
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f817431f-b343-4892-b675-bac7dee4bc4a.roa
File: f817431f-b343-4892-b675-bac7dee4bc4a.roa (raw, json)
Hash identifier: i2a5O4liAYF5T4Cd+MMIRO9aoWyArO9wc7DW903uOq8=
Subject key identifier: 6E:AA:7F:00:47:FF:CA:0B:47:AB:92:FF:D3:88:9D:B0:71:CD:5E:7E
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 353E15511FAC85BD26FD4856DDBB14A0CF8755E5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f817431f-b343-4892-b675-bac7dee4bc4a.roa
Signing time: Fri 13 Nov 2026 21:34:15 +0000
ROA not before: Fri 13 Nov 2026 21:34:15 +0000
ROA not after: Thu 11 Feb 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:4318::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3e:15:51:1f:ac:85:bd:26:fd:48:56:dd:bb:14:a0:cf:87:55:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Nov 13 21:34:15 2026 GMT
Not After : Feb 11 23:59:59 2027 GMT
Subject: serialNumber=6c2b6fdb4d08fe6d00e637659f03f9532eb99456f2851e3ac750bff4c6e252a7, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:a6:39:54:d1:6b:ac:c9:cd:e0:2f:79:4c:
24:19:6c:e3:7d:8e:29:34:2e:6d:cc:a3:d9:b5:33:
09:14:8c:16:2a:90:11:4f:3c:93:80:58:75:08:58:
c1:13:fb:d0:cc:73:e5:57:69:c1:63:a7:28:86:08:
b8:19:ca:a9:ee:5c:3a:ef:45:19:1d:b4:a5:f8:6e:
6a:34:93:ee:d9:26:a4:0c:e6:6d:4d:cc:79:3c:8c:
b9:15:05:66:98:cc:d9:db:78:70:6c:51:67:85:2e:
ff:79:25:10:11:40:c4:43:fc:d5:23:71:85:70:e3:
74:47:21:01:73:67:b6:e1:63:d2:76:5b:cf:de:8b:
0f:21:d6:b8:05:b2:9b:d2:d1:19:3a:4e:96:52:37:
ad:00:8e:d6:73:c0:ed:4e:80:b1:c3:17:cb:4a:03:
30:68:6f:f3:fb:e3:13:f4:cd:65:60:a9:cf:16:f6:
bc:6a:e1:b4:ee:13:dd:c5:00:b2:b0:72:0b:6b:96:
9a:f4:66:b9:48:7a:76:c6:41:83:27:25:88:33:5d:
92:07:a1:4a:5f:92:b6:9c:b1:37:b0:0e:cc:b0:93:
67:a9:11:3d:eb:df:a1:3b:11:f7:47:34:57:b4:7c:
f9:fa:f9:12:c8:a8:52:1d:eb:86:8d:ef:72:20:b7:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:7F:00:47:FF:CA:0B:47:AB:92:FF:D3:88:9D:B0:71:CD:5E:7E
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f817431f-b343-4892-b675-bac7dee4bc4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:4318::/46
Signature Algorithm: sha256WithRSAEncryption
9c:8d:1c:10:7e:4d:e7:69:35:96:11:e7:1b:03:73:55:94:40:
60:40:40:d6:e0:a1:09:37:05:6a:64:f4:5e:5e:ed:4c:60:39:
42:99:08:a7:6b:ef:32:ed:05:d7:a9:34:eb:de:a1:f7:3f:86:
64:39:b5:53:57:eb:f3:a1:b8:03:18:80:3c:af:33:39:db:ba:
f9:5d:36:c3:a9:e9:4e:cf:fa:32:24:22:78:ed:e7:2d:d0:82:
bf:e2:1e:43:f6:d6:4f:b7:ea:cd:3e:fe:6d:d8:f8:21:1f:34:
fd:ef:91:7a:88:68:ef:25:f4:21:98:fa:60:a3:64:f6:03:b3:
f0:24:97:ab:5b:04:75:68:be:88:04:e7:95:3f:5a:10:19:54:
13:d2:ab:2b:ec:b2:86:e5:9c:63:86:d0:b2:29:8c:74:6e:4a:
f5:9f:a6:d4:03:31:b5:ad:49:40:6c:f2:cc:f9:de:c6:30:7a:
cd:17:bc:ac:0f:93:5a:13:60:1b:98:a3:df:3f:70:fc:40:48:
08:2d:1d:8e:a0:da:39:99:53:d2:51:e4:4b:fd:a8:44:21:84:
b6:1a:bd:eb:fe:10:46:43:ce:4c:a0:48:ae:c8:99:c1:08:c8:
0e:18:cc:e7:ab:a7:2e:fd:f4:02:30:71:20:b8:1c:7b:85:77:
2a:64:3e:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 05:43:03 2026 by rpki-client