
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa
File: 639cf60f-b659-495a-ad4a-265220ddbe5d.roa (raw, json)
Hash identifier: 6J7wBN6Cjwa3NeIauxY0Xvy6XXluXj0Xpjcc9zV1Ivc=
Subject key identifier: A8:89:D7:09:87:0E:DB:D6:CD:8C:71:E0:D5:16:74:E6:9D:16:1E:76
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 64937554EE4020BA7DA0E069626AB19DA81D74FF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa
Signing time: Fri 07 Aug 2026 04:10:42 +0000
ROA not before: Fri 07 Aug 2026 04:10:42 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:551b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:93:75:54:ee:40:20:ba:7d:a0:e0:69:62:6a:b1:9d:a8:1d:74:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 7 04:10:42 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=10b0062b1a01f83d45750eb6f7e1f54ed8c1d07c78de1c015d5441ac7cc25fb3, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:79:27:8a:ed:7d:3e:5c:fc:f0:26:c0:01:
a0:f0:9a:19:9e:53:3f:a0:c5:e7:e3:e5:27:32:df:
4c:fd:ff:2c:f3:f2:39:43:66:7e:ff:96:65:e4:c3:
1b:90:b9:a5:ff:af:54:0d:ee:d8:13:76:6a:c2:a8:
13:df:8c:d6:33:e7:2c:0a:5e:e8:70:b6:f8:40:cf:
51:36:c8:19:d2:6a:ee:7a:08:61:b5:32:7c:72:96:
a0:00:0c:51:ec:93:9e:5e:8c:cd:1c:74:75:91:36:
fb:24:7e:e7:f1:03:29:86:d2:3b:68:ed:c7:ba:c6:
7e:53:6a:b7:12:1b:74:0a:de:6f:86:8d:09:0d:84:
b5:fe:9b:5a:54:6f:7c:37:77:ee:f5:a1:95:15:5b:
d2:18:1c:d8:f3:a3:35:7c:03:f4:2c:7e:07:87:fa:
e2:46:41:ef:bc:fd:07:e3:98:61:61:97:b3:40:97:
ba:5a:36:fa:71:31:64:a7:59:91:4e:14:97:44:91:
89:08:c9:87:9c:3b:3f:28:f8:f8:e3:5f:b5:37:29:
79:00:35:81:b1:6a:b9:ff:29:1f:e3:b9:e5:3c:02:
5c:96:60:7c:ed:82:82:a0:71:50:28:e9:4d:8c:54:
d7:dc:55:c6:a8:11:b9:e5:d7:7b:a6:49:2a:c3:af:
5c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:D7:09:87:0E:DB:D6:CD:8C:71:E0:D5:16:74:E6:9D:16:1E:76
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/639cf60f-b659-495a-ad4a-265220ddbe5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:551b::/48
Signature Algorithm: sha256WithRSAEncryption
0b:a1:ea:a1:fe:6d:e6:a3:81:26:c3:d8:15:65:03:25:ff:62:
71:0a:b8:f8:94:61:2d:46:81:c4:f1:8c:c8:b2:b8:43:45:27:
28:03:3f:cb:57:b4:50:57:dc:b9:41:83:4f:89:99:3e:50:22:
fa:bc:2a:aa:30:bc:87:19:d8:6d:5b:95:b9:d7:96:24:26:73:
5c:c4:a1:40:16:57:c1:7c:ac:8f:e0:e7:9f:47:2a:16:cf:73:
75:3c:dd:5f:4f:8e:93:87:70:0c:f1:32:ce:93:94:b8:48:3d:
8e:da:76:2a:e7:ec:45:7c:37:f3:1e:39:24:2e:a5:a6:f6:da:
41:76:40:2e:cc:81:29:ea:b1:2f:bc:74:d2:c0:61:3e:8e:db:
2b:11:72:72:04:ec:d6:48:c0:4b:45:20:36:a6:31:66:9e:9d:
48:98:ea:ec:66:e4:3f:2e:24:71:e6:0f:6b:b7:84:84:90:ca:
4a:44:eb:f4:2c:1e:3a:0d:a2:6d:7c:7a:6e:cd:3c:a8:ac:59:
b6:56:a7:e4:3d:90:99:32:94:6a:1f:b6:32:c3:b2:65:cc:42:
fa:b6:57:9f:19:42:f4:dd:de:f2:a6:d0:3d:2b:c2:7d:55:29:
ac:19:b8:e4:64:af:25:1e:50:ca:7f:91:ca:33:0e:c0:5d:2a:
26:67:70:5b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUZJN1VO5AILp9oOBpYmqxnagddP8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDQyWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AxMGIwMDYyYjFhMDFmODNkNDU3NTBlYjZmN2UxZjU0ZWQ4
YzFkMDdjNzhkZTFjMDE1ZDU0NDFhYzdjYzI1ZmIzMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC81nkniu19Plz88CbAAaDwmhmeUz+gxefj5Scy30z9/yzz
8jlDZn7/lmXkwxuQuaX/r1QN7tgTdmrCqBPfjNYz5ywKXuhwtvhAz1E2yBnSau56
CGG1MnxylqAADFHsk55ejM0cdHWRNvskfufxAymG0jto7ce6xn5TarcSG3QK3m+G
jQkNhLX+m1pUb3w3d+71oZUVW9IYHNjzozV8A/QsfgeH+uJGQe+8/QfjmGFhl7NA
l7paNvpxMWSnWZFOFJdEkYkIyYecOz8o+PjjX7U3KXkANYGxarn/KR/jueU8AlyW
YHztgoKgcVAo6U2MVNfcVcaoEbnl13umSSrDr1w9AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUqInXCYcO29bNjHHg1RZ05p0WHnYwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzYzOWNmNjBmLWI2NTktNDk1YS1hZDRhLTI2NTIyMGRkYmU1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPDwVRswDQYJKoZIhvcNAQELBQADggEBAAuh6qH+beajgSbD2BVlAyX/
YnEKuPiUYS1GgcTxjMiyuENFJygDP8tXtFBX3LlBg0+JmT5QIvq8KqowvIcZ2G1b
lbnXliQmc1zEoUAWV8F8rI/g559HKhbPc3U83V9PjpOHcAzxMs6TlLhIPY7adirn
7EV8N/MeOSQupab22kF2QC7MgSnqsS+8dNLAYT6O2ysRcnIE7NZIwEtFIDamMWae
nUiY6uxm5D8uJHHmD2u3hISQykpE6/QsHjoNom18em7NPKisWbZWp+Q9kJkylGof
tjLDsmXMQvq2V58ZQvTd3vKm0D0rwn1VKawZuORkryUeUMp/kcozDsBdKiZncFs=
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:49 2026 by rpki-client