
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cb7dcd5e-6c1f-4da1-90c6-5a53e91641ff.roa
File: cb7dcd5e-6c1f-4da1-90c6-5a53e91641ff.roa (raw, json)
Hash identifier: s2nMroxhig3DUUS9UWg6crkkHG+KsLO/dNzYD/L0PDA=
Subject key identifier: 4E:57:56:BD:4A:E3:7D:D1:D1:34:94:E3:ED:80:41:F1:27:D6:29:C9
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 1BDB628E9A9A9CB7F33C30FD6AEF8CDAB42E9AD3
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cb7dcd5e-6c1f-4da1-90c6-5a53e91641ff.roa
Signing time: Fri 07 Aug 2026 04:32:11 +0000
ROA not before: Fri 07 Aug 2026 04:32:11 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:c003::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 10 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:db:62:8e:9a:9a:9c:b7:f3:3c:30:fd:6a:ef:8c:da:b4:2e:9a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 7 04:32:11 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=30759adf16061f114cf1252e813b81e33b3420cb493b7fb8a279c780272cf149, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:ff:41:5d:af:b9:12:bb:56:91:4a:02:cd:
71:da:a1:24:9c:26:4b:3f:65:15:b5:94:a3:c2:6c:
66:32:8e:8a:66:7c:04:76:d4:58:5c:ae:60:76:ff:
e0:3c:2f:0a:16:af:c2:84:ae:10:e2:25:ec:ba:21:
00:02:b3:01:b7:4d:00:27:b3:02:72:19:4b:2c:59:
77:29:15:c2:29:65:9a:81:ba:0f:74:a7:f9:95:1e:
37:87:b6:8c:ba:45:e8:37:b5:d9:42:70:81:bd:58:
1b:a2:79:37:d3:1a:be:36:e2:65:3f:3d:c5:62:a9:
f4:d6:22:f5:b6:ad:e9:99:2f:df:d8:02:0d:b1:fa:
5c:c6:09:b9:e9:01:8f:53:fb:b3:b9:13:aa:42:3e:
b1:56:fc:12:f5:a6:8b:1a:80:d6:08:12:c6:1d:86:
f1:59:4c:1f:33:72:d2:70:07:03:5c:6b:90:08:68:
5a:52:7d:22:1e:61:d6:d1:94:89:50:55:81:9d:9d:
b3:37:6b:dd:99:c2:f1:f4:dc:47:ef:d0:ab:f2:5e:
a7:08:e2:cb:06:ad:aa:e2:84:10:89:b0:16:a2:50:
26:ee:7b:3a:1f:82:bc:b4:4f:bf:ea:3e:28:9b:db:
79:4c:93:f8:b3:e0:f8:b3:e7:03:f3:cd:50:50:5d:
45:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:57:56:BD:4A:E3:7D:D1:D1:34:94:E3:ED:80:41:F1:27:D6:29:C9
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/cb7dcd5e-6c1f-4da1-90c6-5a53e91641ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:c003::/48
Signature Algorithm: sha256WithRSAEncryption
2c:4e:0e:84:95:77:1d:76:82:bd:5e:1f:f4:47:e0:67:05:43:
de:97:5f:37:4b:9b:4b:ac:a2:d5:f0:89:a2:70:7d:9b:b0:ca:
b5:bc:c1:25:d0:d9:e2:8d:d2:b6:96:53:bf:50:de:07:39:f9:
27:0c:8f:9f:37:af:3d:fc:9f:ef:f7:23:4b:48:04:5f:dd:16:
62:6e:bd:89:ce:9b:a4:22:de:fa:ab:87:60:0c:0e:2e:64:85:
43:a1:00:6e:55:db:e1:f5:80:ca:df:1b:4a:68:c9:af:e7:87:
99:35:4e:22:bf:87:a4:df:e0:24:40:79:4b:39:70:a1:2a:d8:
71:4f:23:1c:16:5c:1e:2c:dc:70:02:86:97:55:ae:1e:60:8b:
45:3c:f5:63:3b:fc:26:1f:8e:33:fe:94:30:b0:f9:dc:e1:9b:
38:b1:e3:df:89:1b:bc:ef:9f:5a:70:88:3d:44:5e:0d:5b:02:
6f:4a:b8:0e:d0:39:30:68:93:1e:4e:20:16:66:90:37:9d:be:
c5:d4:c6:10:f2:86:14:88:8d:0d:df:75:1c:48:e9:c1:9e:ff:
c9:6b:f4:a6:e5:2d:d2:97:83:d5:0d:ea:40:cf:69:5d:7d:22:
3d:d1:78:a2:72:7a:8e:ad:db:88:36:2d:11:a5:5a:e8:ee:44:
62:62:e9:19
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:40:30 2026 by rpki-client