
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa
File: 71a2a2c0-b8db-4847-a756-b7515aa42b07.roa (raw, json)
Hash identifier: sFDr/5SnIMIqK5Yg/OQE+J0wtPCTLsRGddX/IWB/rJU=
Subject key identifier: D6:CB:42:A0:62:2C:48:C4:39:2C:54:01:BB:10:84:6B:8D:40:D2:87
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7BB9C80D3C7FD2756E1199C0503AA5D3F5ED236C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa
Signing time: Mon 26 Oct 2026 04:20:25 +0000
ROA not before: Mon 26 Oct 2026 04:20:25 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:5510::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:b9:c8:0d:3c:7f:d2:75:6e:11:99:c0:50:3a:a5:d3:f5:ed:23:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 26 04:20:25 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=71b02eef56395a27da5255b7a7c5e69805ed3cd7b82804e935854c3f994fa8f5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:4f:fe:85:af:8b:d0:f6:67:1e:0a:65:03:
be:bf:65:4b:6e:e5:91:3b:6d:dc:20:23:9b:8b:f9:
c2:af:df:fe:6c:7e:da:30:5a:46:58:de:93:d2:32:
0d:c2:7a:9d:cc:aa:ae:57:f8:c8:10:cb:80:0d:e9:
f3:cc:7e:6e:63:74:3c:8c:40:b7:95:df:2b:f7:56:
8a:66:25:de:22:a9:b5:a3:49:c1:d8:70:25:bc:1c:
1c:1c:2c:35:d4:bf:e1:84:96:89:d0:26:ac:87:c7:
b5:1c:69:4c:41:61:fc:d8:55:90:09:a5:0e:c8:0a:
1c:98:a7:14:2a:51:bf:95:fe:cc:ba:c2:7b:8c:19:
01:4b:2d:4f:19:c4:42:a4:7a:de:aa:42:23:b9:57:
ec:9a:ad:8d:44:48:d8:b4:eb:6c:90:23:e3:e0:51:
49:ce:7a:40:78:e1:63:0f:a5:1f:ae:63:0e:5b:0e:
8c:5f:57:18:85:b4:de:43:07:9d:04:a8:2f:ce:cc:
9c:2f:0d:d4:3c:b1:d8:de:65:89:cd:94:d3:b1:48:
cb:9b:be:5c:2e:a7:d7:d7:51:44:4d:6f:e0:c4:12:
03:60:65:10:fa:93:d7:fe:dc:d2:97:91:b2:73:36:
e0:14:0b:89:d8:d6:a6:57:f4:3f:95:d7:f2:68:42:
c3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CB:42:A0:62:2C:48:C4:39:2C:54:01:BB:10:84:6B:8D:40:D2:87
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/71a2a2c0-b8db-4847-a756-b7515aa42b07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:5510::/44
Signature Algorithm: sha256WithRSAEncryption
3a:32:ea:69:c0:5a:a7:19:51:09:72:3a:59:ef:18:1b:fb:2f:
55:54:9a:08:e8:bb:97:92:a0:78:3d:a8:64:ae:6a:e0:e1:d4:
3e:07:fb:7e:99:b3:33:80:69:20:d2:90:7f:18:b9:e2:45:b7:
e0:4e:89:23:bd:8d:4d:aa:fe:73:c0:a9:fc:50:ff:2d:c0:ee:
9d:02:a2:69:44:ba:30:bd:ee:79:be:e7:b5:79:81:ff:8a:19:
2e:ef:02:5c:04:13:e0:a0:94:0d:05:3a:68:37:52:a7:1b:da:
9b:fc:f1:0d:94:d6:1d:2f:50:aa:09:e9:ca:30:da:d5:91:ab:
d1:7f:bb:00:ee:f6:1c:80:96:94:1c:ab:a6:c6:c0:cc:48:a1:
4e:5a:30:9b:a1:6b:24:25:78:ef:b5:b9:28:34:58:d2:b8:04:
23:5f:db:45:2d:e9:cc:34:f7:50:ee:c0:1f:13:56:2a:4a:e4:
73:31:02:9f:52:b2:f2:eb:58:5c:8b:7d:e5:8d:f8:f5:b2:6b:
3f:a1:36:6c:26:eb:1b:8c:5f:1b:22:a9:68:3c:6c:81:28:04:
1e:6e:86:e9:e2:be:a7:fc:68:4a:10:07:6a:fe:16:d1:59:ca:
d9:13:d0:2a:52:52:e3:47:d8:6d:40:df:d4:05:71:18:8c:88:
6b:2d:8d:02
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUe7nIDTx/0nVuEZnAUDql0/XtI2wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQyMDI1WhcNMjcwMTI0MjM1OTU5
WjB6MUkwRwYDVQQFE0A3MWIwMmVlZjU2Mzk1YTI3ZGE1MjU1YjdhN2M1ZTY5ODA1
ZWQzY2Q3YjgyODA0ZTkzNTg1NGMzZjk5NGZhOGY1MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw1k/+ha+L0PZnHgplA76/ZUtu5ZE7bdwgI5uL+cKv3/5s
ftowWkZY3pPSMg3Cep3Mqq5X+MgQy4AN6fPMfm5jdDyMQLeV3yv3VopmJd4iqbWj
ScHYcCW8HBwcLDXUv+GElonQJqyHx7UcaUxBYfzYVZAJpQ7IChyYpxQqUb+V/sy6
wnuMGQFLLU8ZxEKket6qQiO5V+yarY1ESNi062yQI+PgUUnOekB44WMPpR+uYw5b
DoxfVxiFtN5DB50EqC/OzJwvDdQ8sdjeZYnNlNOxSMubvlwup9fXUURNb+DEEgNg
ZRD6k9f+3NKXkbJzNuAUC4nY1qZX9D+V1/JoQsOtAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQU1stCoGIsSMQ5LFQBuxCEa41A0ocwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2LzcxYTJhMmMwLWI4ZGItNDg0Ny1hNzU2LWI3NTE1YWE0MmIwNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwQmAPDwVRAwDQYJKoZIhvcNAQELBQADggEBADoy6mnAWqcZUQlyOlnvGBv7
L1VUmgjou5eSoHg9qGSuauDh1D4H+36ZszOAaSDSkH8YueJFt+BOiSO9jU2q/nPA
qfxQ/y3A7p0ComlEujC97nm+57V5gf+KGS7vAlwEE+CglA0FOmg3Uqcb2pv88Q2U
1h0vUKoJ6cow2tWRq9F/uwDu9hyAlpQcq6bGwMxIoU5aMJuhayQleO+1uSg0WNK4
BCNf20Ut6cw091DuwB8TVipK5HMxAp9SsvLrWFyLfeWN+PWyaz+hNmwm6xuMXxsi
qWg8bIEoBB5uhunivqf8aEoQB2r+FtFZytkT0CpSUuNH2G1A39QFcRiMiGstjQI=
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:13:26 2026 by rpki-client