
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa
File: b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa (raw, json)
Hash identifier: 2eEHqwYR+ss5RqmCSuf9bOPg+nd+u9NQn281U7vzgXY=
Subject key identifier: 3B:30:53:24:06:00:5E:8B:31:A8:DA:FE:52:07:C6:48:A7:FA:1A:A9
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7CC815C28B7EA35586B0A4C6D5E01BDD25BCFBE7
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa
Signing time: Wed 20 May 2026 00:50:11 +0000
ROA not before: Wed 20 May 2026 00:50:11 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:e00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:c8:15:c2:8b:7e:a3:55:86:b0:a4:c6:d5:e0:1b:dd:25:bc:fb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 20 00:50:11 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=61cc189ed66d1b38355daa8edc1ca16cffb33789b0a565155cd76d0c6a6e63ae, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bf:e2:e2:41:90:c3:58:da:24:28:f9:e0:5d:
80:2a:b2:b2:e3:27:07:71:2b:15:4c:c9:6d:90:e8:
1e:c6:3c:86:29:7b:66:a9:ea:50:11:87:e5:ae:b0:
b0:e8:92:21:63:70:42:30:42:91:1e:99:42:d0:d4:
a1:0d:4f:d9:44:70:c1:78:9a:cb:c8:49:25:63:ad:
2b:fb:7a:12:34:b4:e0:7d:a3:67:74:60:d6:f7:3d:
37:78:55:98:6a:74:b1:34:73:d6:7a:ba:50:32:a9:
f4:ce:30:4f:dd:7c:94:5e:b4:11:2e:ea:d2:98:03:
e9:dd:19:e7:cb:29:fe:19:70:30:64:b1:dc:27:b6:
24:b2:6c:09:3e:6f:7b:fa:42:4b:e1:1e:b8:71:05:
7a:0b:66:bc:48:77:2a:7c:0d:7f:2d:22:5b:97:e7:
6a:c6:8f:4d:a8:60:8c:9f:5b:8c:63:9d:5a:df:af:
82:c5:7b:60:28:56:00:f8:21:c9:e0:d9:7c:da:1e:
1e:f2:8a:ab:1d:81:c2:6b:33:03:1d:2e:86:56:f3:
7e:d0:cd:d7:f1:83:8b:eb:21:9a:4a:0d:62:94:b8:
d8:56:05:b0:b1:76:43:e7:44:72:da:6e:cd:f3:ab:
4f:59:3a:7c:3d:8e:2e:b5:41:9c:d1:db:5b:5b:28:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:30:53:24:06:00:5E:8B:31:A8:DA:FE:52:07:C6:48:A7:FA:1A:A9
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b6f8c745-8807-42bd-924e-8afc5f67cb0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:e00::/40
Signature Algorithm: sha256WithRSAEncryption
3d:fb:ed:9c:e1:5c:d7:ca:23:5e:6e:12:84:a9:ec:93:28:69:
1a:d2:f2:f2:47:e5:5a:19:a5:64:4b:40:64:2b:f3:87:5a:12:
61:47:15:73:b1:c9:7a:ff:7b:f2:a6:70:9b:a3:21:ea:26:18:
92:17:7b:e1:10:90:af:2a:f8:b6:34:34:80:2c:05:74:61:86:
19:e8:f7:1c:41:d8:83:c8:9d:b1:74:f4:f7:61:2f:05:c0:97:
37:7f:36:65:8a:9e:7e:af:67:9d:18:8c:32:83:00:d8:69:02:
7b:1f:b8:0b:93:a0:e2:01:81:e7:95:22:81:df:31:f6:5c:00:
69:fe:f3:bb:9d:66:36:57:ed:a3:89:89:63:3e:ba:0f:f3:78:
31:31:3c:2a:f3:7b:23:34:69:f7:8b:9b:7a:fb:97:cb:b8:2f:
ec:6c:ac:dc:50:cf:89:cb:54:8a:79:bb:6a:08:10:a6:7c:e5:
5e:93:26:d5:a9:73:62:ac:db:ef:ab:3a:34:04:d1:10:f4:83:
57:f4:d5:a5:b9:dd:54:3f:8b:7b:e5:af:55:0a:70:77:ff:c7:
1a:22:93:65:ca:f0:74:e2:3b:c9:5a:fb:c7:e2:34:a0:7a:ef:
c7:d6:39:70:71:3f:b0:70:de:96:e5:1b:d5:ee:03:71:c9:23:
06:6f:bf:8d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:51:42 2026 by rpki-client