
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa
File: 828860c7-04d3-410e-a0e6-5d8782c6c573.roa (raw, json)
Hash identifier: bpIep55nGW7nfit2ELENQbHfNNephhKIlmVGJVx71rA=
Subject key identifier: 72:16:72:74:C4:E4:07:DA:B6:E4:C8:B9:1E:B9:7B:AB:55:D3:5F:78
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 3B9062F1255021500BDC97CFA1CEF03B2AFB5684
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa
Signing time: Sun 11 Oct 2026 15:08:15 +0000
ROA not before: Sun 11 Oct 2026 15:08:15 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:10a::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 10 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:90:62:f1:25:50:21:50:0b:dc:97:cf:a1:ce:f0:3b:2a:fb:56:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 11 15:08:15 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=a8bdc8f7d4e0498c81b971f3bbf5aafeb5f5b8779b02853ee539b02aafc9d3e7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:df:51:a8:f6:3d:cf:2e:0c:a5:7c:04:f2:ed:
d0:8a:d6:62:89:1b:94:0b:36:88:02:9d:c6:fe:a8:
bd:4c:52:63:ac:fc:80:40:55:77:18:7f:0d:0c:c3:
ec:b3:09:bd:1f:e8:2e:de:81:4d:1e:0a:9a:9a:ce:
9b:9c:a6:ab:bc:b6:33:90:c3:ae:27:75:9c:c7:59:
e0:4b:e7:fa:a2:93:22:07:8f:da:da:38:57:ae:bd:
65:ba:61:c4:12:4d:5c:ba:53:4c:3e:5c:a6:72:a3:
82:37:d3:3a:6a:7d:71:eb:f1:68:d3:bd:ea:53:da:
30:8c:ae:ee:18:64:e8:ea:85:d3:7e:ee:cf:c5:a2:
09:3a:1c:2c:c4:5f:55:e1:7e:f8:d2:ad:44:fe:7b:
d8:a3:76:36:1a:aa:04:e2:2a:1e:72:04:15:5b:d9:
3a:14:0b:68:7d:34:f3:da:91:66:29:af:75:4d:9f:
52:16:a1:5f:7c:6e:e7:0b:6a:63:79:54:01:1c:b8:
fb:93:3c:7d:66:80:ca:b7:16:20:cd:9e:fe:1f:f5:
a5:9c:28:83:51:4d:4b:8f:48:16:09:93:85:6d:5c:
1c:60:84:ff:3e:6c:57:01:f5:cc:1e:86:69:b9:f0:
0d:4b:e4:3c:fb:81:c3:d0:70:2e:a7:cf:cb:14:db:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:16:72:74:C4:E4:07:DA:B6:E4:C8:B9:1E:B9:7B:AB:55:D3:5F:78
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/828860c7-04d3-410e-a0e6-5d8782c6c573.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:10a::/47
Signature Algorithm: sha256WithRSAEncryption
a5:b1:a9:78:12:9b:16:b0:91:17:d5:87:5e:24:8c:62:61:51:
ed:e1:0d:99:11:85:87:82:51:ff:d3:17:6e:c4:4b:85:f6:cd:
34:ba:b8:dd:02:40:17:bd:ff:c2:fd:9b:d4:bd:6a:4c:18:3d:
c6:b1:a1:c0:26:12:c6:59:43:41:d8:fa:b5:a8:f0:0c:12:d6:
31:cd:1c:74:7f:8b:49:84:c3:df:e8:77:8e:63:0b:bf:0c:b3:
4f:6a:21:77:3e:63:84:f2:79:90:5f:25:37:37:07:17:c0:6c:
3a:a0:ae:25:a8:8f:b3:40:61:6d:59:92:aa:3f:b5:cb:ba:a6:
1a:0d:1c:f0:2b:4f:a4:d4:e1:98:16:77:1e:14:36:78:bc:af:
cd:ae:55:f9:f1:a8:50:1c:c0:9d:1d:44:b8:46:00:fb:a5:3c:
9d:3c:6e:5b:31:9b:3d:5c:4f:45:48:a8:17:cf:d9:fa:85:9b:
97:f0:e2:ba:b1:26:cc:86:ad:91:21:ee:d0:26:ce:bd:4c:b0:
6a:ba:b1:6a:74:b0:9d:fc:23:e5:47:44:a6:02:84:34:c0:b1:
9c:9b:a1:ed:8f:dc:ad:e8:f7:85:91:6e:fc:80:f3:90:4a:1b:
09:a6:da:dc:8f:6e:f4:94:15:f0:9e:c3:36:7e:db:d2:77:5e:
13:ef:05:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 17:11:45 2026 by rpki-client