
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa
File: aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa (raw, json)
Hash identifier: q+0gHez63Bnew5iQLO/+BdCP/ECJJxdTGyp4ZXu4Zuw=
Subject key identifier: FB:FB:D1:DA:20:C6:FC:35:6A:FF:2D:80:76:02:FC:46:B1:20:D4:DD
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 74E2EFA98788F63B2E17172629E76E37348B0140
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa
Signing time: Fri 07 Aug 2026 04:10:07 +0000
ROA not before: Fri 07 Aug 2026 04:10:07 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e200::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:e2:ef:a9:87:88:f6:3b:2e:17:17:26:29:e7:6e:37:34:8b:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 7 04:10:07 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ba1ab197637d9c4e138946d5279f7e18bb4296f5a8cb452d7bb72d3cf02f4601, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:6a:6c:f8:2a:14:30:a7:89:8d:a3:99:7f:
5b:e8:6c:4e:41:ee:96:d3:27:da:9f:4d:04:da:dc:
5b:0c:fa:ba:87:6f:0b:db:6c:d5:a6:ee:47:f9:02:
52:cd:dd:bd:b6:b5:23:02:7e:b0:b7:02:7d:72:00:
c0:41:14:b5:db:a8:ce:a9:81:cf:0d:04:08:95:cb:
b7:06:ef:16:fd:55:79:c5:06:41:d3:3c:9f:55:cc:
c5:09:50:dc:31:2c:a4:b7:d3:11:34:fd:55:92:1c:
bd:e3:86:da:b7:31:9a:9f:85:57:62:4f:f8:09:b9:
ec:6b:56:72:8d:30:76:86:3e:2c:13:0a:3d:38:23:
d4:03:f3:ae:be:2a:8c:7a:d3:16:6a:dc:3f:cc:42:
1f:be:a6:72:44:26:ec:85:56:15:ac:5d:04:22:04:
fb:99:20:3c:59:a6:fe:2d:78:be:23:75:59:47:01:
a7:29:cb:79:02:24:e9:74:ab:61:75:06:a0:7a:5a:
c3:87:7f:a7:fe:2f:26:b7:f3:95:e1:cb:cd:33:25:
c4:ad:75:10:bf:79:f5:db:45:b6:ed:95:19:1a:29:
39:4b:fd:5c:c8:09:0e:ac:0c:f8:08:1d:8c:8d:c3:
b9:94:51:20:75:31:db:31:b6:9e:99:13:d1:71:2f:
78:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FB:D1:DA:20:C6:FC:35:6A:FF:2D:80:76:02:FC:46:B1:20:D4:DD
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e200::/42
Signature Algorithm: sha256WithRSAEncryption
71:09:11:91:43:45:e7:7e:d2:0a:8a:b6:a5:77:23:e8:7a:7e:
3b:ad:d7:a0:b2:d3:f1:c1:7a:65:90:23:b5:bc:e0:87:f5:b2:
08:d2:2f:7e:a4:10:8e:1f:18:1e:b1:00:5c:f1:2a:2d:a6:68:
34:3d:e2:e7:2f:e8:93:cc:12:7f:c1:6f:85:f6:55:84:24:f2:
9c:1a:7b:d5:70:d0:a7:b1:94:45:ae:33:f7:a0:80:4b:4f:8f:
4f:fd:95:fc:fc:f7:c3:88:6a:61:06:fb:c5:45:df:ce:f2:fb:
a5:4f:52:52:96:3d:d7:bb:3f:5b:8d:8f:f6:a6:c0:96:3a:3a:
df:a5:50:19:ba:9b:57:86:2d:fa:f0:8e:03:0f:2a:f9:c6:a3:
4e:3c:8c:16:44:50:42:0c:9e:6d:5a:2d:b1:54:dd:01:34:2d:
10:61:18:3c:20:1c:50:b5:31:e7:12:e5:47:ea:ad:df:06:27:
7e:b6:97:de:b0:6b:c4:08:a8:cd:38:4d:18:54:e5:d0:cd:8a:
14:4f:81:90:1d:6b:6f:7c:45:84:2d:18:ee:12:30:64:e3:ff:
c3:ac:fa:e7:8f:56:ee:6a:4d:1c:69:a9:e1:c6:65:c5:3d:13:
16:8f:f3:2f:8f:9f:e3:92:35:ea:c6:29:14:f1:64:91:be:fc:
68:10:e1:9f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 11 07:37:05 2026 by rpki-client