
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3562da89-c8ff-4159-8f92-365721d94405.roa
File: 3562da89-c8ff-4159-8f92-365721d94405.roa (raw, json)
Hash identifier: IOf7xWW0j8BVOkZyCMtt2eY+jwBz2pTdiRDKqr9+Nw0=
Subject key identifier: 86:F2:50:D9:D2:6A:55:03:89:40:2A:3B:08:A8:63:8D:E8:4D:77:3A
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 4D9E1EB3A38AD0B007C86580917B7B7A9A9A7075
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3562da89-c8ff-4159-8f92-365721d94405.roa
Signing time: Fri 13 Feb 2026 15:00:14 +0000
ROA not before: Fri 13 Feb 2026 15:00:14 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:f030::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:9e:1e:b3:a3:8a:d0:b0:07:c8:65:80:91:7b:7b:7a:9a:9a:70:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 13 15:00:14 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=ea0ea52e2cbebdfd31000d6e7b5fd789115287d2dcbeb160f8a882d018c9a883, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ca:91:68:5a:cf:75:cf:fe:86:73:8a:6c:68:
a6:fd:67:bf:89:95:b6:78:00:3a:ed:81:bd:db:b3:
5a:ea:00:7b:28:da:21:62:ab:6a:b1:bd:55:82:14:
eb:e6:2d:fa:35:93:db:1e:cd:12:c2:29:ba:e4:b4:
c1:b7:f6:11:88:5e:6e:00:22:0d:3b:97:13:9d:20:
ef:88:46:ad:df:27:0d:92:c0:64:75:f9:b9:50:b8:
bd:6a:c8:8e:60:c1:50:e2:10:c4:84:c0:15:88:25:
de:6c:a5:b6:0e:1c:e4:6f:66:11:d7:68:2b:39:6f:
4e:b4:6a:e3:cb:da:1c:b9:51:2e:29:b0:ad:51:69:
46:0d:db:6a:b7:94:31:de:ef:0e:eb:ee:0d:7f:2b:
ca:7d:f2:74:7d:d5:aa:c9:02:aa:0b:13:ad:c1:e5:
b9:72:f0:bc:64:a8:c9:3b:7a:86:7b:95:ce:18:d2:
17:30:f2:ab:c0:e5:88:a6:27:8b:83:8c:74:cb:5d:
b1:04:8a:27:33:00:bc:6c:e5:fb:76:6b:2d:ca:22:
51:e3:64:5c:a6:c8:3b:94:dc:2b:52:9b:40:9c:8b:
ae:85:8e:7b:77:a5:6e:ec:02:1a:ed:7c:3b:02:64:
8c:0c:54:9c:20:45:66:a5:ff:6b:0b:aa:8a:ff:b4:
9b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F2:50:D9:D2:6A:55:03:89:40:2A:3B:08:A8:63:8D:E8:4D:77:3A
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/3562da89-c8ff-4159-8f92-365721d94405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f030::/44
Signature Algorithm: sha256WithRSAEncryption
35:9d:aa:73:de:c5:ca:4e:cb:8c:bc:3c:e1:a8:e4:a8:1e:66:
a7:98:a4:15:ba:16:ba:2c:45:8d:a6:48:94:67:2d:cd:2b:71:
20:1c:a3:1f:dd:6c:51:c0:65:70:47:06:ab:1e:9b:b6:07:b5:
26:42:12:19:2d:2f:cd:41:e5:81:f3:38:dd:54:e1:3b:60:fb:
b2:45:fc:b5:f2:42:1f:ea:6b:b4:e0:44:45:67:de:ef:8a:d7:
e0:8f:3a:07:0d:ac:81:33:ab:c4:c0:e2:d1:08:11:d7:7d:6e:
7b:ec:41:25:10:8d:61:c4:5b:cb:27:28:38:fb:22:9a:16:22:
cd:d9:46:0c:24:47:82:a6:78:21:98:41:63:d4:ea:fa:6b:22:
9a:fb:f7:a2:27:61:3d:c8:7e:f8:72:ab:6f:80:e4:cc:fb:8b:
aa:af:4b:16:2a:81:3c:df:5c:f3:22:d8:a9:de:13:18:25:50:
c9:ac:ab:c1:30:b8:61:10:e4:00:fd:6b:8e:a0:39:36:a9:dc:
8b:27:d7:a2:69:c6:57:90:31:bb:66:84:92:e8:11:36:e8:9e:
75:9d:f4:bc:47:e8:81:7d:16:e0:b7:68:66:4e:e8:e7:f4:bb:
ef:08:ba:d9:ff:5a:a0:21:5e:b2:51:b9:af:68:63:a0:a3:96:
5c:40:97:e0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:37 2026 by rpki-client