
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa
File: 321028ee-2e2d-410c-8bdc-39a00f2044f0.roa (raw, json)
Hash identifier: BQwYZjmKB45W4sbAoKZOseDu/DR3D7Uxhlwx/F/XATU=
Subject key identifier: C2:4D:3D:BF:AE:FE:C8:11:FB:89:F5:8D:AC:BD:4C:69:D3:33:A6:CB
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4FB6360F08DAD661D07161F69BF2BC1700FE5A59
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa
Signing time: Tue 19 May 2026 04:20:03 +0000
ROA not before: Tue 19 May 2026 04:20:03 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:500::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b6:36:0f:08:da:d6:61:d0:71:61:f6:9b:f2:bc:17:00:fe:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 19 04:20:03 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=f034bb969563058f80de8e84aa4492381e3a386ddcd3b8325e1a096d2fd04c40, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:73:99:cb:44:fa:55:e5:50:37:80:5e:42:63:
94:f1:6e:24:10:bb:80:68:e5:fe:ea:bb:7b:42:c8:
9a:08:6b:dc:bd:33:0d:51:cd:b6:9b:74:b4:3d:e2:
e7:70:d0:c9:ba:90:4a:9d:e9:fc:46:db:72:02:35:
0a:0c:5d:6c:2a:30:3d:af:50:df:dd:3e:1a:d5:75:
e6:53:f3:e5:be:b6:55:3c:5c:4a:e4:f0:80:ba:aa:
99:2b:e3:48:c6:51:18:49:23:db:51:ce:78:7e:d8:
65:0b:4e:a6:19:1e:ed:ed:f7:00:2e:75:28:95:b8:
e7:4a:52:36:f5:67:80:0b:c7:18:46:5b:96:e7:c5:
76:8a:07:c5:d1:8c:78:7c:22:75:2b:c5:74:4e:66:
a6:0b:cb:68:c4:01:36:b5:7b:5b:70:1a:d1:90:ff:
1f:ab:cc:82:e7:2c:8f:f9:81:ae:01:94:1e:2d:ec:
a8:a2:60:52:8c:ba:9c:3d:8b:cd:21:19:8a:61:29:
d1:c9:ef:26:6a:c1:23:11:d6:4e:d2:47:c0:9c:a2:
99:25:e2:11:f7:2c:a1:8c:b8:88:f8:de:11:1f:f3:
77:f2:56:8f:42:ab:55:c1:34:4c:0b:ac:f3:da:e8:
c6:6a:0b:92:8c:26:a7:18:35:42:58:d3:4a:04:4f:
d3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4D:3D:BF:AE:FE:C8:11:FB:89:F5:8D:AC:BD:4C:69:D3:33:A6:CB
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/321028ee-2e2d-410c-8bdc-39a00f2044f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:500::/48
Signature Algorithm: sha256WithRSAEncryption
65:d1:00:fb:9b:9f:ef:c3:d7:ee:32:88:60:96:8a:f4:66:52:
98:d8:b2:c5:79:2e:e5:57:36:f3:85:d8:f1:b5:b6:3a:99:d8:
fd:4b:34:d1:dc:88:bf:28:37:b4:fe:a9:31:65:a9:8e:34:56:
b8:ff:0e:16:6a:e8:9e:78:30:12:72:94:08:f2:8c:f3:50:7d:
40:0a:67:55:e2:91:84:dc:13:2e:33:27:52:7a:42:82:27:64:
3a:6a:44:09:d6:1e:1a:8c:e5:c0:65:4a:23:f1:26:7d:2e:e9:
2a:20:1c:c7:25:9b:4c:17:c0:f1:c4:28:0c:ba:5d:db:9f:4f:
9c:df:38:70:41:fb:5b:b0:52:ee:e5:08:01:64:8b:74:80:af:
3c:21:69:04:e4:5c:fa:2a:4a:90:ce:98:1e:a4:c7:63:d8:74:
5b:5c:dd:c3:f6:7c:ee:e7:98:77:fb:5d:cd:3c:37:c4:ac:88:
57:92:c0:c1:5a:13:25:bc:36:f6:bc:ec:04:a5:b1:66:bf:2e:
93:0b:48:46:93:5a:ee:0a:2c:58:bb:ed:8d:d0:ea:9d:3f:e0:
8e:ea:e5:00:16:ab:64:65:f5:47:77:9a:84:b4:a3:c7:f1:a7:
dc:e9:1d:62:7b:86:af:1c:6b:62:21:af:5d:80:1c:f0:a8:0b:
41:39:92:a7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:04:07 2026 by rpki-client