
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb5eae66-d169-4b29-bb6e-d1ad81cfc947.roa
File: bb5eae66-d169-4b29-bb6e-d1ad81cfc947.roa (raw, json)
Hash identifier: 7CZDqfhoyjOhci2jTi/FDe6OsjYCXRBLbOoQbTTM+7Q=
Subject key identifier: 82:7F:62:7B:BD:6B:13:EB:95:42:75:EA:6C:D2:F1:E0:35:8D:91:73
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 502C7CF3DF0B1C0DCA10585300131B093BFB5E2C
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb5eae66-d169-4b29-bb6e-d1ad81cfc947.roa
Signing time: Tue 19 May 2026 01:20:08 +0000
ROA not before: Tue 19 May 2026 01:20:08 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 136.132.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 31 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:2c:7c:f3:df:0b:1c:0d:ca:10:58:53:00:13:1b:09:3b:fb:5e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: May 19 01:20:08 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=2b470ec52f86b20cc7d579169ef621271fbc2e8691ffabdd0c4fdf6be5ebd391, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:a1:6c:3b:ee:7c:90:c5:3e:8e:36:62:01:
c0:54:94:dc:d8:fa:17:a4:cd:2d:c5:f1:b9:f0:57:
a3:c3:bf:46:a0:4b:e4:3b:22:f3:fb:4d:3b:c8:f0:
be:db:59:ba:b8:1e:25:61:98:41:0e:e1:87:4e:6d:
8f:30:7e:ef:6a:94:07:ed:f7:74:3a:64:5a:ac:fa:
61:df:62:0f:f5:5c:c0:35:bd:58:03:e1:93:ab:8f:
a6:43:3c:39:ec:b5:8d:cf:49:95:71:f4:ec:32:1c:
d3:e1:30:33:7b:71:05:04:3f:f7:d9:d7:29:f9:2b:
2d:fe:e9:0d:f3:9d:bd:63:f7:c4:9a:de:b9:93:08:
0a:cd:85:c0:8a:92:ee:de:0e:2d:67:ae:9e:2f:c7:
34:89:74:d6:37:b4:3d:d0:05:55:3c:c6:0f:d9:13:
7b:4b:a2:a3:dd:d0:c5:0f:59:d6:e2:d3:1a:75:27:
1d:b3:b6:62:0d:87:b2:62:27:6f:0c:7a:f7:7c:96:
26:c2:1f:f4:af:9b:70:2a:4b:4f:49:0f:89:a0:0e:
e4:e7:72:9c:15:2d:9c:3d:3b:a7:65:1e:ca:2e:87:
5f:eb:a8:6b:34:c6:68:49:89:8d:b7:ed:f9:71:61:
c6:4f:8c:d7:77:46:93:c4:e1:15:de:90:98:2a:1f:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:7F:62:7B:BD:6B:13:EB:95:42:75:EA:6C:D2:F1:E0:35:8D:91:73
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/bb5eae66-d169-4b29-bb6e-d1ad81cfc947.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
89:0c:80:5e:6d:d5:f3:4f:40:94:e8:a4:bf:9e:81:0d:63:02:
a4:fd:9d:7c:b2:dd:c7:db:ec:94:53:f6:51:9e:76:91:75:08:
af:2e:64:79:6d:af:b9:3a:ba:2b:6a:d8:1d:ee:25:2e:84:79:
72:27:22:cc:51:12:21:16:b3:62:3f:99:ae:32:08:2d:b9:41:
a6:68:ed:0e:a2:9b:1d:ee:55:44:9d:6b:62:8a:43:8a:a2:b0:
9e:be:2d:8b:14:e5:ab:0d:8b:89:f9:0e:e1:a9:14:f2:f3:af:
d5:46:ca:d9:fb:cf:5a:16:c2:6b:f4:70:3f:6b:28:d2:1f:67:
8f:e2:f7:41:fc:32:2a:ee:6e:49:af:13:b7:4f:56:ee:33:41:
25:ff:56:bd:4d:4a:8f:43:36:dc:45:58:5d:00:2e:f5:8e:9a:
ef:b3:30:3a:a4:11:a0:c5:c7:aa:ac:aa:e5:e5:16:f1:ed:41:
97:d2:90:34:c9:f1:63:b9:f7:5e:d6:92:fc:aa:bc:a7:45:ad:
68:78:0a:ab:0d:33:78:b9:82:bb:78:d9:68:e9:1b:19:63:6d:
41:31:a3:32:2e:0b:94:4c:55:0a:a3:85:89:b6:94:cc:43:7d:
e3:d2:57:e5:b0:74:b3:50:4a:2e:8b:2c:4b:41:7a:47:6f:1c:
93:14:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 01:59:14 2026 by rpki-client