
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa
File: 22382750-431d-4ab9-aa08-e0f973e067f8.roa (raw, json)
Hash identifier: eYV1gqykOU/vFlFo/m3qvlhsJuxq25RG+vMPahmvJ/0=
Subject key identifier: F6:B8:19:A3:82:8C:0C:77:0C:32:E4:95:83:C4:A7:58:45:0F:C3:A6
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4C87EBF63649772FCFA1066F521D1C2C6BADB53B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa
Signing time: Sat 28 Feb 2026 04:50:32 +0000
ROA not before: Sat 28 Feb 2026 04:50:32 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f00c::/39 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:87:eb:f6:36:49:77:2f:cf:a1:06:6f:52:1d:1c:2c:6b:ad:b5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 28 04:50:32 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=f951a98be384609162c33f82e69dc42dc1d16b5cb49a408af92e5f2a6131d436, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:09:8f:2e:70:dc:10:91:d9:09:97:cf:3a:c8:
a1:be:c1:bb:1b:fc:40:68:5c:e8:c4:08:c0:ce:86:
dd:b0:f4:3a:7a:81:db:05:6a:3a:c2:ad:d6:cd:ee:
22:8e:d5:68:ea:f0:13:a3:55:96:46:7e:10:9c:e4:
4a:58:61:88:52:e4:bc:9f:e1:d2:c0:2d:df:0f:79:
f7:6a:54:8b:4c:13:e3:be:dd:ce:ba:85:18:42:a2:
8b:83:fe:36:59:0c:01:7f:f4:96:93:15:ca:6d:73:
b3:35:74:fc:8b:c5:f6:8d:27:49:51:5c:61:c9:64:
85:66:f3:a6:d6:82:ae:a9:58:f8:d5:89:26:c8:46:
0f:4b:d1:c5:9c:29:d7:8e:85:d0:e3:ac:7d:d1:34:
35:a7:f0:55:25:ff:8a:d3:70:66:a0:cf:d5:ed:9d:
8a:88:6f:a6:1a:88:1c:97:51:e0:67:50:fa:d8:0c:
c6:a5:28:06:3c:56:4a:20:6d:06:e4:e6:8a:0c:01:
8b:13:71:9a:91:da:06:1c:4b:b0:4d:ec:22:c6:86:
4d:4d:37:85:57:31:dc:7e:28:fb:33:64:b3:3b:91:
12:66:68:cc:cc:8a:04:60:20:b3:e7:f6:85:e6:72:
53:c3:54:de:24:3c:42:b6:c4:00:a3:96:de:be:d1:
ba:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B8:19:A3:82:8C:0C:77:0C:32:E4:95:83:C4:A7:58:45:0F:C3:A6
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/22382750-431d-4ab9-aa08-e0f973e067f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f00c::/39
Signature Algorithm: sha256WithRSAEncryption
86:06:22:b9:8e:40:e6:00:8c:2a:0f:2b:00:77:2c:e3:38:d0:
70:95:8f:12:f5:20:6e:c8:79:bf:63:a6:6a:98:cd:32:02:d2:
d8:0f:f9:0a:f5:05:9e:93:ca:da:70:e5:b3:0e:5c:7b:c1:90:
42:54:91:46:da:e8:53:c9:7c:5f:78:02:29:77:cb:0c:22:ce:
5f:1a:70:b9:7e:00:18:8d:81:e6:f7:a6:e9:c5:33:dc:3d:6d:
b6:6a:c6:fc:68:af:53:4f:91:eb:d0:32:ae:be:20:c0:63:11:
f5:e5:a5:03:12:c6:d2:32:43:76:a8:dd:70:0e:e7:52:10:68:
a1:cf:1d:8b:8d:99:34:fd:d8:94:7f:f6:da:4e:7e:3b:b9:c5:
a4:bb:0f:e3:81:b5:fe:f6:ea:ce:5d:ce:d6:43:93:78:59:a6:
1d:b7:bd:54:22:fc:0d:83:6c:98:c6:da:b2:6e:8b:2e:0b:b9:
d3:70:39:3c:ae:b0:12:1a:95:82:19:2d:ea:0e:b5:1e:e1:34:
6e:c7:2d:61:c5:be:89:d5:47:c3:90:61:5d:67:01:00:c7:aa:
b9:98:61:87:3a:6c:0d:8f:4f:2d:f3:ab:51:c3:ad:ff:43:e2:
48:64:14:ec:5f:72:f6:05:08:82:5a:9d:18:d9:b5:da:09:24:
e3:eb:dc:87
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:43:03 2026 by rpki-client