
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa
File: a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa (raw, json)
Hash identifier: gMsgW5jV8GARtUlpEqWJk2XQ/3rCF637YWne/mpmtZA=
Subject key identifier: B9:54:F3:48:24:94:E2:02:ED:1E:4B:A0:7E:C0:F1:89:FE:8E:37:B6
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 1E2432B0B8358825E5CEF06067D3EC2DF74DC684
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa
Signing time: Thu 13 Aug 2026 00:00:10 +0000
ROA not before: Thu 13 Aug 2026 00:00:10 +0000
ROA not after: Wed 11 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f2:7030::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:24:32:b0:b8:35:88:25:e5:ce:f0:60:67:d3:ec:2d:f7:4d:c6:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 13 00:00:10 2026 GMT
Not After : Nov 11 23:59:59 2026 GMT
Subject: serialNumber=e7d5b8deb12108f76811cd7c56474877070b4f989b125446987fc1581a039bc5, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2e:4f:1b:65:0c:9c:49:86:62:8a:25:81:8b:
ed:4e:87:72:2c:1d:0e:c7:32:ce:f0:4b:84:1f:75:
48:69:a4:c8:64:82:0f:89:98:5e:17:2d:99:92:72:
8c:a6:1d:51:45:8f:00:97:99:f0:67:5a:97:d1:51:
8b:5e:da:31:88:eb:ee:c4:df:d8:16:ad:2c:57:0d:
c0:40:4d:29:02:53:42:59:21:04:c1:35:12:1b:d7:
f4:7f:76:d7:0e:93:4e:4a:87:64:c5:51:a6:c1:a1:
e2:1c:70:1a:75:8a:6f:cf:e5:5f:c7:79:81:e3:7c:
38:49:b4:be:d2:b2:b2:33:ac:f4:31:c8:e1:43:9a:
38:19:1d:76:d4:e6:09:34:5c:dc:92:b4:7f:9a:91:
f7:1d:0a:b1:f0:dd:16:c3:ab:78:00:45:7f:4e:31:
d3:dc:32:7a:48:2c:30:d3:1a:89:d9:6e:2d:9b:b0:
7b:6f:bc:c2:a8:6d:ba:52:43:ae:f2:55:4f:35:e5:
ba:33:66:d5:1f:a1:4f:8b:a9:77:08:b6:46:e7:45:
73:56:e6:9a:44:4d:93:b2:67:5c:89:cd:08:07:e5:
38:17:1b:cf:8b:83:21:9c:b5:11:ba:02:4c:7c:43:
7a:3a:33:6b:3b:98:57:f7:2c:d0:9b:a1:1c:0b:68:
e4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:54:F3:48:24:94:E2:02:ED:1E:4B:A0:7E:C0:F1:89:FE:8E:37:B6
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/a1c512c3-ecc9-453a-9a00-b2972e5cdefc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:7030::/44
Signature Algorithm: sha256WithRSAEncryption
17:f1:d9:60:d0:42:3a:d8:02:e2:25:ea:09:ae:f9:3e:21:1d:
19:de:dc:a7:da:ab:f3:3d:de:43:24:36:5f:4a:d4:22:01:ce:
e0:ce:3e:f6:b9:6d:ad:2f:3a:a0:81:fa:7e:2e:cd:9e:7a:6a:
26:c2:5c:96:15:f5:bc:1c:98:b5:e1:49:c9:1c:c3:5f:98:81:
83:a3:a2:81:7e:6c:a2:80:6b:7a:e4:f4:29:b1:bd:4f:4e:8a:
6f:9f:74:06:39:20:de:45:21:11:d7:2f:4a:5e:45:c3:56:d4:
23:07:6a:39:d8:c8:57:43:e1:0b:f2:d3:2b:2b:e5:e4:c7:91:
72:f5:84:8c:80:12:8d:f4:91:c9:c4:ae:15:a5:a8:3e:c4:f5:
79:9b:66:93:9f:c4:35:ab:48:8c:7f:37:aa:82:40:01:4e:45:
3f:bf:0c:76:5b:d3:7d:bc:b2:ff:b4:46:f7:72:4c:4e:3b:88:
4f:cf:14:21:b5:0a:b3:6e:06:c6:37:99:01:d3:8a:fa:f2:9f:
bb:7a:ed:4f:e2:a1:f2:c7:05:e0:7b:27:5f:b4:77:ce:3c:54:
a7:48:e3:84:e5:5b:97:d5:85:d2:c1:c3:f1:5b:8d:de:9d:51:
eb:d2:53:b3:63:6f:0a:8b:3b:e0:77:dd:7c:16:cd:6e:fe:52:
ee:db:88:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:14:45 2026 by rpki-client