
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa
File: b90bcce5-377e-4df4-b77e-97a06ec916c4.roa (raw, json)
Hash identifier: wGZvqpB/BHsQkVxz3dG15Rq32X4QJGajKLJzERt3DKg=
Subject key identifier: AF:A9:4C:E8:C5:1C:38:DA:B1:02:4A:C5:8D:55:F6:26:16:57:EA:77
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6746AE15D17563129EB1CB9F1405BF42CC601F73
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa
Signing time: Tue 19 May 2026 04:20:04 +0000
ROA not before: Tue 19 May 2026 04:20:04 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:30::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:46:ae:15:d1:75:63:12:9e:b1:cb:9f:14:05:bf:42:cc:60:1f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 19 04:20:04 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=6acd0dae969bc0b3e223c8f9c065be7dcb7ee6696f9ca29f56a34a4f3f3a610a, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:2b:6a:ec:93:58:e4:59:19:ac:c8:24:45:
6c:56:60:1a:6a:bf:21:55:22:5e:06:eb:8a:2f:bd:
4c:ed:d0:0b:59:99:fe:7f:7b:b1:e0:0f:d0:52:07:
26:1c:ca:e5:2a:cd:2d:85:bc:4b:9d:92:33:32:30:
34:00:06:1b:a6:33:37:ef:ed:d3:10:79:9c:02:2e:
41:32:29:b4:87:1a:cb:50:fd:65:aa:a7:d8:d0:ec:
fc:0d:1f:e4:3c:bd:46:f1:ec:d2:5d:67:25:3c:73:
6e:b2:bc:12:17:d3:e1:87:a2:11:23:ca:1e:dc:fe:
00:34:31:3b:f5:ea:25:80:d8:6f:30:27:a4:a9:b3:
6d:b1:d2:6b:2f:29:23:9b:54:c2:31:91:9a:3e:0e:
1b:b3:71:a4:a9:eb:47:30:89:d6:93:33:9c:ed:d5:
9b:c6:e1:bd:76:94:32:c4:35:ab:21:3e:9a:87:d5:
6b:4c:a4:32:48:e7:ed:a6:a1:a2:a9:de:a2:9e:56:
b8:dc:3f:f1:16:7d:c1:16:34:2f:c1:a8:f7:81:6c:
77:e2:10:e4:49:78:f5:58:dc:a9:30:93:b0:5c:83:
ae:af:01:c2:d4:d1:ed:6f:19:00:70:a4:fc:53:bd:
0b:b1:a5:f8:b6:2a:51:c0:f8:b6:0d:ee:87:d9:c6:
3d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:4C:E8:C5:1C:38:DA:B1:02:4A:C5:8D:55:F6:26:16:57:EA:77
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b90bcce5-377e-4df4-b77e-97a06ec916c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:30::/44
Signature Algorithm: sha256WithRSAEncryption
54:9a:2d:d4:59:63:9e:bc:03:55:62:b9:2d:f0:be:83:6f:84:
8a:5d:f0:a8:12:2e:fd:ef:87:48:f5:60:9a:ce:5a:1a:00:6b:
6a:66:43:36:0e:f9:4e:48:68:9f:00:8c:0a:83:b1:f4:f3:8f:
31:28:db:e9:44:d2:7d:b7:90:a1:70:26:c8:ef:ee:13:85:52:
ed:ac:aa:6e:49:96:71:11:f4:19:ef:75:9c:1f:02:b7:ed:05:
c0:be:d1:dd:95:08:88:f9:e4:ac:24:d6:15:15:6d:02:04:c2:
04:81:b3:e0:24:a8:45:6a:53:6f:e7:fe:27:ff:d6:0f:7a:1a:
1f:b8:42:23:e8:54:cb:a6:72:99:98:8f:c9:a1:fc:b9:b5:b1:
3f:fc:01:90:16:60:49:c3:4c:6f:ce:5a:61:89:1e:c8:fc:28:
e3:f0:c7:2a:2b:d0:a5:86:ed:6c:24:a1:3c:f8:56:ae:80:78:
79:2d:48:d1:02:05:f0:7b:88:9d:cb:8d:9b:4d:ea:f5:66:19:
fa:ff:2c:4c:e5:0b:48:16:da:4f:22:03:8e:71:ce:c2:7e:7d:
47:b5:8d:c8:78:d5:6b:1a:ee:a7:a8:16:bd:0a:83:bf:9d:21:
68:ab:14:b2:99:fe:d0:f1:49:0d:6c:8a:e0:89:6e:20:0a:35:
ed:f1:5c:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:25 2026 by rpki-client