
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa
File: ef61cc60-17a6-4a87-9035-322b2907a5e5.roa (raw, json)
Hash identifier: ns+fMLbWqg3EH9gzx68ZApjl1zyTIh2HGoUQYHFMHNg=
Subject key identifier: 4D:24:21:D1:E8:E0:CE:C6:E8:D4:E3:43:AD:E3:47:7E:54:B4:36:BE
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 051A5A4D4DF588F12EAF02C1809727DD04A75087
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa
Signing time: Thu 15 Oct 2026 03:07:37 +0000
ROA not before: Thu 15 Oct 2026 03:07:37 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:1a:5a:4d:4d:f5:88:f1:2e:af:02:c1:80:97:27:dd:04:a7:50:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 15 03:07:37 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=f574842d1e181149d63941f020e435aaae294a587b86b481972c1da5c05c8de9, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2e:b7:a0:7f:9b:f6:02:76:99:60:a2:d1:9a:
d6:e5:3c:43:b9:0e:2c:8a:61:d1:77:21:7c:ed:ef:
d2:51:7e:07:48:e5:16:01:ac:ec:70:70:e7:63:90:
73:6b:32:7d:6f:83:77:ba:d9:89:db:88:a9:3c:7b:
50:d5:ed:c6:70:15:fd:04:f1:61:5b:d5:7e:76:f6:
62:35:a7:16:8b:e6:8c:bd:8b:f5:35:5b:c4:ac:8c:
06:fc:0a:70:ec:c3:da:ae:85:54:dc:51:74:60:ab:
4c:d6:c9:82:b8:80:3f:c5:5f:35:71:fe:b3:92:a3:
8a:4f:35:26:88:22:92:e3:34:9d:07:90:da:07:38:
44:97:13:e9:36:5f:cd:86:6d:8e:ab:03:12:e2:c0:
da:6b:16:72:6d:ec:2e:bd:f5:37:1b:3a:24:22:60:
2b:84:09:e1:41:13:ea:19:8b:7a:79:1a:fb:89:89:
f0:d9:24:10:e0:a6:19:3c:86:3c:4c:0e:be:0c:21:
04:fc:26:2b:6e:c6:c5:31:61:b5:38:41:1f:f3:f0:
a9:68:38:14:2f:26:4b:62:b9:2a:b7:21:6b:40:d2:
4e:c6:63:8e:ea:40:5e:51:2f:66:d4:f3:2b:65:90:
a2:61:03:51:79:e8:1b:aa:76:c1:8c:60:de:41:85:
e5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:24:21:D1:E8:E0:CE:C6:E8:D4:E3:43:AD:E3:47:7E:54:B4:36:BE
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/ef61cc60-17a6-4a87-9035-322b2907a5e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c1c::/48
Signature Algorithm: sha256WithRSAEncryption
ac:73:c0:d7:8a:f2:01:06:83:1e:cc:15:3c:3f:54:97:1b:2b:
73:d1:c9:cd:fe:27:a4:21:78:7b:66:21:cc:3a:af:0a:bd:15:
33:eb:a5:88:1a:a3:da:fb:f9:07:e0:06:dd:ab:47:f2:c0:ce:
77:45:a2:d5:b9:97:9a:39:a8:48:13:56:ef:d4:a3:75:e8:4e:
a0:f8:59:62:aa:06:d0:0f:08:9c:f5:4d:e7:6c:22:78:17:f9:
a6:d5:63:0e:83:42:d8:63:c9:23:50:30:e5:06:d9:76:3b:09:
f5:2b:42:c9:36:0b:94:cc:e1:a8:ce:25:f0:c8:f5:fb:53:79:
7b:1c:c8:8b:2a:a7:6c:84:08:60:db:75:b4:90:04:a3:0d:96:
72:61:b2:e5:ab:9f:21:0a:f3:49:12:60:e5:48:6a:b5:c0:43:
7e:22:87:52:8d:3f:56:53:81:45:4b:47:30:5b:20:c5:47:5a:
d0:bb:0f:cf:ec:28:39:82:11:3a:88:64:40:58:95:59:4e:4e:
51:fa:c5:1a:37:17:fc:cd:4a:d3:01:4e:49:3e:a9:3a:1e:8a:
98:39:6a:ce:00:ad:cf:a9:eb:91:de:f2:16:03:49:76:24:57:
62:e6:6c:33:38:de:10:11:98:a3:c8:ee:84:33:2f:dc:aa:53:
9b:31:b6:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 01:28:50 2026 by rpki-client