
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa
File: 4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa (raw, json)
Hash identifier: xGgesrzOtMi+4iBppaizp8v8C+96dbyRPwLgRdcvCe4=
Subject key identifier: 9A:95:79:9C:3F:9E:17:33:CD:6A:54:72:C5:F1:32:43:30:D3:C1:87
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 2D93233612837ABA67BE25E392DAAC9E4F852E85
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa
Signing time: Thu 10 Sep 2026 00:20:06 +0000
ROA not before: Thu 10 Sep 2026 00:20:06 +0000
ROA not after: Wed 09 Dec 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:e11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:93:23:36:12:83:7a:ba:67:be:25:e3:92:da:ac:9e:4f:85:2e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Sep 10 00:20:06 2026 GMT
Not After : Dec 9 23:59:59 2026 GMT
Subject: serialNumber=8d3f2b769e66292bdd273470d578ced5079bd1168f4d15d44e1e34dcf282706d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:8e:44:6f:6e:f1:e4:35:94:6b:79:1a:e3:
22:7a:42:d1:26:39:b6:b7:84:da:58:f2:52:c5:2c:
a6:0e:4e:d3:1f:7c:e3:fe:f3:28:ab:75:f6:32:60:
d0:4e:c7:dc:8d:22:f1:93:28:36:d5:3f:c9:6d:dc:
c8:30:17:32:45:ff:d6:4d:62:b6:bf:62:49:2b:56:
37:85:8d:46:00:b9:93:5a:21:04:97:bb:10:bf:7e:
2e:ad:85:34:12:ed:47:40:9f:72:0e:21:b3:bb:30:
69:d5:4e:d2:af:62:b2:01:51:c8:a8:3d:34:82:7f:
fd:b3:e9:7a:ea:7c:68:ef:e0:49:85:29:c9:84:bd:
99:fc:8d:16:74:39:77:43:82:3e:e3:82:38:1d:ce:
5c:5d:26:01:6b:ee:02:4d:62:36:04:cf:19:6f:c9:
55:be:9b:18:c3:61:8b:49:18:12:b8:43:14:c2:3e:
ad:18:74:5b:20:40:b3:8a:67:50:2f:1f:dc:3b:b0:
64:0f:1f:15:e0:87:51:9b:e0:9b:58:e6:1e:31:6c:
9b:d2:7e:b2:90:3f:02:bd:7d:cb:2a:dc:e9:72:6c:
cb:02:bf:10:5c:c2:9b:db:81:f4:10:3b:a5:f8:b2:
3b:05:fa:42:9e:5b:a6:d3:4e:d2:80:14:25:7d:77:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:95:79:9C:3F:9E:17:33:CD:6A:54:72:C5:F1:32:43:30:D3:C1:87
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/4ee334bd-d86b-455a-ac15-6e83b3b11d16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:e11::/48
Signature Algorithm: sha256WithRSAEncryption
7e:96:df:cd:25:0d:f2:22:5a:4a:d6:c9:1b:e8:04:1b:cf:8d:
46:8f:c7:03:02:58:13:96:17:73:36:65:8d:be:cc:ff:d0:56:
9b:3b:59:45:11:db:31:f3:13:fe:eb:94:c1:0f:32:d7:42:33:
a4:9a:cc:e8:9e:c4:8a:ac:d0:01:e9:b1:d8:55:c3:b5:8f:6f:
b8:26:9a:57:15:f7:da:88:52:9c:06:f6:84:73:5b:fa:cb:d4:
bf:8d:ac:de:0a:ab:84:54:7a:60:5a:69:9d:8c:88:2c:69:93:
a3:f2:44:ce:34:66:5f:d3:55:04:97:88:9f:cc:2b:2d:43:9a:
dc:ac:8e:d1:a5:d3:22:59:ac:82:d8:4d:d0:72:0d:76:66:ad:
c3:82:0e:04:e8:8c:09:b1:72:88:7f:39:9f:15:ff:25:09:bb:
71:f6:bc:25:5e:7a:35:c9:eb:64:45:8f:83:b8:3c:61:3c:91:
22:06:a3:66:b4:b4:e5:dc:e6:be:67:a8:a2:de:a4:3f:8c:27:
a6:65:8a:e4:54:3c:21:7a:08:b6:85:ec:bb:c1:fc:92:ae:6b:
18:6d:63:2c:4d:2f:d5:d5:2e:7a:6d:1e:68:9e:e3:22:b3:2f:
3b:f6:19:60:eb:dc:f7:79:23:00:3d:19:e9:23:d4:36:b4:f4:
b2:95:d7:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:37:33 2026 by rpki-client