
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa
File: f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa (raw, json)
Hash identifier: vGPPQ9YWL1SP29wX0uZ/n461umQQYFM09e+mGWR7xiE=
Subject key identifier: 02:DF:5F:35:A7:17:B0:85:01:B3:2F:61:28:7E:DF:C3:33:36:C9:C4
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 1DD52989CABE61133787F8594E2D1931008C756C
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa
Signing time: Thu 19 Feb 2026 01:36:50 +0000
ROA not before: Thu 19 Feb 2026 01:36:50 +0000
ROA not after: Wed 20 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:f000::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:d5:29:89:ca:be:61:13:37:87:f8:59:4e:2d:19:31:00:8c:75:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 19 01:36:50 2026 GMT
Not After : May 20 23:59:59 2026 GMT
Subject: serialNumber=ef7820789cf495f74502e75d713321d2811e8c8d90742d37c4fa3486e63dbddb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:09:34:e8:fc:08:7a:fd:ec:92:17:81:3e:
0a:db:75:9d:95:09:69:05:28:60:20:7d:8d:63:84:
84:e0:a8:13:4a:5b:dd:5c:ab:94:1a:04:22:c8:b4:
ce:18:f0:36:41:aa:d4:72:51:1b:6c:11:b9:51:42:
a5:08:38:72:ee:e7:fa:1c:50:56:7c:44:f6:42:f4:
76:7e:8e:50:0e:75:8e:c8:8d:03:9d:ed:35:49:32:
1e:2e:fa:fb:66:9b:24:72:03:39:f1:d0:ff:9b:6f:
b4:52:d9:52:c7:50:d2:cb:57:21:7a:8c:eb:72:f1:
39:39:5c:c4:a5:b5:ee:93:01:7b:ea:fd:ce:36:9e:
74:6f:7a:f4:d6:cc:10:30:b9:d9:e1:62:e6:45:74:
9a:94:d7:cc:23:01:c8:83:d9:10:1f:64:b9:43:93:
7a:ad:0a:43:87:5d:16:1a:ec:a3:cd:8b:98:b6:ac:
27:4b:99:a3:3a:3b:d3:0b:7e:b2:b3:02:74:d6:50:
ea:8d:0e:95:a0:64:1c:1f:f3:f2:8e:b3:fb:78:d5:
98:8d:3c:02:7e:17:23:76:ff:27:7b:bb:85:9a:1c:
de:86:a3:a1:a4:88:95:e1:ff:45:02:6e:6a:e6:f3:
d9:99:a3:f7:aa:84:ff:48:75:44:d6:44:b6:f7:d2:
0a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:DF:5F:35:A7:17:B0:85:01:B3:2F:61:28:7E:DF:C3:33:36:C9:C4
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f8371529-5a52-4b9b-ae8b-e00bae3037ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f000::/47
Signature Algorithm: sha256WithRSAEncryption
4e:f5:62:57:84:0f:a4:d8:d8:92:b5:87:79:ef:99:56:6a:51:
8c:03:5f:5a:21:b8:e1:56:27:77:72:25:13:83:c5:56:fa:30:
48:20:ac:77:ca:df:af:42:f3:88:55:94:94:3b:85:62:51:c7:
61:25:f6:d0:58:78:55:6b:2d:95:7f:1f:2b:ef:5d:5c:b8:07:
f6:b1:2c:2e:91:71:6e:6e:cb:79:73:a2:54:76:c1:a6:bb:5b:
e5:0e:d2:cc:75:53:ca:85:f2:2e:ec:2a:0a:3a:51:ff:1a:e6:
0d:b8:65:87:b5:7b:dc:27:ac:9c:68:3d:7d:c9:b0:26:6c:14:
75:62:2a:2c:bc:c2:62:fd:89:32:ac:a5:88:a3:b2:47:eb:a0:
b1:ea:f3:2d:18:66:fb:d5:d4:4b:2b:d9:1c:ac:de:b8:ae:d9:
66:cc:22:1d:9c:85:17:e5:49:ed:de:8c:da:71:97:2d:0c:20:
fb:69:a0:63:02:33:15:f1:cf:33:72:9a:b0:f0:bf:07:90:cc:
39:08:35:26:c6:c8:39:e6:da:78:5b:fb:f8:95:3e:1b:2d:83:
5d:de:d8:d8:94:fe:29:e5:74:4d:bd:aa:4f:bc:07:8b:a4:43:
c9:ed:74:66:56:16:fb:19:d7:3d:c2:ee:4d:05:f2:80:ad:93:
fe:5e:b2:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:36:51 2026 by rpki-client