
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fd2b9db4-c18e-43be-bd82-0acced14af30.roa
File: fd2b9db4-c18e-43be-bd82-0acced14af30.roa (raw, json)
Hash identifier: uC2742UBE373o/KoEfU86qCdUknjHn25dxa4sMEZZtw=
Subject key identifier: 14:D9:F3:90:89:50:84:1E:F1:F9:19:BF:DE:FE:9B:C1:DD:58:81:48
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 794D58BFAF4BC6CA676375AF216D88814F52BCC1
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fd2b9db4-c18e-43be-bd82-0acced14af30.roa
Signing time: Thu 06 Aug 2026 11:47:07 +0000
ROA not before: Thu 06 Aug 2026 11:47:07 +0000
ROA not after: Wed 04 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:c801::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 10 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4d:58:bf:af:4b:c6:ca:67:63:75:af:21:6d:88:81:4f:52:bc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 6 11:47:07 2026 GMT
Not After : Nov 4 23:59:59 2026 GMT
Subject: serialNumber=f170aef8488665aa185ad21e9a95579c7f80cdfc279091eef77e10850e2242a0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:be:fc:ca:df:59:2d:08:3c:78:ca:56:bf:
a0:a7:5c:8f:d6:cc:1a:dd:cb:7a:1b:0e:f8:3f:9f:
c6:b9:4b:52:f5:d0:d6:54:e7:9a:44:99:69:d7:a6:
be:ce:68:bf:97:d0:8e:43:eb:87:eb:bc:72:72:e0:
63:4b:40:f1:77:ad:2d:69:b5:62:21:64:91:b4:3c:
72:2b:50:00:dd:45:c0:d3:a5:ce:0d:0b:b4:59:d5:
5d:4b:d7:dd:b9:5b:be:bb:23:d5:75:0b:be:cc:b9:
9c:55:f1:fd:e7:c1:67:55:81:51:6a:60:07:f6:de:
ae:30:c1:16:6d:41:dd:67:37:a7:42:2e:a5:82:8b:
c9:5a:4a:41:01:7d:a6:6c:23:78:e8:27:7f:9a:ac:
d6:1b:89:66:77:b1:16:06:56:68:b2:4b:29:bf:34:
80:7f:14:eb:f3:2a:07:41:90:9b:a4:c1:76:12:4a:
ae:69:19:05:ae:75:0f:26:a4:d3:d7:ef:41:64:40:
ce:f8:f3:a4:7e:10:12:36:20:8b:39:f1:c9:bb:fe:
41:41:34:ed:cf:f7:68:00:cf:b4:31:fa:99:56:09:
48:e2:e2:b3:e7:5e:22:a7:fd:e0:01:74:fc:65:76:
e8:87:72:a8:72:44:4b:5c:65:20:09:43:4e:4e:bb:
d1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:F3:90:89:50:84:1E:F1:F9:19:BF:DE:FE:9B:C1:DD:58:81:48
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fd2b9db4-c18e-43be-bd82-0acced14af30.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:c801::/48
Signature Algorithm: sha256WithRSAEncryption
32:5f:c6:21:31:15:fa:26:02:cd:af:84:24:b2:c3:b3:27:b6:
b1:4e:bd:75:9f:40:7d:27:94:5f:9a:01:5a:29:3a:62:52:eb:
5a:a5:df:63:f3:33:59:c5:6e:7d:8c:0e:0a:ab:81:7f:2e:a0:
71:f3:4a:9d:be:fd:e3:da:3a:ac:8f:aa:e5:da:5c:3d:85:31:
4d:2e:25:9a:25:87:91:db:12:b8:20:46:f7:c2:ae:c3:18:8a:
1d:d6:a1:b0:d5:99:9b:a9:df:6f:9f:7f:16:f8:5d:2b:2c:11:
89:83:7b:65:64:a0:d1:96:19:0f:50:23:6c:be:38:67:8e:fc:
22:05:5f:5b:a9:3f:1e:86:48:d0:49:09:7e:69:8e:9e:95:1f:
5e:84:18:d8:ed:95:d6:c3:f3:40:24:f5:ac:c0:f8:92:ee:3b:
d5:84:55:84:d0:d9:7a:0e:0b:7d:51:7b:4a:aa:6e:bc:49:cd:
ce:ee:59:58:4b:b2:2e:22:2e:4d:bb:cf:a1:a5:75:11:71:57:
2f:18:32:a9:72:6d:32:63:21:01:e1:92:3f:69:86:2b:69:23:
f6:2d:3c:34:34:8c:60:06:58:2b:e2:d4:eb:b6:8a:1c:c7:a3:
5b:3d:5e:66:b1:5d:b6:f1:a7:b3:90:f0:16:f9:1a:97:f7:7a:
f6:87:5b:00
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Aug 9 01:40:30 2026 by rpki-client