
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa
File: 87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa (raw, json)
Hash identifier: 268dUWDJ2eO0shRuBioevNS0zqM81fXRbQ/4TT8FToA=
Subject key identifier: A7:75:16:23:B2:AF:7A:81:CD:72:C8:25:67:55:77:2C:66:A6:40:48
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 42614F7C7452AA3B89818CB6420C6AC79F4C77BD
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa
Signing time: Fri 07 Aug 2026 04:20:27 +0000
ROA not before: Fri 07 Aug 2026 04:20:27 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e500::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 28 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:61:4f:7c:74:52:aa:3b:89:81:8c:b6:42:0c:6a:c7:9f:4c:77:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 7 04:20:27 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=43e96dfeb4bca387b4f0c80be2d51ade199caf95ebf91370bda98174dcdd2f60, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ef:02:0c:49:58:cf:d1:ec:00:3b:7b:ec:0e:
44:fd:43:68:ac:30:f3:a0:f7:b3:03:10:73:47:66:
fe:97:bc:6a:94:2b:28:0b:6c:e1:31:43:7c:60:e7:
f4:b2:7a:6e:44:b5:3b:69:f1:6d:71:68:4f:06:0a:
d4:37:c4:e8:46:c7:d5:52:93:8a:6c:14:6f:8c:fa:
15:28:00:0a:20:4f:a2:ba:4e:c6:6c:86:ff:df:58:
a5:5c:7f:11:58:9c:d6:49:c1:18:70:1e:7d:ac:99:
cd:4f:64:ce:b2:c0:a4:b6:00:db:1b:1d:db:1f:00:
26:be:d3:c7:b4:8b:2b:3b:c7:5b:cc:d0:43:63:75:
5e:06:53:53:06:70:5f:d7:b2:8c:ee:7b:41:7a:83:
ea:6d:6d:60:08:b3:6c:7c:b2:78:3a:ad:ae:52:3e:
f4:7c:cb:70:0d:84:24:46:52:45:38:fc:55:d7:64:
51:66:97:8f:81:c5:cf:c5:89:79:1c:bd:b2:60:ec:
de:30:d9:c2:57:85:a9:17:dc:d6:b4:73:e8:3d:da:
7e:0a:88:fb:32:b2:e1:35:12:ea:3b:e3:c0:88:0f:
e7:65:a9:38:50:4c:a6:73:b2:53:ab:f3:75:2d:10:
09:9f:3d:9e:c8:12:66:96:a5:92:71:ff:4f:ee:fd:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:75:16:23:B2:AF:7A:81:CD:72:C8:25:67:55:77:2C:66:A6:40:48
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/87bafb0d-7cec-4331-8a09-4a4d56abf7d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e500::/42
Signature Algorithm: sha256WithRSAEncryption
7a:5f:52:20:5a:17:c2:f9:f8:7f:5c:92:8e:8b:a5:3b:7c:c5:
f9:11:0b:f2:54:79:45:38:b7:74:c8:13:ea:c2:31:31:d8:3b:
53:45:fa:f3:e2:07:51:8e:86:62:e1:79:14:cc:bb:19:f7:cc:
b6:0c:c5:0d:e0:6c:b5:3d:09:b2:5c:b3:d3:f8:6f:91:84:9e:
45:1b:25:96:e5:29:82:24:34:5d:b0:77:ab:8c:7d:85:6e:bf:
d0:93:93:52:06:97:33:66:b4:87:29:8e:d0:66:ad:5b:d3:87:
cd:22:f5:f3:cd:d8:76:df:c0:9d:f5:2b:d7:42:b0:36:bc:0f:
50:de:59:e7:55:5e:82:b3:ca:e1:76:24:1f:08:a5:72:11:d7:
23:53:e3:3b:9f:ec:19:7a:6a:be:ee:79:11:65:53:06:13:21:
04:53:0b:61:8d:fd:1a:ce:ee:f9:40:51:97:71:7c:ba:9f:98:
20:b8:50:f1:fc:9e:84:da:42:67:26:a6:85:9f:8c:89:d9:8d:
55:d4:00:34:fe:19:90:0e:d3:58:f8:32:58:15:2d:10:a0:c0:
cc:6b:b9:a9:42:a9:30:e1:7e:63:47:dc:17:ec:47:cc:9e:d9:
30:a1:c7:90:8d:db:20:6b:7f:e8:95:54:78:95:db:f8:e1:d1:
65:42:c3:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:00:37 2026 by rpki-client