
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa
File: f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa (raw, json)
Hash identifier: wVFc05JqDSXDRGLmUfOeDZwyisIissfG0Reiyz8tIaI=
Subject key identifier: C0:4C:A8:4E:59:D4:E8:3E:1F:19:C4:5C:EA:DD:3B:F2:32:90:A8:3C
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 63A9801B9076424D39AA0E1B7CEEDDDF8B219B65
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa
Signing time: Tue 19 May 2026 04:10:52 +0000
ROA not before: Tue 19 May 2026 04:10:52 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:8000::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a9:80:1b:90:76:42:4d:39:aa:0e:1b:7c:ee:dd:df:8b:21:9b:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 19 04:10:52 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=11ac9d950fa8f15baa7af72fc6837f2fefdf604f411461c2ec23d489681be998, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e4:ae:e6:2c:93:81:dc:48:27:0e:76:b0:16:
aa:bd:f3:39:bc:02:98:7c:14:7b:5c:63:fe:cb:8c:
1a:3b:2a:a0:a8:5b:cc:e8:12:cd:13:bf:3b:d2:53:
3d:d0:d5:6f:f8:c1:29:ae:6d:9e:7f:1d:d0:ee:81:
c6:af:46:9d:73:bd:76:3e:75:49:86:0a:31:27:b0:
8e:dc:a2:5e:7e:b7:d8:75:19:8a:de:c0:3b:4d:2b:
5f:48:2f:4f:c9:93:ed:d2:0a:a9:51:cc:84:5d:f4:
2d:c5:4a:49:a8:71:18:0f:0e:7b:78:1c:f9:44:1b:
9a:19:90:37:5f:a1:f0:c9:83:0e:c7:46:a2:dd:4c:
0d:c4:d6:50:d4:69:71:e7:fa:16:6b:7d:98:4b:16:
6a:fe:8a:f6:56:e9:f0:1a:6c:df:fb:04:4e:f5:72:
35:0d:78:8a:9a:7d:63:95:a0:17:ea:d9:5f:92:d3:
c2:8e:65:77:38:d1:53:67:bc:98:a8:68:fb:eb:83:
d4:da:3a:eb:cf:78:9e:4c:ec:1b:89:ef:6c:9e:cf:
5d:3e:cd:27:c4:80:70:df:16:78:b7:9e:bb:cf:7a:
68:8a:f6:bd:ec:24:4f:4d:41:d4:a8:dd:ca:c2:46:
92:44:c5:cf:07:08:ae:dd:3d:f2:2f:a5:b6:78:52:
98:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:A8:4E:59:D4:E8:3E:1F:19:C4:5C:EA:DD:3B:F2:32:90:A8:3C
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f37c8633-aaf3-4a49-bfa6-775ab7724d36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:8000::/42
Signature Algorithm: sha256WithRSAEncryption
10:d6:7b:c1:b0:ca:fa:33:52:8f:cc:39:44:84:c5:6b:c1:c6:
d6:ea:3f:c0:e3:37:f1:13:c6:e1:02:1f:c6:ac:16:58:b6:cb:
2a:30:b9:48:d1:51:44:e1:a3:be:56:1f:da:5d:b0:9a:00:91:
e3:01:b0:33:d7:62:ed:8f:49:8f:05:56:fd:42:c5:e8:79:41:
b4:59:af:a2:d2:77:8c:72:9d:59:30:2e:08:b4:18:64:c7:68:
83:fa:4e:57:73:63:b0:49:99:6a:e9:f4:70:7d:9a:0f:a5:5e:
4e:5c:1a:dc:c2:da:68:49:14:a9:52:b7:0a:fc:1c:b8:be:f4:
92:e0:a5:e8:d7:f4:b3:aa:22:59:44:e9:e8:f0:b7:f0:85:3d:
1c:43:4d:36:7b:17:16:9e:30:8a:da:2b:f7:0c:e1:9f:85:d4:
0e:c8:dd:a2:e9:5e:0f:5e:20:da:e5:65:e3:7e:21:3e:89:c0:
75:4c:db:61:0f:e1:f3:9c:2a:ed:0b:0e:44:f7:74:11:10:ad:
1a:ef:6c:5d:a2:e3:11:62:61:b2:1a:47:c7:e0:c2:95:0c:01:
7f:c3:24:4d:64:52:d0:46:07:32:1c:06:e2:dd:03:c7:61:ed:
1e:5b:4f:44:86:b2:0e:9a:6d:65:f3:19:05:a6:87:99:5c:cc:
dc:b2:a5:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:50:34 2026 by rpki-client