
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa
File: d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa (raw, json)
Hash identifier: FbBaFDeWayXzy1VGrRYXTf8F2FZoesRN19YxMEfWP+g=
Subject key identifier: 46:F8:C6:D5:84:7D:C3:AA:B4:B3:05:F7:8F:85:21:7C:8E:87:A6:00
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 5AC8B086317D3C26768DD15A8F7D5F9E6BE4418D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa
Signing time: Fri 07 Aug 2026 04:10:41 +0000
ROA not before: Fri 07 Aug 2026 04:10:41 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:ea00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:c8:b0:86:31:7d:3c:26:76:8d:d1:5a:8f:7d:5f:9e:6b:e4:41:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 7 04:10:41 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=ff664762d65ee76d47c92c05b0d8ddcc26e4e45d423eda77e52776415491f7f9, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:21:65:b6:99:28:cf:17:a9:42:5b:78:a7:eb:
79:5b:b4:38:f9:bc:60:8b:04:96:97:9e:cd:98:4c:
6d:8c:16:23:b3:fd:e5:db:f7:00:9e:e9:a4:03:32:
0f:e8:37:4b:d6:5a:99:e1:74:3b:47:c9:02:d0:a4:
77:d1:b6:5f:cb:2a:b1:59:db:1f:93:ff:c7:e6:c3:
66:66:f2:77:fd:f1:c6:c0:97:af:3c:a6:41:6f:ea:
48:a9:5a:b1:4b:d2:03:a2:38:d2:6b:61:ba:0b:33:
90:ed:68:29:d7:5b:ba:4f:63:fe:39:60:f2:48:a3:
12:61:7b:73:6a:b5:98:cf:dd:a5:da:82:3a:69:76:
37:1e:1e:c1:23:38:8f:80:1b:07:b3:fb:89:6b:5b:
3f:8b:7b:24:55:20:ea:76:a3:20:41:b7:04:c7:a0:
90:e2:c2:c1:91:4b:4b:10:ce:c9:e4:73:02:af:b1:
44:b1:98:c3:76:1e:f9:ef:49:91:f4:30:6a:a3:a7:
f9:8e:ae:fe:16:c2:c7:de:d2:aa:39:60:aa:42:ed:
2a:14:23:a1:fd:e6:e7:79:68:65:d3:31:cf:76:dd:
43:a7:53:76:d4:5e:f2:29:d1:46:49:cd:97:10:2f:
59:d0:ca:68:2a:03:63:5d:a5:b7:27:6b:c3:e9:c9:
d8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F8:C6:D5:84:7D:C3:AA:B4:B3:05:F7:8F:85:21:7C:8E:87:A6:00
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/d2b11e0f-0112-4c4e-8aa4-168788fd6aa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:ea00::/40
Signature Algorithm: sha256WithRSAEncryption
45:81:e7:2d:05:d9:4e:1a:ff:06:1a:ae:23:ef:dd:3c:d4:c8:
4c:d0:5c:c4:a7:dd:df:ff:d4:55:7b:dd:18:f2:0f:0f:c7:25:
fa:36:34:39:83:8b:17:2e:95:03:5e:b8:4e:3d:6f:c9:d4:1d:
7a:30:c3:78:ba:94:74:17:7c:c9:ed:99:5a:d1:06:5e:a4:82:
aa:a3:ad:48:61:0b:ff:ca:4a:72:a4:e5:c5:98:dd:55:6a:fd:
6c:16:62:aa:a6:09:c7:07:7f:83:f9:df:58:2e:96:b9:04:85:
d6:a6:fd:62:85:38:73:8b:e0:eb:ee:0e:94:db:3c:bb:bf:b3:
aa:f5:4d:06:2f:f7:41:5a:46:4a:51:f1:ee:e1:3c:3c:d1:aa:
19:a0:1a:a4:c6:85:e2:3d:78:68:0f:37:fd:62:09:76:20:ae:
bb:e6:aa:6c:3d:3b:1f:66:d0:d0:b2:de:c6:dc:2f:f5:04:2c:
64:55:b8:34:09:4a:9b:5a:1e:6a:5b:a2:76:16:cf:b4:14:6d:
c8:08:cf:fc:73:87:d9:aa:84:6c:97:bb:5a:c2:96:78:4e:54:
02:64:a8:d4:e5:a1:7d:61:59:4e:86:4a:b1:20:19:62:a1:c5:
79:7a:2e:d3:6c:5e:9d:8b:2f:2f:3f:f4:34:0e:10:93:35:66:
dd:ca:a3:e7
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgIUWsiwhjF9PCZ2jdFaj31fnmvkQY0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwODA3MDQxMDQxWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0BmZjY2NDc2MmQ2NWVlNzZkNDdjOTJjMDViMGQ4ZGRjYzI2
ZTRlNDVkNDIzZWRhNzdlNTI3NzY0MTU0OTFmN2Y5MS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoIWW2mSjPF6lCW3in63lbtDj5vGCLBJaXns2YTG2MFiOz
/eXb9wCe6aQDMg/oN0vWWpnhdDtHyQLQpHfRtl/LKrFZ2x+T/8fmw2Zm8nf98cbA
l688pkFv6kipWrFL0gOiONJrYboLM5DtaCnXW7pPY/45YPJIoxJhe3NqtZjP3aXa
gjppdjceHsEjOI+AGwez+4lrWz+LeyRVIOp2oyBBtwTHoJDiwsGRS0sQzsnkcwKv
sUSxmMN2HvnvSZH0MGqjp/mOrv4Wwsfe0qo5YKpC7SoUI6H95ud5aGXTMc923UOn
U3bUXvIp0UZJzZcQL1nQymgqA2Ndpbcna8PpydjjAgMBAAGjggKzMIICrzAdBgNV
HQ4EFgQURvjG1YR9w6q0swX3j4UhfI6HpgAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2QyYjExZTBmLTAxMTItNGM0ZS04YWE0LTE2ODc4OGZkNmFhNy5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC
MAgDBgAmAPD76jANBgkqhkiG9w0BAQsFAAOCAQEARYHnLQXZThr/BhquI+/dPNTI
TNBcxKfd3//UVXvdGPIPD8cl+jY0OYOLFy6VA164Tj1vydQdejDDeLqUdBd8ye2Z
WtEGXqSCqqOtSGEL/8pKcqTlxZjdVWr9bBZiqqYJxwd/g/nfWC6WuQSF1qb9YoU4
c4vg6+4OlNs8u7+zqvVNBi/3QVpGSlHx7uE8PNGqGaAapMaF4j14aA83/WIJdiCu
u+aqbD07H2bQ0LLextwv9QQsZFW4NAlKm1oealuidhbPtBRtyAjP/HOH2aqEbJe7
WsKWeE5UAmSo1OWhfWFZToZKsSAZYqHFeXou02xenYsvLz/0NA4QkzVm3cqj5w==
-----END CERTIFICATE-----
Generated at Fri Sep 11 08:22:08 2026 by rpki-client