
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97b5d60c-40d7-4cd5-9bf1-aab94679827b.roa
File: 97b5d60c-40d7-4cd5-9bf1-aab94679827b.roa (raw, json)
Hash identifier: HLkysoqIN22BmVbzj2e6kvcQNIvEHkgkHUJNy9c4UDQ=
Subject key identifier: B8:66:AD:08:6A:65:76:7E:25:C6:D8:28:B6:C0:D8:3C:53:A7:E9:D8
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 0761927B93304FCAC81B31C82309DC38852923A7
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97b5d60c-40d7-4cd5-9bf1-aab94679827b.roa
Signing time: Wed 07 Oct 2026 21:43:13 +0000
ROA not before: Wed 07 Oct 2026 21:43:13 +0000
ROA not after: Tue 05 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f2:740a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:61:92:7b:93:30:4f:ca:c8:1b:31:c8:23:09:dc:38:85:29:23:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 7 21:43:13 2026 GMT
Not After : Jan 5 23:59:59 2027 GMT
Subject: serialNumber=f1ca15b79068c9217f376e323abd775291cb764ca018873385a204d9dcdb854a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fa:d1:a9:9b:5b:c5:86:79:43:ee:e7:3a:03:
73:bb:6a:b2:a1:ea:86:ed:a9:89:6c:74:4c:17:48:
b8:2e:f3:f0:e5:f8:01:77:ba:51:b8:4c:38:71:62:
c2:54:cc:09:d0:af:47:2d:ab:5e:a8:9f:01:14:ae:
ea:fc:06:59:68:35:d9:96:71:81:66:ae:c8:89:0f:
a5:0e:0e:31:f7:59:a5:fd:a3:25:21:cb:e4:9d:54:
35:c6:1f:d4:63:87:c7:f3:64:35:e0:d0:43:b8:38:
07:2a:0b:cd:fe:00:98:8b:f1:44:10:82:dd:45:59:
9e:06:cc:38:31:2c:19:c8:3f:b0:c3:c9:03:93:d6:
b3:88:68:8e:2f:7e:de:7d:26:4b:47:80:58:d1:45:
57:6b:44:25:c6:eb:11:df:59:97:90:3f:14:12:eb:
d2:4d:e8:2b:65:37:8b:ab:92:7e:ca:02:33:92:84:
be:7a:7c:f2:23:4d:f2:70:ae:7c:f6:d6:3e:91:43:
cf:95:97:62:29:14:f3:65:af:31:33:97:0d:67:f9:
03:72:54:54:80:76:04:8e:38:cc:6e:09:4f:c9:0f:
39:8b:dd:5e:6e:08:e3:d4:cb:6a:4a:b0:d5:13:c6:
28:1e:8f:86:1a:35:ed:0b:ae:05:23:01:28:42:a4:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:AD:08:6A:65:76:7E:25:C6:D8:28:B6:C0:D8:3C:53:A7:E9:D8
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/97b5d60c-40d7-4cd5-9bf1-aab94679827b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:740a::/48
Signature Algorithm: sha256WithRSAEncryption
30:da:0f:c1:bf:28:2a:fb:ca:74:c2:65:7f:7c:16:1d:13:26:
41:02:9f:7a:f2:d0:04:88:9e:5d:84:5c:69:cd:9a:3e:e3:db:
16:c5:d7:d7:e5:25:e9:94:63:ee:c6:f2:54:cd:db:1a:2d:4f:
66:1a:8a:33:c7:6e:70:b1:25:70:4e:74:4b:b0:7d:7f:75:ac:
18:66:49:e4:a6:f4:35:95:b5:f7:f3:07:de:1b:0c:38:26:3c:
ab:02:9c:6a:29:f8:cb:77:1c:b7:f3:b8:98:77:a5:bb:f2:93:
25:88:2c:01:a0:01:cd:e6:a9:a8:de:50:be:a1:7f:84:09:23:
ce:d2:1e:b0:b3:44:36:70:8b:9a:c4:ac:1b:96:f5:1f:bf:92:
81:18:c7:55:c7:b2:8d:fd:0c:94:ce:4c:e4:f6:35:cc:ea:61:
66:4f:66:29:50:6d:6c:ad:35:f9:0f:22:67:d3:38:e4:d7:a0:
8b:51:db:e9:28:82:72:70:f6:be:f8:bd:7a:36:a5:89:5e:b1:
47:97:d3:24:56:75:ff:be:2c:54:b5:7a:63:8c:bc:6b:09:e1:
02:c6:51:71:c9:88:2b:3e:92:42:44:2b:fc:3d:89:9a:5b:14:
22:9d:81:5a:fe:b1:5b:bf:30:b4:0a:0e:99:f4:56:09:78:bf:
27:69:49:7a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:47:18 2026 by rpki-client