f:21:63:d1:eb:
e8:35:c9:f1:f1:57:34:e3:ee:3f:de:ec:31:38:be:67:2d:da:
c4:08:45:f4:62:43:22:23:25:5b:c3:e6:38:2c:fa:83:e0:64:
c2:c2:b6:9d:77:c4:ce:8c:9b:f6:f1:fa:7b:a9:2f:68:3d:46:
f0:6e:80:e4:dd:38:05:2b:33:2f:09:a6:60:0f:8a:ef:71:df:
c8:88:36:27:e4:08:c0:9f:9d:5a:f1:a6:6c:33:cd:54:55:67:
d5:5a:26:43:6e:59:88:8b:56:c8:42:7e:c1:6b:a6:6c:2b:64:
d6:37:2f:9d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:14:21 2026 by rpki-client