
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa
File: 74ecd40c-8365-49b4-a27b-066578cec1cc.roa (raw, json)
Hash identifier: o3BqhB8stQeQH3BV85fdNlO9GqUWMXbaVJ0YrTWFirI=
Subject key identifier: 3E:F5:29:24:3E:0B:70:5F:E1:CB:9E:91:BC:FA:17:EB:77:CF:BE:D1
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6B3140AAC71E6B43F3F440FA2CF6FD03986926AF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa
Signing time: Sat 08 Aug 2026 00:50:11 +0000
ROA not before: Sat 08 Aug 2026 00:50:11 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:f10c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:31:40:aa:c7:1e:6b:43:f3:f4:40:fa:2c:f6:fd:03:98:69:26:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 8 00:50:11 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=e2b359ef996490ee745222290c971f5fa2eaa3a9436d3a830c8895eb781b8aeb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a4:48:56:5b:3b:15:7d:86:ca:9f:74:9f:9f:
0c:c1:cb:4e:c2:2c:2b:1d:d0:cc:23:e7:59:54:37:
a6:18:47:1d:c2:35:c3:46:6a:d9:d4:b1:cd:cf:d9:
be:b8:5c:6d:06:5f:27:b4:ec:ae:20:cd:a4:35:77:
e2:cf:e9:90:3b:71:cc:0d:81:db:73:aa:2e:57:c8:
e5:8e:89:d3:20:aa:bb:3f:40:25:c3:e2:7b:a8:7a:
b6:0c:5b:91:14:59:7d:49:d8:c7:06:08:de:c8:4a:
90:75:33:04:f2:08:17:b0:9d:80:f8:9d:1f:42:2e:
12:93:0c:c0:31:b7:e7:f3:f3:ce:cd:7e:ca:b7:1a:
24:0e:be:04:00:d5:f0:39:e4:e3:ab:c3:74:2c:a3:
4f:cd:1e:31:a8:60:44:2c:8a:32:22:16:43:43:05:
d4:b5:e8:0e:30:cf:dd:84:12:37:40:ec:6a:6a:e3:
66:f4:0c:39:a4:e7:46:db:ce:45:b8:f9:24:24:80:
35:e4:69:1e:63:90:95:ca:69:90:4b:5e:c6:2a:b4:
6d:59:9d:d9:bd:8f:bd:96:af:d0:64:4e:b5:bf:5c:
99:34:a8:3c:32:85:97:96:fe:05:1c:1e:89:1c:69:
ab:0a:af:04:56:3c:6b:86:e5:14:c6:61:b5:b9:5b:
5f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F5:29:24:3E:0B:70:5F:E1:CB:9E:91:BC:FA:17:EB:77:CF:BE:D1
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/74ecd40c-8365-49b4-a27b-066578cec1cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f10c::/48
Signature Algorithm: sha256WithRSAEncryption
a2:5b:53:71:c2:75:99:35:bd:f9:d3:0d:45:5e:32:4a:8f:8b:
44:c4:11:3a:43:9a:5c:2b:11:8b:e0:05:2d:49:bb:af:bd:88:
9b:b8:ae:35:16:a6:e7:f1:19:11:e5:48:72:d3:10:70:2a:49:
96:70:58:f8:ff:69:82:b2:97:bf:1b:c1:ca:f2:d4:c2:23:49:
9d:83:ae:78:c2:66:77:58:fa:8f:be:38:42:ef:e6:5a:ab:74:
22:ae:c6:a7:37:0e:cf:88:39:e1:89:c1:d2:c5:d2:b5:9f:47:
55:66:53:7c:f3:93:20:95:be:a5:33:78:e7:dd:21:f0:4e:6a:
da:5b:99:c8:2c:36:b2:c1:0e:c8:e0:24:8e:84:79:a0:63:71:
9a:79:1b:c9:df:be:c5:ef:c1:e8:a5:b4:d8:c1:65:2a:bc:ae:
87:6e:03:dd:5a:e1:cb:b5:ea:e4:2b:24:4c:5a:24:10:93:53:
94:8d:f9:20:d4:a6:39:1d:e7:17:29:df:96:72:7e:f4:16:cc:
be:bc:c9:be:8e:43:e3:fd:ff:83:60:44:61:85:4c:3c:1f:ed:
45:3a:05:35:d8:43:86:c6:52:7b:ea:92:68:b5:09:4d:40:4b:
ce:f5:3b:c1:ad:30:40:53:51:bc:a4:35:d8:02:71:e7:e4:a5:
ea:53:b6:39
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUazFAqscea0Pz9ED6LPb9A5hpJq8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA4MDA1MDExWhcNMjYxMTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BlMmIzNTllZjk5NjQ5MGVlNzQ1MjIyMjkwYzk3MWY1ZmEy
ZWFhM2E5NDM2ZDNhODMwYzg4OTVlYjc4MWI4YWViMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQClpEhWWzsVfYbKn3SfnwzBy07CLCsd0Mwj51lUN6YYRx3C
NcNGatnUsc3P2b64XG0GXye07K4gzaQ1d+LP6ZA7ccwNgdtzqi5XyOWOidMgqrs/
QCXD4nuoerYMW5EUWX1J2McGCN7ISpB1MwTyCBewnYD4nR9CLhKTDMAxt+fz887N
fsq3GiQOvgQA1fA55OOrw3Qso0/NHjGoYEQsijIiFkNDBdS16A4wz92EEjdA7Gpq
42b0DDmk50bbzkW4+SQkgDXkaR5jkJXKaZBLXsYqtG1Zndm9j72Wr9BkTrW/XJk0
qDwyhZeW/gUcHokcaasKrwRWPGuG5RTGYbW5W1//AgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUPvUpJD4LcF/hy56RvPoX63fPvtEwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2Lzc0ZWNkNDBjLTgzNjUtNDliNC1hMjdiLTA2NjU3OGNlYzFjYy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwAmAPD78QwwDQYJKoZIhvcNAQELBQADggEBAKJbU3HCdZk1vfnTDUVeMkqP
i0TEETpDmlwrEYvgBS1Ju6+9iJu4rjUWpufxGRHlSHLTEHAqSZZwWPj/aYKyl78b
wcry1MIjSZ2DrnjCZndY+o++OELv5lqrdCKuxqc3Ds+IOeGJwdLF0rWfR1VmU3zz
kyCVvqUzeOfdIfBOatpbmcgsNrLBDsjgJI6EeaBjcZp5G8nfvsXvweiltNjBZSq8
roduA91a4cu16uQrJExaJBCTU5SN+SDUpjkd5xcp35ZyfvQWzL68yb6OQ+P9/4Ng
RGGFTDwf7UU6BTXYQ4bGUnvqkmi1CU1AS871O8GtMEBTUbykNdgCcefkpepTtjk=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:18:34 2026 by rpki-client