
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cbd04ae6-dd9e-46f5-8c4e-69a7b42d898f.roa
File: cbd04ae6-dd9e-46f5-8c4e-69a7b42d898f.roa (raw, json)
Hash identifier: nEnIqkM8re4kDbienKWvqTeQwqWlLsC2ndBb0gIi6Ng=
Subject key identifier: B9:01:5A:25:BF:E4:98:1B:2F:CF:ED:E3:13:1A:1B:33:63:FD:21:A9
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 13BEA5E4C2E4E6CEEF99BB83443BEE46433BAEC7
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cbd04ae6-dd9e-46f5-8c4e-69a7b42d898f.roa
Signing time: Fri 15 May 2026 00:20:09 +0000
ROA not before: Fri 15 May 2026 00:20:09 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:db0::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 13 Jun 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:be:a5:e4:c2:e4:e6:ce:ef:99:bb:83:44:3b:ee:46:43:3b:ae:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 15 00:20:09 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=cec90e7c5e4a0b972bfd57ff0282b570b630d19668810869a7aebd3ffa5f3d58, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f4:22:d4:a3:18:89:f0:51:58:ff:77:56:41:
f6:99:2b:4e:cd:3c:08:c9:35:d0:82:d3:7b:19:e7:
e4:51:18:b0:55:e4:47:0e:8f:59:f6:1e:26:85:fa:
5b:a1:1b:c4:9e:34:28:80:a5:e1:e6:98:70:5a:3d:
bb:90:f6:6d:94:0f:da:d1:59:65:a5:88:c1:23:ea:
11:14:35:13:e9:df:5e:d2:7b:07:0b:a5:c7:5e:c7:
bb:58:8d:a1:19:65:af:25:37:42:3e:32:a6:74:73:
d8:0b:92:e8:4a:d8:4e:74:33:96:0b:eb:14:23:b1:
76:12:da:c1:a4:16:8e:05:86:3c:82:99:f4:78:b7:
58:bc:2b:ba:42:6b:31:fd:0e:7d:c2:83:66:b7:f1:
65:60:35:86:3b:26:c2:de:d1:31:68:7d:cf:6f:66:
bc:c0:0d:da:c5:32:28:f8:80:a6:2e:c2:d4:32:79:
9c:be:9d:06:72:1a:63:4c:31:ee:aa:a1:b7:97:f2:
99:78:d0:b2:76:d0:b3:00:f6:ff:5b:38:05:b0:48:
23:41:bb:66:f3:9b:b3:89:24:49:fb:22:57:23:ea:
31:29:bb:2b:1b:fc:a4:97:d9:e0:1b:4c:6a:48:59:
65:7e:d4:67:13:0d:a5:76:8b:a6:00:89:91:42:cf:
33:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:01:5A:25:BF:E4:98:1B:2F:CF:ED:E3:13:1A:1B:33:63:FD:21:A9
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/cbd04ae6-dd9e-46f5-8c4e-69a7b42d898f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:db0::/45
Signature Algorithm: sha256WithRSAEncryption
a5:ca:38:3c:b9:3e:5b:7b:cd:12:55:45:41:82:5a:21:be:81:
21:9d:a8:4f:48:02:4b:0f:c0:4c:20:7f:08:cf:d9:85:f5:10:
9a:40:51:a0:dc:6d:ea:d4:62:8d:22:87:fe:15:61:65:c0:e4:
52:5e:4a:63:64:61:d1:9d:47:22:26:4a:91:0b:12:a9:d9:df:
8c:02:f1:e7:de:d1:34:4d:2e:97:66:7a:da:8a:40:b1:98:ee:
b3:99:36:83:2f:1d:52:c9:85:6c:b0:59:e8:78:b1:15:3c:8c:
8b:35:90:ea:38:af:50:89:ae:bc:93:ea:14:a3:92:6a:c5:13:
da:98:42:32:b2:f0:df:33:6a:c3:3a:f7:91:7f:9b:68:25:c8:
68:76:71:28:65:ea:ba:12:b6:b6:5a:66:64:a7:08:ac:49:82:
64:a7:40:e1:14:93:bf:69:fc:ae:cc:2e:f4:db:19:61:5a:dd:
fb:9b:6f:a6:e7:78:3d:0b:b6:c8:53:fc:54:7f:9a:23:bd:b6:
39:1f:c8:c3:c9:5c:25:17:19:77:0e:27:80:f0:0b:60:b5:2e:
b3:2d:1b:b0:92:8d:8a:18:7c:bc:25:d1:ff:73:7e:47:f7:78:
d8:3b:c3:ec:26:47:02:95:f6:6d:cf:89:20:57:e2:28:b1:40:
78:fa:58:e1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:33:43 2026 by rpki-client