
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa
File: ca586b6c-c586-4283-8392-892b53790b90.roa (raw, json)
Hash identifier: 9tUa2iG6ZsnUNmmoZbjtA5bvHkLecwNq0l+aUcBRJ9Q=
Subject key identifier: EC:F5:10:1F:9B:2F:05:67:EC:38:7B:C6:5C:C9:61:8E:13:3D:01:53
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4FE92632CB3E5ED738DA4CBA653C70B494B8E77F
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa
Signing time: Sun 18 Oct 2026 01:20:07 +0000
ROA not before: Sun 18 Oct 2026 01:20:07 +0000
ROA not after: Sat 16 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f1::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:e9:26:32:cb:3e:5e:d7:38:da:4c:ba:65:3c:70:b4:94:b8:e7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 18 01:20:07 2026 GMT
Not After : Jan 16 23:59:59 2027 GMT
Subject: serialNumber=ecc69c8a8737441eb2e38e35ee063f7436aad02a048a21aa37504ee2a62a98fb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:3f:c3:3a:fa:04:ea:cc:ec:dd:af:67:eb:
82:8e:09:d2:7a:ef:06:fc:f4:77:98:a4:4f:99:75:
14:12:49:63:ba:f5:a5:11:33:7b:cb:90:8d:bd:04:
a2:2e:cb:10:7e:00:09:7f:6e:d8:ba:70:93:e5:a0:
c7:ba:c1:ca:76:dc:40:da:bd:fd:5b:88:f9:78:a4:
09:46:28:93:14:ef:e2:79:02:8e:19:48:32:ae:cb:
9c:ae:62:07:cb:df:d7:45:2c:b7:26:c7:25:9d:78:
fb:7d:2e:66:19:75:72:5b:9a:5f:bd:00:2b:65:00:
77:71:61:a9:00:83:21:ac:28:9c:bd:a0:99:b7:70:
bf:0a:01:9e:06:5d:c4:ea:85:a5:8a:1a:89:a4:9d:
76:05:38:97:9a:96:0d:6f:48:d5:e8:6e:cb:9d:4a:
7c:73:0e:59:46:a6:b6:2f:b4:74:dc:5f:cf:40:30:
9a:5f:f1:69:29:93:ae:be:bc:44:e5:1e:a0:d4:07:
70:43:c4:f3:3d:32:fe:f0:3d:f4:37:3d:fa:a2:15:
d0:cc:54:8e:7d:c3:ef:fd:5b:9e:06:39:21:87:17:
b4:b3:46:88:71:3f:81:d0:3e:b6:69:57:56:ee:78:
74:b2:79:62:67:94:d9:1b:f6:2f:fd:99:f1:4e:00:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:F5:10:1F:9B:2F:05:67:EC:38:7B:C6:5C:C9:61:8E:13:3D:01:53
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ca586b6c-c586-4283-8392-892b53790b90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1::/44
Signature Algorithm: sha256WithRSAEncryption
0c:69:25:36:67:f5:d0:70:e1:81:dd:22:70:e8:8e:8d:e0:f9:
36:56:d3:02:67:2d:90:c8:b2:77:68:65:aa:6d:89:2b:eb:1e:
0a:2b:2b:4e:ed:89:04:53:db:91:7a:ec:88:b0:af:65:a0:16:
dd:2f:c0:e9:64:ff:be:1e:e3:26:d4:65:ad:bf:2d:ff:eb:5d:
0d:72:06:aa:d2:81:73:93:d3:0d:f0:d1:6f:63:22:ac:e1:cb:
fc:3b:f8:66:40:40:8d:0e:22:7d:0a:dc:03:30:95:4a:cb:60:
6a:06:8d:78:35:75:c3:3c:05:94:38:0f:e5:45:c7:3c:5a:0b:
ac:3c:ee:a2:cd:18:38:35:82:a5:42:2b:70:3f:95:9d:6a:c0:
8e:fb:d1:e6:24:93:cf:63:ed:ff:06:a4:17:d7:1a:ec:8a:c4:
05:8d:b9:c1:3e:16:38:06:ce:9c:b2:9a:d3:47:bf:71:bf:9b:
cf:e1:1e:f8:aa:ab:da:85:d4:23:58:15:d4:8d:9f:fa:0d:5f:
ba:e8:79:9f:37:94:cf:c6:d6:35:9a:e2:ac:19:d5:cd:01:83:
95:45:22:0c:a2:52:18:b2:af:86:a9:c1:c5:69:74:68:87:0c:
cd:1c:4f:2d:bf:94:28:f5:c8:e0:e6:fc:b6:cd:57:36:93:66:
96:ba:77:c3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 04:36:20 2026 by rpki-client