
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa
File: 644f882a-d42c-4c76-bb70-882838f6e3e0.roa (raw, json)
Hash identifier: sTYmI3IzxnOVd6CRrRQfh7FkylKK56dPuXcd8zZ7EH4=
Subject key identifier: 73:C1:37:64:87:F7:DF:B3:D6:52:7D:02:8C:66:23:59:D6:DD:62:3F
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 63E92017670B64BA393D7BB9A4F9A9ADB9528614
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa
Signing time: Tue 19 May 2026 04:10:53 +0000
ROA not before: Tue 19 May 2026 04:10:53 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 28 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e9:20:17:67:0b:64:ba:39:3d:7b:b9:a4:f9:a9:ad:b9:52:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 19 04:10:53 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b78227380ffe702219db893872450ff9761195983538d86eecf3abe294f37673, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:54:72:d2:cd:2e:39:94:ad:c8:73:2b:0b:42:
29:a2:8a:fb:7d:72:b1:b1:dc:53:63:3b:9c:5b:30:
03:7e:d9:b2:ac:f9:94:ea:0b:b3:eb:55:c0:bb:a4:
6b:08:06:c8:45:89:2c:d5:58:76:54:e6:8b:1c:2c:
9b:01:41:ea:88:80:47:31:bb:da:91:d9:e7:8b:e3:
c1:01:f7:89:fa:5b:f1:21:94:3c:82:8a:f8:26:c3:
88:63:c9:5c:3e:48:a1:25:c9:ab:b9:34:25:0a:6c:
14:1c:0e:5b:47:28:99:b8:af:64:bb:bc:5a:89:29:
ff:02:86:0c:0b:11:84:2f:2c:81:ac:a0:cd:e9:f8:
d8:f9:6a:af:71:45:20:b1:8d:e6:97:bb:97:7e:b5:
9e:b6:07:84:97:17:78:99:71:93:2a:e4:16:93:34:
fd:a2:ff:32:db:d6:c6:33:4f:5d:3e:79:87:45:96:
f9:87:f4:db:ea:9d:04:38:08:d3:c7:e1:d6:0f:83:
e7:4a:e6:5d:dd:95:4e:c5:3f:24:90:d3:36:a0:d4:
10:78:08:b8:9e:5c:3a:8a:38:4c:2d:43:b8:27:00:
f6:49:53:91:b5:e3:b0:f6:1a:6b:b0:0e:54:12:9b:
05:29:73:e1:b0:38:bd:8b:0d:6a:20:cb:f6:b7:c0:
41:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:37:64:87:F7:DF:B3:D6:52:7D:02:8C:66:23:59:D6:DD:62:3F
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/644f882a-d42c-4c76-bb70-882838f6e3e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e600::/40
Signature Algorithm: sha256WithRSAEncryption
36:3f:b8:6d:ff:cc:a9:f3:ea:e5:e9:9b:47:70:ac:14:6c:18:
53:90:61:a8:09:21:14:f9:67:32:d3:88:1e:73:f2:da:59:c5:
ff:75:ae:2f:88:52:6a:de:fc:d8:e5:5e:27:63:e0:8b:40:be:
19:b4:e3:b8:80:35:72:31:9f:c5:fc:40:71:66:5b:38:d1:75:
ca:e5:8c:16:a5:c4:c1:6f:3f:68:b6:fd:76:47:7e:eb:85:e5:
55:42:d5:03:db:69:2f:e9:07:1d:57:f1:90:36:af:28:3f:0a:
5c:8f:c5:75:8c:cd:38:cd:c7:40:10:5f:fa:d4:fe:7e:2b:60:
46:b0:4b:8f:82:ac:08:0c:1c:2f:81:b9:fb:39:5c:e4:bf:06:
bf:8c:e7:2d:b0:80:15:4a:5a:b1:86:6e:aa:a8:1f:16:a0:3f:
86:02:6e:16:5a:65:4e:24:24:29:97:b5:53:7d:92:7b:e8:9b:
3e:82:5d:29:7e:6c:c8:3c:42:52:d6:b3:fb:13:68:7e:79:be:
b6:27:f9:8a:e0:80:14:12:f4:5d:c4:d8:0d:81:bb:5a:31:69:
95:e6:b8:69:f6:14:93:87:1b:5d:e8:55:03:b4:02:1c:44:eb:
8b:f3:37:db:2b:d5:14:e2:ec:6c:bb:9e:36:eb:02:79:1c:32:
d3:48:57:91
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 27 18:32:54 2026 by rpki-client