
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa
File: 5457865c-05cc-496e-9344-9ec7d5266e2c.roa (raw, json)
Hash identifier: nZl3ZT5tB82UmzaN+4TWSoSIG7dzCR+kKEOijJgTtRk=
Subject key identifier: 58:50:1F:1A:95:60:BE:75:85:9A:C4:20:94:C4:43:22:C0:A0:56:60
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 789B84A52D82500515E3BA6EE318C09B84928465
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa
Signing time: Sat 08 Aug 2026 00:50:37 +0000
ROA not before: Sat 08 Aug 2026 00:50:37 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:f100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9b:84:a5:2d:82:50:05:15:e3:ba:6e:e3:18:c0:9b:84:92:84:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 8 00:50:37 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=ac7ab535c1722a9ec2ee89d3315560dc416e8caa8b989702cca2547306038662, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0b:df:69:2b:67:2b:b1:20:b1:eb:19:44:de:
b8:40:6e:91:76:60:1c:d9:66:d1:1a:27:ee:d3:15:
cc:81:02:fe:c4:07:a1:07:48:8a:2f:ec:4a:0d:1c:
27:ef:f3:98:d8:b6:96:ab:32:2b:c9:b0:88:1d:5b:
23:6c:2d:30:7b:42:97:62:9f:8b:3b:f3:1d:e6:b1:
8b:01:bf:53:49:dd:5a:91:26:a5:2f:3e:9e:e3:b6:
a5:74:54:f2:f5:5b:44:6c:48:44:29:f6:e5:d5:d1:
5d:8c:f5:bd:78:cb:f9:b8:46:b1:38:d6:ad:da:c3:
90:61:0f:98:bb:c2:ff:f6:6b:8b:b6:03:98:ca:b3:
89:64:11:c9:4a:28:69:19:d4:a7:31:08:2e:9f:72:
db:3f:0e:6f:ac:f2:6b:9b:7b:19:79:d9:c2:a9:b6:
ce:0e:c6:f9:f2:e1:73:31:cf:95:a9:fd:9f:1b:aa:
26:d2:54:72:5a:97:62:51:c0:ff:2d:99:4e:de:9a:
05:d3:a1:d6:65:c4:63:43:04:44:d4:4b:39:f9:85:
b9:72:c4:8f:30:f5:8b:39:c9:d7:7c:e3:0a:62:38:
92:85:fe:58:38:2d:d1:e9:3b:41:53:cf:3b:9a:da:
4e:ec:22:9e:68:96:ef:ef:49:65:6c:fe:e1:fa:09:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:50:1F:1A:95:60:BE:75:85:9A:C4:20:94:C4:43:22:C0:A0:56:60
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5457865c-05cc-496e-9344-9ec7d5266e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f100::/48
Signature Algorithm: sha256WithRSAEncryption
27:00:b3:0d:f4:cd:37:f9:af:3f:5c:17:de:25:8a:74:76:90:
ae:40:7a:a3:7c:68:03:bd:bb:8a:38:a9:32:f3:da:4e:29:a6:
b1:30:18:41:79:d4:ec:41:2c:e6:dc:e7:a8:bc:fa:14:4b:0f:
f3:2d:9a:e4:e1:13:c2:50:96:57:56:80:e8:a6:9c:5e:0e:0c:
82:d8:57:44:99:af:43:38:59:6b:b9:15:c5:b1:8d:21:26:ee:
fb:ff:a5:89:32:eb:2a:ff:e3:a4:2e:f8:84:7a:e9:f3:64:13:
3e:8f:3f:87:21:9f:9f:4a:ba:55:a7:f1:49:c1:65:bd:aa:89:
73:e5:c0:f8:80:cd:ce:82:eb:5f:82:4e:8c:0e:5c:b2:c3:0b:
b6:5a:f1:e2:2b:11:77:e5:f4:2a:cf:48:79:89:8b:27:e3:a2:
15:05:af:07:f7:c4:0d:bb:12:02:db:f5:9b:96:b6:bf:84:0e:
07:3a:c7:21:7e:ca:9d:1e:53:6a:2a:01:5c:3f:1a:f9:6c:07:
79:c1:bb:e8:e6:ce:0c:35:f7:10:4e:6b:ce:22:41:88:1e:7c:
fc:fe:ea:49:01:83:08:ef:03:80:e5:9d:37:c3:5f:bb:a9:c1:
8e:80:bf:f7:a7:94:fb:9b:06:79:3a:c6:aa:8e:da:3a:bc:f2:
7e:c4:f5:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:16:51 2026 by rpki-client