
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/929e036f-6072-47f9-80fc-2841df841f46.roa
File: 929e036f-6072-47f9-80fc-2841df841f46.roa (raw, json)
Hash identifier: e8HnFOnOw13Uq/kyF+Rrd4e36nuKOeVBHIgxaA8P2LA=
Subject key identifier: A9:95:1F:02:58:52:00:D8:8F:9E:7B:7B:97:CA:72:F1:5A:47:4A:FB
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 1C43785E6CBEB20363E3CF2ABDB842550BE7131E
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/929e036f-6072-47f9-80fc-2841df841f46.roa
Signing time: Tue 17 Feb 2026 19:06:37 +0000
ROA not before: Tue 17 Feb 2026 19:06:37 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:400::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:43:78:5e:6c:be:b2:03:63:e3:cf:2a:bd:b8:42:55:0b:e7:13:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 17 19:06:37 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=ebb686299377341f6b9212aa7a7890f16ca71502a4022399558dae94affb1f5a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:be:0d:c4:bf:31:8d:15:b0:e2:97:ab:26:
01:0f:74:2e:5c:4f:cf:24:78:4d:25:9c:a6:86:90:
55:96:0f:1c:1e:ac:87:4e:bd:2e:d9:0b:c9:c1:0c:
b2:f7:5f:ce:ae:55:76:09:66:5c:23:55:61:9a:b7:
8b:69:c8:dd:69:ad:69:c7:ff:fe:ad:ed:22:6a:80:
bc:20:5e:2c:26:6f:51:e4:3b:f4:82:e6:87:25:b6:
e0:f3:e3:49:ce:4c:e3:67:95:93:e7:13:35:2b:1b:
70:10:8f:30:93:76:bc:64:5b:f5:de:b2:79:c3:f0:
0c:00:1c:3e:61:58:8c:a5:f8:69:72:e0:21:7f:45:
31:f9:d5:4c:b5:88:bb:c3:da:b2:f5:3c:aa:6f:4c:
ef:f1:3d:a5:ab:8f:b4:43:e9:09:28:22:f5:5b:20:
19:0a:c0:b1:aa:e5:b3:e8:05:93:86:aa:a8:b2:9b:
49:dd:fa:7f:50:b5:3b:06:d9:c0:c2:f2:23:82:5f:
c9:4d:48:92:ac:15:ce:32:69:2e:82:b2:54:fa:1e:
1f:f8:02:71:5a:da:d5:dc:10:e3:05:10:ce:cd:72:
31:89:39:ef:f9:4c:93:c8:af:5b:0f:e6:36:a6:b1:
93:7b:a0:62:fc:70:0e:3e:be:f2:1b:55:98:09:d4:
06:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:1F:02:58:52:00:D8:8F:9E:7B:7B:97:CA:72:F1:5A:47:4A:FB
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/929e036f-6072-47f9-80fc-2841df841f46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:400::/47
Signature Algorithm: sha256WithRSAEncryption
5d:db:f1:31:a8:30:80:ec:a1:4a:4b:76:b0:26:14:9a:c8:7e:
e2:83:6d:5b:e0:bd:6d:e9:30:5f:cc:a4:a4:8c:71:9a:db:7c:
79:0f:ee:70:65:e7:4e:29:77:60:36:99:e4:3c:bd:f9:e4:28:
68:c8:a8:21:eb:bb:4e:9d:a9:e7:0a:2f:80:4d:5c:13:34:6d:
2f:86:97:7d:96:96:c4:d8:57:05:33:2a:6f:18:38:e7:e3:b0:
eb:df:00:4d:77:a6:33:43:62:b1:ee:53:10:bc:a0:f2:a6:c3:
af:25:5e:2c:60:f0:ff:99:b9:78:c1:eb:f1:b2:8e:73:59:00:
bb:07:03:4d:fd:69:e7:e3:0f:3f:b9:32:65:65:87:e4:4a:19:
8b:fd:11:fe:61:cf:e2:5f:7a:ef:51:ab:90:0e:bf:8c:42:e4:
52:08:67:56:5c:46:35:2d:bc:bd:6b:f8:b7:70:c2:87:b8:5b:
dc:39:ba:2c:f6:a9:5c:40:57:b8:b7:41:f5:b9:a0:88:19:b7:
88:81:e1:78:e8:ab:68:cd:e4:50:c6:8b:fa:ca:f9:77:03:47:
00:b4:7d:ee:c2:7b:8a:76:5f:67:6a:be:13:bb:21:fe:4c:ba:
bd:6e:c1:dd:67:df:52:20:90:57:96:7a:d8:9d:f9:8e:69:6c:
7b:b6:0a:cf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:48 2026 by rpki-client