
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
File: 5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa (raw, json)
Hash identifier: w4Yk1Etf0j2E5+9eg7fpySszjkPGKaPNuPHuhGsMUJg=
Subject key identifier: 9A:61:23:30:9A:D2:11:34:D7:51:B1:BC:0E:4E:E3:08:6D:71:2A:5D
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7E7E94F1D20884D88634D3C603D6C92767E0DDF4
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
Signing time: Tue 19 May 2026 04:20:06 +0000
ROA not before: Tue 19 May 2026 04:20:06 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e000::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 28 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:7e:94:f1:d2:08:84:d8:86:34:d3:c6:03:d6:c9:27:67:e0:dd:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 19 04:20:06 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=df9f397bb0d88f7bb682f7accd1c8adf2356b0d84dd60e7afb5d9276e29a5cd8, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:74:31:3e:5f:bd:ba:89:a0:0f:26:ee:16:
87:1e:67:ae:b3:74:8a:fd:03:61:f5:02:38:c8:e3:
b1:25:06:57:86:80:62:47:7d:ea:83:b1:e2:84:1d:
06:84:05:60:6a:1a:52:a8:ec:79:66:2e:38:ab:43:
0d:60:8d:34:e2:88:d8:91:9f:56:d4:32:95:83:eb:
08:e2:b6:28:08:9d:fc:38:06:93:2e:32:78:8c:4c:
c9:f4:19:e0:3f:73:00:11:d3:94:dc:cf:91:ba:e9:
ea:ac:b2:a9:f7:43:57:8f:52:1c:14:0d:d6:95:11:
9b:d9:46:07:67:98:2a:42:0f:2a:de:22:9c:18:cc:
f1:e4:23:04:4a:ba:45:e4:94:b3:c3:16:36:e6:93:
b1:c6:fe:65:0d:53:6f:96:65:af:aa:8a:cd:5f:5f:
0e:3e:1b:01:6d:2f:d4:39:04:36:32:f7:af:4e:03:
b6:84:a1:b5:02:cc:8b:75:8f:df:55:b4:96:c0:a6:
c5:d5:83:41:59:96:3c:7f:90:d9:6c:04:d4:4e:fb:
87:24:6b:92:de:80:ba:21:f2:7e:52:ca:79:19:3b:
6a:19:74:c0:c0:90:b8:6b:0c:ae:98:ef:d8:3e:76:
df:4d:80:84:05:0e:39:a4:87:9b:52:cb:0b:52:2a:
10:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:61:23:30:9A:D2:11:34:D7:51:B1:BC:0E:4E:E3:08:6D:71:2A:5D
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5c0a06f9-f1b8-4b48-b119-f6f0361bf0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e000::/42
Signature Algorithm: sha256WithRSAEncryption
7e:50:1f:a4:e2:f2:6e:ef:95:ad:bb:59:4d:c9:a6:eb:91:3a:
e1:bb:9b:a9:bb:e8:03:93:f2:c4:a2:8d:3e:e6:52:a1:7e:b8:
79:2f:d0:47:f7:4f:22:3b:fc:d3:67:ee:e5:22:f5:64:1d:7f:
b6:9d:ed:92:4f:61:8f:48:bc:e8:e6:1f:9e:79:8b:5f:97:40:
0d:c2:f7:d0:71:8e:a9:a3:d5:77:fa:72:4d:4f:89:d0:f6:7d:
3b:28:76:52:37:19:d9:8d:30:75:19:8a:19:10:4d:64:8a:df:
66:47:6e:78:12:46:40:26:49:1d:bd:cd:af:19:76:5c:44:d6:
aa:88:96:35:7c:db:38:26:d2:d0:56:f2:52:f9:d4:16:bc:75:
6a:4e:4c:fd:80:64:d7:29:be:d9:8f:19:03:b2:6b:70:0c:2f:
b1:29:49:c6:ad:a2:a0:0c:c3:a5:40:c9:27:e9:8d:4e:ad:b2:
2b:ba:f6:78:4b:ff:07:04:8a:92:c4:f1:69:d6:05:1f:4f:66:
e5:38:27:1b:08:31:92:c1:07:66:ae:0b:5c:dc:17:1a:f2:e9:
bb:02:31:3b:37:ae:4f:08:30:bc:c4:40:43:a2:af:5d:4c:4e:
e8:bc:31:56:0d:5f:8e:00:58:fb:1d:77:e7:5b:69:ad:28:a8:
b9:58:82:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 27 18:33:38 2026 by rpki-client