
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa
File: 57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa (raw, json)
Hash identifier: b67/DudUx5xwTy7NSfxctzIWXNNUoZVViOx1UOoBht4=
Subject key identifier: 79:03:64:E3:A6:2B:DD:F9:6D:84:BF:E2:80:DA:46:44:12:88:FE:C3
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 199B4F56DFA848E45AAF21847181B054061B41E9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa
Signing time: Fri 08 May 2026 03:00:34 +0000
ROA not before: Fri 08 May 2026 03:00:34 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:c09::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 12 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9b:4f:56:df:a8:48:e4:5a:af:21:84:71:81:b0:54:06:1b:41:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 8 03:00:34 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=2fd5c139042ca3efae8aedf9f9c7aab01ef6574dd639f68d42d25305a1a735ca, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:f1:6b:ec:31:e9:d7:89:fa:b2:51:8b:bf:
63:42:3b:13:c8:82:e7:80:b9:25:f0:c0:63:39:a5:
ea:3d:84:de:0e:61:6e:d5:b0:e9:2f:55:92:18:f0:
77:42:26:11:26:c3:8a:6e:dd:99:4d:af:4b:0b:09:
ef:a4:67:f3:bf:41:47:77:88:1d:79:48:cb:5b:d6:
04:3e:94:6c:a5:cf:7d:14:78:23:9c:96:f2:77:e7:
5b:4b:3b:5b:a4:2d:36:6b:d7:33:c8:60:79:04:0d:
e0:02:67:3e:11:36:91:82:d7:55:1d:b7:ec:b7:74:
1a:57:91:5a:88:d4:c6:cf:c3:71:4a:e9:3b:60:c3:
7b:c2:1a:12:ad:0c:c1:fc:86:2a:3c:51:b1:6f:68:
be:36:b1:2a:65:ec:0a:d8:01:00:5b:6b:9f:92:d6:
ed:b4:6c:a9:27:0e:22:9a:8d:14:60:00:d9:1c:7f:
a4:97:80:56:53:c2:4f:70:86:23:4a:28:24:6e:e8:
2a:ef:5f:84:d7:70:c7:21:41:3d:44:34:b8:3c:ab:
59:10:fc:06:ad:13:47:c7:a6:34:d6:74:62:3f:c1:
3c:02:77:b6:80:c8:19:b3:40:43:b8:07:1b:1d:bc:
14:fb:48:d6:bd:67:a3:9d:44:c7:d1:d8:6a:c0:e0:
a1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:64:E3:A6:2B:DD:F9:6D:84:BF:E2:80:DA:46:44:12:88:FE:C3
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/57e76e36-1b1c-47fe-89e1-17fa7a39c0a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c09::/48
Signature Algorithm: sha256WithRSAEncryption
4f:5d:20:4b:ec:ba:6e:fa:7e:17:a6:f7:2a:bc:19:f1:f8:c5:
dc:18:57:17:8d:78:81:03:7f:3a:2e:25:6c:85:19:9a:92:0b:
2f:3a:ec:fc:fa:de:b7:f2:ca:71:ea:85:b7:ea:20:3e:d5:1e:
7f:e8:fe:48:07:02:32:a1:45:11:49:8e:ca:c6:ee:32:90:b4:
d8:fa:0b:ee:e5:98:93:b3:b8:15:1a:9a:9e:ab:91:d2:42:8c:
44:34:13:2d:1e:f2:5e:04:b6:23:e7:76:02:cd:87:cd:47:73:
a7:13:0a:cc:32:ab:30:80:b5:b5:16:6d:3a:34:10:0a:ab:02:
e3:7f:32:fc:49:9a:77:67:7a:9b:33:64:43:97:d0:ed:d9:fc:
8a:72:3c:ee:73:c0:34:2c:0a:c5:9e:65:5c:b2:95:08:7f:96:
7f:b4:85:fb:57:25:2d:d7:af:81:68:8e:70:1e:91:0f:7e:00:
70:29:0f:6a:b0:b1:65:49:0e:d0:7d:5f:81:6a:d6:70:af:58:
6b:cc:8b:80:f4:de:b1:7d:88:a1:dc:9f:39:65:65:6c:b4:93:
18:7d:71:50:59:00:36:af:c1:ed:4e:a0:fa:dd:b5:02:0c:7d:
65:69:43:5e:b5:41:85:06:69:3c:a5:85:ce:ef:d8:ed:28:5c:
38:96:37:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 11 17:42:19 2026 by rpki-client