
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa
File: 4d9dc189-6c00-4764-9c0c-c990d1727298.roa (raw, json)
Hash identifier: eA5lii3bQ3zREDRQkERCfhyo/eZOMrNDFZfFpbEmmD4=
Subject key identifier: D5:25:5D:E7:66:B3:6D:8F:CE:C2:46:33:E1:12:6D:65:C9:F6:EF:14
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 06D44E5901353304EF7645A9DACA5D5CA37D632F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa
Signing time: Fri 07 Aug 2026 04:20:55 +0000
ROA not before: Fri 07 Aug 2026 04:20:55 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:d4:4e:59:01:35:33:04:ef:76:45:a9:da:ca:5d:5c:a3:7d:63:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 7 04:20:55 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=d62db1fc6a8577f827421739f29f9e1e2051a1f46b598f4bec3439ef5dab1099, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0e:69:3b:7a:b5:48:97:dd:8e:0d:79:e4:95:
c6:0e:73:a0:38:85:75:d7:be:9a:54:5c:b9:49:f3:
b6:71:52:64:99:97:6d:a1:00:c5:1c:55:98:95:6a:
09:60:c6:07:fc:07:a0:8e:3d:17:eb:c1:8c:75:64:
7e:9c:e3:85:db:1c:e4:6b:12:b1:c2:7b:eb:3e:e4:
15:5d:9f:a3:d3:bd:b9:9c:b9:ae:7c:c6:b1:3f:33:
41:a3:aa:d5:cf:17:8a:4f:3c:ea:35:65:57:0f:46:
dd:89:ac:9e:c1:19:68:f2:2a:e9:75:a0:5b:c0:79:
c8:8e:7d:cd:a6:c1:3f:42:a8:c0:7d:d4:e9:fb:7f:
a8:ba:45:62:18:02:61:d1:d3:0b:e8:eb:b6:73:34:
04:df:ba:d0:74:0a:f6:1a:d2:af:2a:f5:9d:3a:c3:
1b:0d:4e:02:94:2d:95:8d:67:f8:e4:aa:37:de:5b:
21:de:69:79:76:22:7d:e4:3e:6c:98:0e:d8:6e:0d:
f9:d0:0d:7a:35:aa:de:5a:60:16:a4:3b:70:41:b5:
a7:e4:b5:c6:f2:86:22:dc:2e:2a:58:a3:cc:19:07:
6a:35:03:3d:23:f2:d3:c5:c5:68:31:e1:f6:ef:5d:
ba:fe:e8:d1:ae:2c:28:6a:d3:c8:04:15:4c:bb:c2:
ff:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:5D:E7:66:B3:6D:8F:CE:C2:46:33:E1:12:6D:65:C9:F6:EF:14
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4d9dc189-6c00-4764-9c0c-c990d1727298.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:600::/48
Signature Algorithm: sha256WithRSAEncryption
93:5d:91:95:96:ed:1f:83:59:67:20:b7:a0:5d:0b:0d:dd:a7:
ff:b8:f8:c9:41:91:05:c5:81:a2:d1:db:b2:b8:cc:05:e8:72:
e0:ac:93:50:72:22:a1:d6:c4:da:34:17:c2:01:96:96:81:53:
d0:56:16:cf:28:bd:6a:29:07:40:e9:69:4b:f1:71:07:a8:7b:
bb:cd:94:8b:f7:84:0e:20:c5:24:64:9c:f2:a3:7c:40:f8:7e:
c8:b9:fa:08:1d:4b:ef:bc:f3:66:27:ca:ac:7c:cf:06:20:92:
b2:78:e3:14:ac:6c:ed:5f:ec:fd:49:5b:25:de:ed:0c:d0:56:
c7:68:35:2a:84:32:7e:54:4c:fd:36:37:b2:8a:22:37:b2:13:
26:e7:f0:e2:c4:f1:2e:10:b9:4d:aa:aa:0c:f9:bd:34:bb:50:
71:be:66:66:aa:22:e8:1e:c2:45:22:36:bd:bd:a1:14:8a:85:
d1:f9:83:7a:4b:48:1a:4d:cd:db:23:f6:40:36:cc:25:e6:9f:
fb:ab:87:3d:f2:48:74:26:09:36:1a:11:72:88:c8:5b:1c:f5:
55:72:92:b2:cf:e5:76:cb:f0:68:ab:90:72:b5:f7:fc:66:83:
f6:25:15:bf:47:74:40:e0:e8:75:ad:0a:a3:5e:0b:90:d7:8c:
f8:0e:cf:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:52 2026 by rpki-client