
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa
File: 8a5ff071-2589-4b8f-bab2-ab661880d472.roa (raw, json)
Hash identifier: 37rcvbUxP+hLoZtzONvxeLYYjR1f1DIRE3kJTVRn0/8=
Subject key identifier: FC:81:7F:5D:2D:61:3B:56:90:6C:4F:E8:B8:2C:DE:C5:67:FF:A1:95
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 48C30AB842B0AC92F1B79F1CA361F1D01A1835C8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa
Signing time: Sun 02 Aug 2026 01:40:09 +0000
ROA not before: Sun 02 Aug 2026 01:40:09 +0000
ROA not after: Sat 31 Oct 2026 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:3c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c3:0a:b8:42:b0:ac:92:f1:b7:9f:1c:a3:61:f1:d0:1a:18:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Aug 2 01:40:09 2026 GMT
Not After : Oct 31 23:59:59 2026 GMT
Subject: serialNumber=238c8832477c5205e597f06015155525aae4365b6f621c921f8656d943bd8c93, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3f:18:2f:7c:4f:8d:20:c6:6c:67:7e:d3:df:
1e:35:d9:4b:39:74:ee:5d:42:07:cd:1b:80:f0:e3:
a3:dc:db:b4:c2:27:4d:30:19:f2:fd:0f:3f:11:fc:
07:54:6a:bd:ba:5a:8f:aa:fb:cc:0c:1b:70:0f:e9:
bf:72:17:82:01:ff:59:af:b7:71:3f:f4:f3:45:12:
62:5a:a0:0c:e4:78:86:60:b2:22:2d:31:f3:b6:16:
28:12:d2:90:71:78:7c:f3:b3:8c:f3:f9:28:46:6a:
b6:12:3a:7a:32:e0:44:01:58:1e:c3:f2:c5:78:cf:
31:b9:d0:a6:7d:38:2d:4a:a5:bb:f9:d2:0b:a4:76:
19:62:9f:4e:ab:2f:66:66:35:4e:2e:d9:88:e2:08:
46:92:a4:8c:34:15:00:5e:54:06:be:58:43:d4:f0:
4f:60:c1:82:b9:5c:dd:7c:07:a3:0c:7d:a0:5b:78:
a9:b4:f0:dd:db:51:b0:1f:9a:83:f8:e7:8b:c4:84:
2f:a8:3c:cd:66:89:05:4c:02:17:22:8a:90:ff:f0:
d6:d5:6c:2c:01:1d:70:8e:db:06:26:06:dc:a4:dd:
83:2f:36:72:0d:58:ec:fe:d5:a0:b6:3e:e5:b4:9a:
09:c5:26:d3:5c:17:72:0a:0e:d3:60:7e:7b:4d:39:
ed:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:81:7F:5D:2D:61:3B:56:90:6C:4F:E8:B8:2C:DE:C5:67:FF:A1:95
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/8a5ff071-2589-4b8f-bab2-ab661880d472.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:3c2::/48
Signature Algorithm: sha256WithRSAEncryption
3a:18:a7:1a:ac:2f:3f:6c:3d:df:01:e5:33:8b:05:20:78:60:
55:c5:ff:1e:a8:34:20:8a:e4:68:ef:e4:1a:d9:43:7c:a8:83:
6d:bf:b4:e5:ec:dc:60:4f:1f:e8:d5:db:8c:55:a0:f5:ac:4c:
a2:e5:b5:c5:d1:3a:91:b9:52:a0:ff:78:e7:9d:20:0d:c4:89:
38:1a:51:00:a0:c0:ab:54:d4:b7:6e:c6:a3:a7:d9:af:1e:12:
34:02:de:dd:3e:ff:99:d2:1d:7c:39:31:62:85:f3:06:90:44:
ea:d2:61:64:e4:3b:f4:e8:f1:33:20:68:4d:32:97:80:5c:00:
3a:de:a5:1c:95:77:ae:39:dc:09:0e:1e:ef:2d:01:05:3f:99:
d9:e8:97:6d:e7:76:dd:16:a5:5e:5b:02:e8:04:83:c8:6a:ba:
8f:d9:e7:23:2e:50:af:99:b1:d5:4e:96:eb:31:b4:df:19:bc:
c4:4e:33:8d:e5:ef:d9:3a:dd:fc:e0:af:0a:04:01:94:fc:fa:
05:29:6f:80:3a:96:79:ee:8d:a7:2d:f6:66:7f:3d:14:6a:c1:
aa:8d:0f:a4:19:46:b0:8c:61:ec:ab:8e:e4:2c:b9:52:0a:75:
43:f4:63:c2:86:45:7a:82:5a:24:b8:1d:ef:0c:58:b1:93:5b:
b0:89:5d:6b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 3 09:15:10 2026 by rpki-client