
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/70022df8-77ee-469e-810d-5c7c45c08162.roa
File: 70022df8-77ee-469e-810d-5c7c45c08162.roa (raw, json)
Hash identifier: vXrOcktN5KNh9HVJjowv0bmFwLHgyQsufkWWN7yDWAA=
Subject key identifier: 33:89:0A:7A:20:E9:A8:F5:57:E9:22:92:4E:02:37:DE:6E:8B:F1:94
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 3D96AF6BA87846B09DCFD44EC57BE21CD33B0AB8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/70022df8-77ee-469e-810d-5c7c45c08162.roa
Signing time: Sat 08 Aug 2026 00:50:42 +0000
ROA not before: Sat 08 Aug 2026 00:50:42 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:f110::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:96:af:6b:a8:78:46:b0:9d:cf:d4:4e:c5:7b:e2:1c:d3:3b:0a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 8 00:50:42 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=57a71cc6ce7108c0e41a56ede01e957e937300d6cfe5c9c0d536a3e9c482a17b, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b4:9d:13:ec:4d:09:57:93:4b:77:cc:69:de:
98:aa:37:22:33:ad:35:d1:df:bf:ae:8a:d0:1d:e9:
a7:b6:94:01:cb:a7:2c:ed:52:0f:40:6f:d6:25:52:
16:ae:d2:d7:32:c9:96:13:ec:05:86:1a:5c:e5:e6:
bb:59:a2:b3:79:7f:0c:e6:ca:af:ae:c9:ce:26:f5:
ac:54:58:0f:01:2b:64:f7:9d:ab:26:7e:f6:09:6f:
9f:bc:b8:36:18:bc:d1:4f:3f:bc:de:4a:54:6a:ae:
b6:4f:f7:83:d8:f2:fa:eb:2a:5b:8a:52:17:86:69:
04:32:1f:e9:a3:5f:83:40:b1:e5:6e:20:3e:35:dc:
89:07:63:56:1a:aa:03:6b:48:18:cb:e6:b7:95:94:
9c:93:98:98:df:d5:a7:95:f4:d0:ae:fe:74:f1:23:
97:af:48:40:b8:03:41:c9:dc:3d:ce:3e:36:48:c5:
7c:d8:8a:37:f7:9a:61:a9:62:38:86:5a:8e:79:14:
ed:a0:63:1e:d9:23:95:7c:d0:5d:04:41:d8:17:88:
a3:e3:f6:e7:6f:e3:40:fa:04:7a:b6:d8:4c:99:c3:
58:c9:59:2d:24:30:21:29:1d:8f:8d:99:83:96:61:
f4:8c:22:52:6f:8d:01:c9:21:ab:a8:9a:e3:1b:db:
8e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:89:0A:7A:20:E9:A8:F5:57:E9:22:92:4E:02:37:DE:6E:8B:F1:94
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/70022df8-77ee-469e-810d-5c7c45c08162.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f110::/48
Signature Algorithm: sha256WithRSAEncryption
9c:a0:df:cb:36:2f:71:78:68:a0:61:2e:a4:50:4f:60:72:3e:
b6:36:0f:d5:99:70:31:d7:b8:3d:e3:8c:f2:3b:e9:9f:b0:bc:
3f:1e:91:2c:6e:7f:05:83:f4:66:bf:1c:5a:00:31:19:e2:51:
be:33:d8:d6:81:f9:88:39:6d:ff:08:25:0c:f7:d5:cc:89:04:
79:0b:52:89:28:42:fb:40:36:43:80:a8:c5:27:15:22:38:b3:
00:df:af:c8:0d:d4:3d:ab:cd:65:8f:ad:5c:37:6d:51:d2:29:
a6:da:f0:8b:6f:0d:a6:ee:85:a6:88:ae:62:7f:c3:68:00:5e:
0a:a5:cf:18:03:12:7b:cf:e5:2f:ca:1f:62:34:12:a0:3d:00:
25:74:c5:89:3e:7d:4d:ea:e7:0d:69:12:ea:31:75:fe:f3:9b:
74:8c:a3:0e:8c:3a:40:e6:bd:82:b1:37:de:86:f6:98:8e:b4:
b4:ff:c4:99:42:8b:cd:9a:42:a7:a7:f7:a6:cd:37:1c:00:f0:
96:e4:e5:86:00:eb:7f:d2:d3:d0:ed:0c:19:87:01:ea:9f:a5:
04:8c:2f:a3:da:e3:bf:65:b5:e0:ed:67:55:46:c3:e8:83:4b:
b2:7c:15:dd:01:2a:96:03:52:2c:e7:83:2c:ac:2a:86:b5:91:
7b:99:b4:3b
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUPZava6h4RrCdz9ROxXviHNM7CrgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDQyWhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0A1N2E3MWNjNmNlNzEwOGMwZTQxYTU2ZWRlMDFlOTU3ZTkz
NzMwMGQ2Y2ZlNWM5YzBkNTM2YTNlOWM0ODJhMTdiMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC/tJ0T7E0JV5NLd8xp3piqNyIzrTXR37+uitAd6ae2lAHL
pyztUg9Ab9YlUhau0tcyyZYT7AWGGlzl5rtZorN5fwzmyq+uyc4m9axUWA8BK2T3
nasmfvYJb5+8uDYYvNFPP7zeSlRqrrZP94PY8vrrKluKUheGaQQyH+mjX4NAseVu
ID413IkHY1YaqgNrSBjL5reVlJyTmJjf1aeV9NCu/nTxI5evSEC4A0HJ3D3OPjZI
xXzYijf3mmGpYjiGWo55FO2gYx7ZI5V80F0EQdgXiKPj9udv40D6BHq22EyZw1jJ
WS0kMCEpHY+NmYOWYfSMIlJvjQHJIauomuMb246LAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUM4kKeiDpqPVX6SKSTgI33m6L8ZQwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzcwMDIyZGY4LTc3ZWUtNDY5ZS04MTBkLTVjN2M0NWMwODE2Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPD78RAwDQYJKoZIhvcNAQELBQADggEBAJyg38s2L3F4aKBhLqRQT2By
PrY2D9WZcDHXuD3jjPI76Z+wvD8ekSxufwWD9Ga/HFoAMRniUb4z2NaB+Yg5bf8I
JQz31cyJBHkLUokoQvtANkOAqMUnFSI4swDfr8gN1D2rzWWPrVw3bVHSKaba8Itv
DabuhaaIrmJ/w2gAXgqlzxgDEnvP5S/KH2I0EqA9ACV0xYk+fU3q5w1pEuoxdf7z
m3SMow6MOkDmvYKxN96G9piOtLT/xJlCi82aQqen96bNNxwA8Jbk5YYA63/S09Dt
DBmHAeqfpQSML6Pa479lteDtZ1VGw+iDS7J8Fd0BKpYDUizngyysKoa1kXuZtDs=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:16:51 2026 by rpki-client