
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35881b5c-f293-47b0-a34d-cfccd59bc28e.roa
File: 35881b5c-f293-47b0-a34d-cfccd59bc28e.roa (raw, json)
Hash identifier: u+juvSmIL1pnnHsMeT4ZzGM4OsyyzbkbB2yrEi5xXpU=
Subject key identifier: DE:22:36:91:2F:88:CF:EB:91:D6:FE:4A:00:95:8A:E9:81:61:5A:7D
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4AB12FD18ADAF520A427EA726CC9816F38141DD3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35881b5c-f293-47b0-a34d-cfccd59bc28e.roa
Signing time: Tue 28 Jul 2026 00:00:06 +0000
ROA not before: Tue 28 Jul 2026 00:00:06 +0000
ROA not after: Mon 26 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f3:f000::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b1:2f:d1:8a:da:f5:20:a4:27:ea:72:6c:c9:81:6f:38:14:1d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jul 28 00:00:06 2026 GMT
Not After : Oct 26 23:59:59 2026 GMT
Subject: serialNumber=0b507ffe38034742b412139fe45a690cde9d1a491bf743483822d59e64dcb0a6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c1:ee:ea:f6:0b:3c:c3:a4:b7:46:0f:33:73:
13:c3:4a:6f:f2:6d:1b:ad:7f:1e:3d:59:b8:ff:03:
b4:df:50:7a:b0:17:67:2c:35:20:91:1e:de:6e:8b:
13:07:8f:59:57:4e:f8:a9:dc:64:a8:f7:c2:65:7a:
97:cb:67:fd:cc:89:35:31:35:db:a3:a1:2c:fb:79:
23:db:57:f3:31:45:08:cf:4b:ba:83:be:f9:84:e0:
6b:5e:f6:49:64:1e:f9:e4:b9:25:de:ec:72:f3:d3:
a9:9c:10:c2:76:bc:41:cc:a5:3b:7b:0a:fb:22:44:
35:cf:c1:d7:3d:68:c5:a5:5b:a3:6c:30:ad:79:b3:
90:a6:ab:8d:00:ba:fe:06:5b:03:81:a0:85:bb:28:
12:9c:a9:7d:36:30:75:ff:6e:c0:d9:b4:14:e3:af:
8b:b0:8a:35:59:aa:1f:4a:7e:2e:88:b5:c0:70:84:
09:35:d2:36:53:ba:10:4a:9b:05:c1:77:d2:1c:27:
4e:a6:8d:8d:b6:ab:8c:7d:e9:d8:a2:bb:ad:a8:78:
bc:2b:02:cb:ea:6f:46:d5:84:bc:02:22:21:f3:0e:
57:b4:b2:62:49:c7:b6:c8:04:78:2d:09:7d:d0:24:
90:f9:4b:e8:b2:b9:81:ba:d0:05:a8:3d:a0:55:13:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:22:36:91:2F:88:CF:EB:91:D6:FE:4A:00:95:8A:E9:81:61:5A:7D
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/35881b5c-f293-47b0-a34d-cfccd59bc28e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f3:f000::/47
Signature Algorithm: sha256WithRSAEncryption
69:aa:7f:dc:46:ca:a8:86:c4:9e:60:b8:5e:2c:92:ce:3b:df:
54:ff:c7:33:8d:d2:34:55:0f:a3:23:df:4e:bf:af:13:aa:1b:
ed:f1:d9:55:07:44:08:5c:5c:96:02:67:f7:b4:66:1d:c4:b5:
7f:53:05:4e:e5:67:cd:d4:d4:9f:65:f5:9c:6f:eb:e8:e4:e2:
0e:6e:01:09:b6:9f:bb:e4:bf:96:36:66:47:38:da:72:5c:9f:
b8:2f:e3:b4:03:3f:ce:bb:19:16:b3:bc:13:b7:56:bb:70:ef:
11:3c:a5:60:f6:68:35:3a:eb:63:a0:42:9b:64:db:f7:6c:a4:
a2:9a:c8:05:c7:0e:4d:0b:e4:5f:8b:20:34:eb:40:90:36:4a:
f9:25:4d:80:a3:a1:62:2e:28:e8:a1:70:2d:66:d1:22:03:f6:
03:34:bd:2b:c6:bc:05:ad:0d:93:b4:bb:5e:b1:c3:9a:e3:8e:
89:7c:56:9e:ba:e6:a9:f8:dc:4f:74:97:b7:6b:78:6f:92:fd:
69:e2:29:23:b2:57:5f:a9:ef:a7:fd:96:27:be:d0:b4:96:1b:
24:b5:c6:da:b2:56:2c:87:41:95:94:bb:20:07:bf:d1:07:22:
d8:f6:05:e4:2f:a6:e6:b1:9c:75:65:56:f7:c5:a8:08:8a:47:
92:ee:e7:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:33:19 2026 by rpki-client