
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/58ffb131-541b-4220-8d21-6febed79ba47.roa
File: 58ffb131-541b-4220-8d21-6febed79ba47.roa (raw, json)
Hash identifier: +YxhJNVBUk7OWTRnWMZVRqNZ4B4S1Pvwz/gifquzL8k=
Subject key identifier: 6F:62:F4:52:A0:2C:C2:27:26:AE:1B:35:14:1C:6C:93:8A:B0:F9:59
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4C91B711C925B875FF4E9C6E7A7BDFC532CB706C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/58ffb131-541b-4220-8d21-6febed79ba47.roa
Signing time: Thu 22 Oct 2026 00:30:15 +0000
ROA not before: Thu 22 Oct 2026 00:30:15 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:91:b7:11:c9:25:b8:75:ff:4e:9c:6e:7a:7b:df:c5:32:cb:70:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 22 00:30:15 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=570e490a12aeb488eabf13ab56478b4f017864c01e108f308dc30f6a6fe2703c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:db:d9:04:88:0e:bf:b7:02:4f:ad:7e:44:
8f:a6:44:00:64:ec:57:e7:d5:b1:35:52:4a:5d:46:
42:95:e5:ba:b7:b4:2e:93:46:27:a8:ce:86:ee:d0:
03:a6:dd:13:dd:f1:d2:cf:4f:60:03:90:80:0d:32:
1f:4c:f1:21:ab:bd:d1:eb:e9:8c:d4:87:22:e3:86:
46:1a:63:ff:7d:fd:00:b6:86:2c:45:de:d4:51:77:
d1:83:e2:6c:33:e1:4d:88:90:c6:90:f7:58:e1:84:
45:14:10:fb:77:d5:6f:be:27:5d:af:25:76:43:fc:
db:f8:dc:bb:bf:ab:2d:d0:20:27:7b:d5:f8:f9:fd:
3b:50:5b:43:b2:6a:c5:0a:55:38:e3:4e:1d:40:3d:
8c:2d:ed:9c:35:7d:d5:e9:24:73:57:81:9b:40:e4:
9d:e1:03:07:9d:b9:58:66:10:96:54:8a:fb:62:13:
7a:e1:5f:85:f4:d3:8d:3f:33:47:33:ee:a0:44:57:
c9:6f:6e:d1:e6:79:8e:d2:29:2b:dd:42:05:5d:e5:
e4:f3:1a:31:3b:f5:1d:b0:d6:93:72:80:0a:02:7d:
db:42:19:a3:50:4c:3f:f8:01:ca:40:3b:f2:e7:b9:
e2:88:ab:f5:8e:9f:55:29:46:e9:d7:18:1f:1c:7f:
58:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:62:F4:52:A0:2C:C2:27:26:AE:1B:35:14:1C:6C:93:8A:B0:F9:59
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/58ffb131-541b-4220-8d21-6febed79ba47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:b0::/44
Signature Algorithm: sha256WithRSAEncryption
a3:e7:f9:39:33:d1:ce:79:8e:c7:7d:19:c3:6e:c1:21:a3:9a:
06:11:28:7f:71:34:91:5a:2e:d6:7a:76:b6:04:98:82:8c:fa:
b0:20:24:62:43:17:ac:aa:01:e5:ac:30:34:d5:df:26:9d:57:
76:34:11:2f:c3:cc:b9:b3:cb:25:2d:c2:8c:21:e8:9e:12:13:
85:35:53:4e:dd:b6:33:9e:50:8b:fd:e4:ab:c1:37:9b:d3:20:
95:e0:6b:44:2c:c3:64:ee:94:a5:07:13:8b:55:6b:be:d2:6a:
8d:c6:11:b3:cf:ab:3e:00:8f:9b:2e:61:82:ab:13:4d:b2:2b:
e7:61:b4:cf:d3:22:90:87:3c:19:6d:e3:9b:10:45:36:d5:2f:
62:52:b6:dc:11:98:58:83:1e:1f:4b:b3:c1:5a:a1:17:b8:45:
27:1d:43:6c:53:d9:ae:56:ec:de:2d:aa:74:7b:01:43:73:a0:
ad:39:f5:98:ba:54:84:8f:d4:6a:24:41:75:7e:53:22:4d:59:
4a:8c:7c:cc:e3:1f:c4:3d:7f:3b:80:a2:67:5c:85:70:c1:18:
d5:7b:83:1b:43:73:be:b9:55:8c:05:96:7d:b5:c7:32:1b:98:
dd:6a:e7:03:da:2a:3b:cf:13:34:46:c9:a3:22:2f:62:68:b5:
27:e6:a3:9a
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUTJG3EckluHX/TpxuenvfxTLLcGwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDIyMDAzMDE1WhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A1NzBlNDkwYTEyYWViNDg4ZWFiZjEzYWI1NjQ3OGI0ZjAx
Nzg2NGMwMWUxMDhmMzA4ZGMzMGY2YTZmZTI3MDNjMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqK9vZBIgOv7cCT61+RI+mRABk7Ffn1bE1UkpdRkKV5bq3
tC6TRieozobu0AOm3RPd8dLPT2ADkIANMh9M8SGrvdHr6YzUhyLjhkYaY/99/QC2
hixF3tRRd9GD4mwz4U2IkMaQ91jhhEUUEPt31W++J12vJXZD/Nv43Lu/qy3QICd7
1fj5/TtQW0OyasUKVTjjTh1APYwt7Zw1fdXpJHNXgZtA5J3hAweduVhmEJZUivti
E3rhX4X0040/M0cz7qBEV8lvbtHmeY7SKSvdQgVd5eTzGjE79R2w1pNygAoCfdtC
GaNQTD/4AcpAO/LnueKIq/WOn1UpRunXGB8cf1jDAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUb2L0UqAswicmrhs1FBxsk4qw+VkwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzU4ZmZiMTMxLTU0MWItNDIyMC04ZDIxLTZmZWJlZDc5YmE0Ny5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAPDwALAwDQYJKoZIhvcNAQELBQADggEBAKPn+Tkz0c55jsd9GcNuwSGj
mgYRKH9xNJFaLtZ6drYEmIKM+rAgJGJDF6yqAeWsMDTV3yadV3Y0ES/DzLmzyyUt
wowh6J4SE4U1U07dtjOeUIv95KvBN5vTIJXga0Qsw2TulKUHE4tVa77Sao3GEbPP
qz4Aj5suYYKrE02yK+dhtM/TIpCHPBlt45sQRTbVL2JSttwRmFiDHh9Ls8FaoRe4
RScdQ2xT2a5W7N4tqnR7AUNzoK059Zi6VISP1GokQXV+UyJNWUqMfMzjH8Q9fzuA
omdchXDBGNV7gxtDc765VYwFln21xzIbmN1q5wPaKjvPEzRGyaMiL2JotSfmo5o=
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:13:04 2026 by rpki-client