
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa
File: bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa (raw, json)
Hash identifier: 6dP9OipE/ZamTe66AW61vqBWZ56Qvz0qxNF/E2FzUKk=
Subject key identifier: BE:8D:EA:8D:AB:09:B3:C9:AE:68:08:E9:6E:51:10:6B:3B:BA:E3:0C
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 03167475382A41880577897458D247392CDA1FBA
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa
Signing time: Sun 04 Oct 2026 00:30:14 +0000
ROA not before: Sun 04 Oct 2026 00:30:14 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 21664
IP address blocks: 2605:9cc0:3b3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:16:74:75:38:2a:41:88:05:77:89:74:58:d2:47:39:2c:da:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 4 00:30:14 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=0ef28a099d6a224b4a8f80263a0329248a3c36f2b323352775aef00d72f784c6, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:1d:06:17:ba:8b:8b:f8:cf:45:b4:75:72:
cb:95:a9:09:f9:e1:6a:83:01:b8:88:14:9c:17:82:
26:d7:ea:a5:52:eb:4b:97:90:67:f9:2e:7e:8d:82:
b3:51:68:8d:42:80:e4:bb:a7:17:71:18:89:8d:23:
cf:28:f8:60:f6:c3:23:2d:51:9d:2a:03:fe:38:85:
b6:70:f8:63:82:8a:21:de:80:91:e5:28:40:6c:9d:
6b:38:20:df:e6:56:c7:f6:55:a7:6a:26:f9:5e:9e:
b0:ac:47:6c:ad:af:ea:a7:88:8f:d8:12:1c:cf:82:
74:95:82:16:7f:44:6a:38:ba:43:47:91:35:61:0d:
38:fe:51:7d:1a:ff:73:d5:02:a4:0e:49:8e:ba:26:
75:be:60:12:c6:7a:fa:49:31:d6:1b:d9:e4:47:19:
dc:14:d4:7e:f0:00:18:ef:e3:b5:29:de:3b:d9:1a:
e2:8e:66:23:aa:b8:d3:54:34:8f:14:8f:01:98:5e:
30:5b:61:cc:0d:61:85:17:1e:a1:10:81:11:32:79:
87:85:eb:42:25:9a:60:97:03:6c:cf:82:c9:4f:99:
97:ad:e6:1a:90:4c:0d:1c:7f:ba:6e:ff:2e:56:d0:
0f:38:2d:1a:c1:8f:24:33:ca:e7:83:dc:76:f0:3d:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8D:EA:8D:AB:09:B3:C9:AE:68:08:E9:6E:51:10:6B:3B:BA:E3:0C
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/bf76eee1-81c6-4018-9264-f7eddc9e8c2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:3b3::/48
Signature Algorithm: sha256WithRSAEncryption
4f:c9:cb:fc:a3:77:50:88:31:c4:66:df:1a:2f:02:0a:66:bf:
bb:6e:a1:87:c8:1c:a3:33:5e:5b:6d:43:67:d4:ce:23:f6:09:
64:47:ad:a2:7e:19:a5:d6:15:55:2f:2f:2c:a2:5b:e5:2f:a4:
e3:f3:91:ac:c7:26:7d:d6:bf:ab:8d:99:0b:d5:ca:96:11:27:
68:55:f4:8f:91:32:55:1b:fe:04:9c:99:47:69:ed:f9:7f:88:
30:21:10:3f:64:60:10:d2:06:b9:5e:53:cf:50:df:c3:f6:47:
e4:2e:71:42:52:0d:04:ab:78:76:b1:39:90:74:96:dd:99:ad:
f3:31:64:ac:1b:d6:d6:4d:cd:76:86:04:80:1f:eb:cf:60:cb:
1d:ad:2e:8b:6d:d4:38:a2:e8:d9:52:e7:a6:eb:4f:10:b3:63:
a1:e1:fa:ef:bf:a5:db:f1:85:77:ac:58:20:d8:d9:0d:cd:47:
3b:05:3a:83:45:4c:13:57:7e:d8:1a:5a:f2:4c:d8:54:26:f4:
83:62:1d:ed:35:ea:bd:f7:e4:fd:f4:9b:aa:10:85:b8:19:7f:
79:e5:b1:39:39:bb:47:a9:71:4a:c1:bf:b1:79:15:cf:b3:97:
27:06:eb:39:64:cd:51:7f:2d:b0:b1:9a:f1:b6:1d:93:dd:e4:
be:4a:2c:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 00:43:52 2026 by rpki-client