
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa
File: 04f5a71b-93f6-4367-a363-e37651f9b3c2.roa (raw, json)
Hash identifier: u8JXL2bVgWO63vYZbV4lM4sKbp/SUwUSyiMHkgpHK44=
Subject key identifier: A6:D8:84:CF:52:11:1C:FE:86:4B:85:36:06:F5:F2:9B:59:3B:4D:B9
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4A91E8F695B2E73600E0FEC9D4E63B01418E85DE
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa
Signing time: Fri 08 May 2026 03:00:37 +0000
ROA not before: Fri 08 May 2026 03:00:37 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 40045
IP address blocks: 2605:9cc0:c0f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 12 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:91:e8:f6:95:b2:e7:36:00:e0:fe:c9:d4:e6:3b:01:41:8e:85:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 8 03:00:37 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=c1926b82c668bbe38e3d023cf91f69d063b8f31e536146011117916bef0674b2, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:09:3a:87:4a:ee:06:13:a7:e5:0e:32:76:
5b:0a:90:a4:83:7a:d2:8b:ce:86:94:5b:25:38:f0:
7e:c4:ff:d8:8a:b6:fd:55:17:41:d3:77:be:eb:a8:
36:3a:93:a1:e2:57:3e:9d:be:17:46:22:fd:6e:6d:
36:65:37:d8:4a:85:c4:70:2e:4f:68:ea:2b:f7:9e:
1b:fa:45:d3:ca:4b:0b:21:8e:84:d7:78:78:97:fc:
72:f7:43:df:48:04:e9:1a:12:58:08:de:68:2a:8e:
95:66:55:71:aa:7c:9a:89:d1:bd:7d:e6:98:6b:8a:
a3:69:71:96:9a:89:0f:f5:1f:b8:6d:42:a0:25:7c:
0b:60:54:e1:69:a8:06:a1:1c:5c:a6:0c:40:00:74:
1a:8a:8a:3c:46:74:03:50:43:28:b5:03:53:c6:39:
14:a7:fa:26:b9:28:0f:a8:9f:a5:4e:55:b8:ce:7a:
04:ae:2c:ff:53:6a:2b:5a:6f:77:b9:3c:cf:92:d1:
9d:bb:56:73:6d:4a:6f:91:64:f1:5d:79:e8:1a:fb:
d3:ad:c7:a8:77:81:e6:a8:d4:90:3a:a5:3b:50:c2:
1d:78:c4:6b:12:a8:be:fb:cb:2a:39:24:8f:da:c0:
d3:6a:98:0c:6a:6b:62:57:6c:2c:cd:b7:ae:b3:06:
ca:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D8:84:CF:52:11:1C:FE:86:4B:85:36:06:F5:F2:9B:59:3B:4D:B9
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/04f5a71b-93f6-4367-a363-e37651f9b3c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c0f::/48
Signature Algorithm: sha256WithRSAEncryption
84:3f:1c:8d:35:73:44:f2:81:9a:e2:03:eb:b7:01:5d:1b:50:
e2:f2:e2:11:6b:ce:0f:05:00:58:9a:1b:16:94:ac:b7:9c:ab:
a7:2d:5d:aa:78:66:93:bf:53:a6:3a:05:d1:65:d2:48:fc:d1:
52:ce:c9:78:4c:c1:37:c0:98:57:3f:e7:61:5e:61:b4:1c:06:
29:87:73:09:6d:a5:a1:a4:b9:93:dc:b2:81:9a:cb:7b:0d:cf:
63:08:55:30:8e:ed:84:51:18:21:f3:89:5b:44:63:59:b4:02:
f9:41:14:40:52:50:42:8c:a4:47:39:68:1c:c9:99:68:a9:f6:
8c:57:b3:27:3d:8e:51:c3:d8:51:59:44:a6:ee:8d:d9:eb:dd:
6e:d9:60:13:35:0d:15:0f:99:c5:97:b0:b1:a5:95:5c:d5:5a:
75:5a:74:72:94:3e:08:ce:18:ee:3f:a6:7d:91:80:21:f0:d2:
72:a0:23:79:52:4e:66:1a:53:47:49:75:16:ad:19:7a:7d:3e:
71:da:7b:fa:73:17:79:e2:8f:89:80:ae:04:cb:88:15:e1:af:
e6:ff:00:4d:72:91:f6:65:1e:b3:77:43:08:89:48:a8:db:34:
ab:60:09:8b:00:44:82:29:6c:cc:0c:40:ee:f1:9c:9e:15:93:
ae:0f:3f:f7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 11 17:41:45 2026 by rpki-client