
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3cb5e14e-650c-44e8-9e0a-d3d3db3a2c55.roa
File: 3cb5e14e-650c-44e8-9e0a-d3d3db3a2c55.roa (raw, json)
Hash identifier: 4MQLl6OxW6cn/sR8rNwa+jgItCrT1odUfKhXv6ewk0A=
Subject key identifier: 4A:EF:D1:12:AE:0E:04:9E:EB:15:64:4D:26:B7:D4:90:F2:54:F7:94
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 44189B845FB8E452708ED3F68F3868A06ACC3044
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3cb5e14e-650c-44e8-9e0a-d3d3db3a2c55.roa
Signing time: Wed 24 Jun 2026 16:47:23 +0000
ROA not before: Wed 24 Jun 2026 16:47:23 +0000
ROA not after: Tue 22 Sep 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:c11e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 28 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:18:9b:84:5f:b8:e4:52:70:8e:d3:f6:8f:38:68:a0:6a:cc:30:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jun 24 16:47:23 2026 GMT
Not After : Sep 22 23:59:59 2026 GMT
Subject: serialNumber=2f62b4be208b1098ff958f61f319de6d8fe9ee820131438c8adcd6734ffdfbfb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:99:27:e6:f7:2d:5b:5f:28:1a:67:e6:29:a6:
fe:1a:b3:1a:ab:63:f4:43:55:06:b4:ba:7c:ff:b6:
f5:57:29:e4:34:f6:fb:7c:c6:b8:a8:0a:42:f5:1e:
d6:95:9a:04:3b:44:6e:15:7c:11:f3:36:60:06:7a:
76:78:71:91:09:53:9d:21:da:b4:28:27:99:37:ef:
85:ae:d2:44:b1:31:8f:64:20:78:e1:86:e5:8c:06:
8f:3f:22:5a:41:b0:cb:21:dd:07:c0:e8:eb:54:bd:
31:85:d7:8e:d2:79:95:38:e2:69:c3:60:7c:46:55:
41:88:5f:24:d6:67:b3:b4:e5:4f:32:ae:5a:8b:bf:
a4:e6:0e:c7:64:02:9b:ed:0a:b4:27:0d:40:3a:71:
5b:ed:aa:b5:82:97:06:b6:4e:81:4b:44:32:98:17:
a7:76:2d:d2:2a:bd:6d:ff:96:f2:44:78:df:e1:98:
89:ed:17:ae:b0:81:ce:02:a8:44:a6:53:7e:c7:0b:
9f:f3:12:0d:50:7c:1d:d0:e7:5e:98:0c:2b:9c:ba:
c4:75:b4:ed:07:0e:91:f2:03:b4:24:e2:cf:3b:45:
1b:a9:49:8a:dd:5c:39:b1:b0:24:e1:33:59:fc:ac:
05:f0:94:e4:68:ae:b9:89:3d:93:73:eb:5f:6b:08:
80:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:D1:12:AE:0E:04:9E:EB:15:64:4D:26:B7:D4:90:F2:54:F7:94
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3cb5e14e-650c-44e8-9e0a-d3d3db3a2c55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:c11e::/48
Signature Algorithm: sha256WithRSAEncryption
55:e4:5f:13:02:1f:17:65:2a:ef:33:2a:58:29:38:89:d6:62:
f2:ae:29:eb:14:ad:e2:36:64:25:70:d5:50:b1:43:60:e4:62:
67:23:7c:d2:b7:f2:73:91:3c:a8:12:c1:61:45:1b:9f:d6:03:
2f:c0:36:b8:30:c4:c5:f7:04:ed:05:25:d3:4b:90:e0:20:4f:
9c:d6:e7:23:2e:4b:a5:3b:56:d8:48:c6:7c:fe:26:d6:e4:ef:
d5:79:14:2f:bc:25:18:ef:a4:fd:be:18:2e:39:af:44:72:21:
8a:44:fd:77:6d:14:97:71:b0:cd:24:2e:f2:f6:c5:eb:f1:48:
46:fd:7d:7a:3d:0b:32:93:5a:be:20:36:51:9f:3a:d6:31:d9:
03:f6:88:48:8c:be:19:82:b4:05:05:0c:cf:ba:93:c2:2e:c3:
cd:b1:66:27:91:cc:6e:28:64:6b:05:1c:c6:1e:8d:dc:f6:ed:
e2:98:12:5c:45:ca:57:e2:a8:2e:69:c4:a5:28:02:58:94:76:
f5:6c:44:70:75:a9:19:f8:8e:94:87:db:e5:7c:6b:f3:0e:e9:
92:9d:e7:4d:8a:9f:b4:c3:3a:6c:98:52:f0:29:db:4a:b1:6a:
07:b4:55:ce:0b:a6:ac:e8:ac:86:cd:43:45:0c:f6:e7:e9:d4:
6f:1e:b9:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 27 14:05:10 2026 by rpki-client