
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa
File: 5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa (raw, json)
Hash identifier: HsjfCvX26W1FhC65B3Yo+bHIP3OR5O/3o/xm9N8pBJA=
Subject key identifier: 86:C0:4F:4F:AC:D3:F8:A0:4B:F7:D1:C6:95:85:72:BE:CD:FA:71:B8
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 708A0355806B4D7235A0F285C41380DA10C7420D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa
Signing time: Sat 28 Feb 2026 04:50:38 +0000
ROA not before: Sat 28 Feb 2026 04:50:38 +0000
ROA not after: Fri 29 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:8a:03:55:80:6b:4d:72:35:a0:f2:85:c4:13:80:da:10:c7:42:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 28 04:50:38 2026 GMT
Not After : May 29 23:59:59 2026 GMT
Subject: serialNumber=804db1829911624cedbe3e6444bcbdee74e5ed1ccf222f4aeb0385c4ad3a66fa, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:70:64:12:c9:93:1a:09:e6:c0:1b:d8:54:
5a:41:2c:90:c9:2d:cc:f4:ec:4f:c4:72:65:22:6a:
aa:d4:0c:10:51:5d:ce:99:f3:01:04:d1:9d:13:61:
4f:dc:38:99:dc:45:31:23:dd:b6:22:a7:84:d4:a1:
48:d6:0b:6f:d3:af:37:48:f0:69:0c:06:f2:5a:b0:
37:ab:b5:b7:0f:d2:43:e8:0f:28:68:17:a9:18:ac:
99:e7:45:e3:c9:b5:50:b0:c0:e4:f5:92:3a:05:21:
a2:e2:d5:44:c5:c7:69:f5:6d:3c:c8:09:69:39:81:
96:64:6a:2f:22:31:48:6e:b7:b2:e9:73:dd:5d:f0:
27:b3:3a:3a:20:84:27:26:c9:5f:10:c4:f8:65:6c:
70:ad:f9:f5:d0:62:0c:f5:b4:ba:17:84:a2:80:50:
a4:39:24:81:d5:b9:00:ec:1e:49:49:65:ea:ae:41:
e5:3c:f7:37:69:a8:bc:20:cf:5d:ae:5a:ee:b7:ff:
67:04:42:3e:42:d3:aa:89:25:51:3c:e3:2b:bb:09:
e1:8d:66:44:66:30:53:38:1f:2e:ab:aa:f8:ee:5d:
a4:d6:c1:74:d0:46:d3:87:f3:22:ea:14:98:ca:32:
c8:70:a8:46:4a:29:81:fa:4e:b0:55:c5:59:e9:8a:
e9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C0:4F:4F:AC:D3:F8:A0:4B:F7:D1:C6:95:85:72:BE:CD:FA:71:B8
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/5211bbfa-c26c-44f8-96b2-a9282cfd61a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e100::/40
Signature Algorithm: sha256WithRSAEncryption
2a:cc:75:18:2f:39:b3:68:4a:04:d2:ce:ec:b0:e8:0a:4c:72:
3d:12:02:7a:36:6c:c5:34:cb:ec:e0:9b:08:65:8d:96:df:6c:
05:94:0a:68:0d:94:e0:dc:bb:fc:cc:f1:83:76:db:3a:01:41:
e3:26:41:7f:54:51:29:6c:24:4d:e0:8d:84:44:26:ea:ff:0c:
8f:6a:35:fd:d1:2e:5a:86:ab:5a:c8:b9:37:b2:0f:bc:63:bf:
e2:9b:2f:07:a0:8a:6d:b3:40:50:3f:c6:5f:34:43:f2:aa:c3:
05:81:95:9b:81:1d:fd:71:af:4b:f4:bc:49:b2:70:c4:bf:35:
03:a5:2c:f0:d6:5a:00:76:c6:99:e6:56:3c:64:ec:36:38:cf:
e8:90:79:68:48:38:8f:c7:31:d2:c5:b4:c3:e1:d9:a3:70:f8:
3d:cf:1a:a6:08:88:e4:f2:8d:6d:1d:fc:7c:e6:db:ec:3a:15:
d2:9f:78:05:79:cd:0e:03:6b:2f:7f:36:1d:0e:5b:08:1c:b3:
9f:40:78:0f:01:77:8c:5f:6c:71:a4:69:6d:15:6c:c3:7c:68:
2b:8f:d2:38:3d:e1:05:7e:bd:2b:db:66:94:d9:48:6d:05:be:
9d:77:9d:76:d6:b6:2a:20:c2:a5:31:77:e1:53:d0:9e:04:17:
b1:77:59:ef
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:03:09 2026 by rpki-client