
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc2b5e45-8344-4038-8f8f-6229cecec136.roa
File: fc2b5e45-8344-4038-8f8f-6229cecec136.roa (raw, json)
Hash identifier: dei81FlBykM84N4CatZjtb7qLcrfmP7VMy8g1nJoZEA=
Subject key identifier: 1C:27:F6:7F:3C:77:CC:EE:2A:EC:02:A0:07:D9:35:9E:4D:82:A1:3A
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 54F38662149270B609B53E130AE389AD6A2E75B5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc2b5e45-8344-4038-8f8f-6229cecec136.roa
Signing time: Sun 04 Oct 2026 00:30:14 +0000
ROA not before: Sun 04 Oct 2026 00:30:14 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 8987
IP address blocks: 2600:f0f0:4141::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 21 Oct 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f3:86:62:14:92:70:b6:09:b5:3e:13:0a:e3:89:ad:6a:2e:75:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 4 00:30:14 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=3141985e8638d6ed27fa21503629fe3336c2d8d2cdb89163e6e0f42ae500f6b4, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:3a:c1:7d:b3:40:43:f4:a6:2c:b7:6c:84:
e2:5a:39:56:6f:13:a1:87:86:cd:4e:04:ef:bd:4b:
21:6e:bc:73:e9:6a:65:c9:5d:73:66:45:4d:67:8f:
6f:6c:d7:26:8d:22:87:86:31:db:a4:37:4d:76:23:
33:00:6c:31:fd:36:a1:00:e3:32:5a:dc:18:ae:c3:
46:48:a5:e8:55:c3:0f:9f:0e:bb:fd:d7:54:2f:df:
6f:b0:05:b9:e9:1d:08:97:1a:64:4c:2f:17:d9:4b:
1f:27:08:b9:4b:9b:e4:f5:80:3d:4b:dd:42:52:3b:
eb:c8:05:29:8d:98:28:69:32:e7:68:31:8f:24:80:
b4:64:ea:d8:7c:cb:3e:92:d7:5a:0a:93:42:e7:03:
69:53:6c:78:e2:8c:68:02:5f:f6:35:7e:6c:7f:e7:
a6:0c:49:12:cd:bf:e9:09:be:0c:f1:2f:b3:71:de:
d3:1f:ca:2a:d5:2b:4e:5e:94:da:2e:96:38:a5:84:
10:01:0d:9a:30:f5:60:d1:65:8a:23:e1:1e:e6:48:
ad:b4:21:ad:37:92:f0:03:3b:52:12:23:c4:d5:4d:
e5:90:7e:96:51:e1:0a:6e:f5:18:98:27:f2:fc:14:
49:f4:0b:f6:4b:22:08:15:8d:7b:d7:43:54:35:11:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:27:F6:7F:3C:77:CC:EE:2A:EC:02:A0:07:D9:35:9E:4D:82:A1:3A
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fc2b5e45-8344-4038-8f8f-6229cecec136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:4141::/48
Signature Algorithm: sha256WithRSAEncryption
05:82:62:bd:23:c5:e2:26:35:7e:1a:f3:82:9d:c9:01:7a:1b:
3e:f2:05:e2:33:52:8d:e7:77:1e:a4:2d:1b:c9:07:2e:8c:e7:
23:3e:e6:b8:d9:15:69:bb:98:18:d5:ca:1a:92:04:bb:7f:67:
8d:df:f1:e0:7a:5f:ef:5c:e1:7e:c2:22:e6:37:d1:1b:e0:cc:
3c:3c:e0:c0:29:f4:da:90:88:2b:bc:1e:88:1e:74:b0:ea:0b:
3c:e6:0a:07:01:21:1c:b7:71:d7:f2:e6:3f:77:06:15:14:b0:
85:30:bb:c4:bd:0e:e0:1f:44:63:73:55:23:80:89:8c:0a:f5:
1e:b6:06:72:65:da:0b:e8:aa:0d:a7:73:c2:90:7e:07:22:11:
9f:cc:4e:3f:7a:8e:33:f6:29:22:db:77:95:74:04:e5:4d:d9:
7e:e8:36:5c:49:03:96:b7:27:b3:35:11:ae:83:94:f8:25:cd:
fe:a9:23:90:3c:f9:26:da:25:36:f9:0f:db:bf:d6:f6:e4:ca:
c6:59:3b:0e:7a:ea:51:e2:8b:4e:d8:08:6a:93:34:41:10:14:
b2:01:fb:d2:fd:ea:be:89:84:75:82:f5:b6:41:a8:f0:c1:bf:
30:fe:d4:91:b4:27:72:e5:a2:47:d0:45:45:12:d7:cf:f6:2e:
19:97:41:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 20 23:51:03 2026 by rpki-client