
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa
File: f933dc9a-6cb0-4836-9711-454fb0e2e364.roa (raw, json)
Hash identifier: mgjFRAJmvgqB0RiP2PwMFICHing3sXauJjkevteYl/I=
Subject key identifier: 3C:98:0D:34:E6:C4:EA:20:15:C9:13:76:65:76:05:91:7C:44:A9:4E
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 6AA5031E0182639E72EA8D1A6F8E007CA7FDF891
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa
Signing time: Sat 08 Aug 2026 00:50:03 +0000
ROA not before: Sat 08 Aug 2026 00:50:03 +0000
ROA not after: Fri 06 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:f104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 19 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:a5:03:1e:01:82:63:9e:72:ea:8d:1a:6f:8e:00:7c:a7:fd:f8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 8 00:50:03 2026 GMT
Not After : Nov 6 23:59:59 2026 GMT
Subject: serialNumber=af80dcfd140b835fb3ded7d714ef00fbce6d711c8aa19645e30e862457adf12c, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:91:7d:6e:1c:e5:57:64:54:8e:3c:eb:bd:
81:e0:14:8b:ec:52:b7:11:82:a7:3a:d5:f1:b6:4d:
d8:5d:56:e2:6d:ae:5b:86:43:aa:8e:f6:0c:20:12:
13:b7:e0:0e:5f:a5:15:6a:fb:ce:c3:5d:52:86:c5:
fd:1b:94:b7:01:c6:f2:08:16:a2:d1:63:56:12:d0:
e0:79:6b:23:dc:01:3b:df:03:7e:a8:52:f4:c9:19:
a2:ac:27:27:be:f1:98:aa:26:00:2c:40:7b:e3:b7:
d5:4a:7c:9f:b1:fc:45:38:a6:b8:7a:c1:ce:f9:d6:
b9:f6:1e:90:20:6e:9b:de:fa:93:c0:37:3d:6b:e2:
6b:db:60:74:82:ac:79:32:1e:5e:f9:f4:72:dc:40:
d1:ba:20:ec:19:f6:29:54:b0:de:db:d4:43:9e:d1:
91:a1:42:bf:95:1e:ec:92:cf:1f:b7:08:6c:3b:86:
da:b7:8e:f5:fb:9a:e7:b2:2d:7a:da:04:43:33:b0:
1b:6a:63:4e:1f:28:7e:5e:a3:5e:38:3c:7f:24:cf:
8d:18:fd:28:41:6c:fa:1c:0d:23:8e:60:37:38:a4:
33:73:2e:79:b2:c4:54:74:e3:52:c7:0f:6d:65:49:
6a:f6:f2:54:00:11:05:67:a5:f6:a4:06:16:79:f2:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:98:0D:34:E6:C4:EA:20:15:C9:13:76:65:76:05:91:7C:44:A9:4E
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f933dc9a-6cb0-4836-9711-454fb0e2e364.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f104::/48
Signature Algorithm: sha256WithRSAEncryption
97:98:4a:8e:83:27:1d:8d:43:2c:0b:83:36:7f:df:e2:2e:83:
aa:d1:84:51:31:e0:b6:ce:17:aa:1d:f6:45:05:16:04:35:c3:
60:24:f5:48:28:d2:67:08:65:fa:f8:be:a6:bc:5f:74:11:98:
5c:6d:21:7d:e5:88:7b:f4:50:98:50:1c:b0:71:bb:71:aa:ac:
b7:16:fd:c3:b3:14:ae:25:da:46:3d:fb:4c:21:54:80:cd:f8:
84:2e:61:b9:c9:11:0f:d7:a2:3b:9c:1e:f6:8e:b9:cc:cb:18:
58:b9:eb:a1:af:b4:ea:f1:e7:6c:1b:8d:b4:f2:2a:95:e9:87:
b0:ae:fc:2b:95:d1:ce:da:4f:27:7b:e5:44:be:cb:3c:d0:85:
a2:cf:d3:84:af:d2:9d:be:ce:ce:7b:ae:a0:90:7d:3c:ec:9e:
e6:e6:7d:f5:1f:e7:c7:10:12:39:9b:18:2a:04:37:ab:74:45:
bc:e3:b3:bc:c3:81:70:b0:a8:6a:da:c9:a2:0e:e5:bc:4e:8b:
d3:f3:06:e6:45:e6:a4:94:49:82:87:c4:64:ba:c8:80:0f:d4:
61:6a:c0:c5:de:ee:ba:54:84:dd:0a:a0:c7:4a:fe:45:2c:18:
be:e5:db:37:b9:3c:e7:cb:cf:3b:c3:d4:9c:1e:20:90:4d:44:
4b:ae:23:ec
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 18 02:17:13 2026 by rpki-client