
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa
File: 6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa (raw, json)
Hash identifier: g8uueNNx+hAE249p3F3yptGwmXRvlKF2LeuDLb3gRFs=
Subject key identifier: 65:2F:06:82:B0:24:4C:1D:62:92:FB:40:96:AB:E7:06:66:5B:D8:F8
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 742BABC7B72587CB494BBAA22C905688893B67E8
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa
Signing time: Wed 20 May 2026 00:40:28 +0000
ROA not before: Wed 20 May 2026 00:40:28 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:f100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2b:ab:c7:b7:25:87:cb:49:4b:ba:a2:2c:90:56:88:89:3b:67:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 20 00:40:28 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=b7a104489fb8c479b1fb5ce0e9fe3c515334899dd5a84902cfb368fb18d19374, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cc:38:b6:59:87:77:7e:f1:c3:07:29:99:aa:
a4:7c:5c:bf:84:9f:c5:54:c5:b9:40:34:41:03:80:
f8:8b:9a:1b:61:21:6f:07:d9:4a:7a:ae:5b:14:35:
26:3c:66:0f:1b:99:62:33:a9:36:1f:78:42:93:fa:
6c:5e:e7:1b:cf:f1:48:6f:f7:3e:8b:23:f8:d9:c5:
8c:ac:64:36:94:62:8c:86:ef:15:36:6d:cd:df:f7:
1f:7f:11:e2:6a:90:b6:64:88:1b:be:9c:42:e7:c5:
88:f3:de:bc:ad:f5:52:b1:db:99:69:2f:7b:76:82:
84:74:a6:f3:f7:17:49:a8:67:4d:c1:31:02:cb:76:
74:16:3a:7b:92:53:6a:50:e6:09:b3:b2:69:ac:24:
8b:af:ff:2a:ff:36:68:bb:05:55:99:f4:52:93:ec:
2f:21:6e:38:b9:77:4c:d5:94:56:01:39:e9:7b:b0:
ef:25:15:46:cf:bb:d2:e0:f9:65:af:28:19:04:b8:
62:ba:6a:58:c1:eb:48:de:cb:0d:f5:dc:5f:1c:ce:
bb:2a:c0:04:1b:8a:b6:b2:2f:fb:e6:b7:e8:1c:ee:
a4:00:aa:b5:93:fe:90:0f:d2:94:91:8a:88:a2:69:
eb:07:47:ea:7a:54:42:00:f6:fb:35:ea:37:75:fe:
88:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2F:06:82:B0:24:4C:1D:62:92:FB:40:96:AB:E7:06:66:5B:D8:F8
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6dad848c-ecf6-40e2-85b0-014a60dd96e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:f100::/48
Signature Algorithm: sha256WithRSAEncryption
31:43:21:99:56:65:0e:6c:49:af:0e:a7:ae:d7:f7:a1:03:c3:
79:0d:18:a5:e1:d4:69:af:20:21:98:c5:4c:68:14:4d:9a:b9:
d9:27:8e:bb:4f:d9:51:4a:8e:c6:22:43:22:a5:4c:83:85:e8:
7e:fc:90:18:4a:b1:4a:12:be:08:a2:41:5f:52:92:64:a5:fe:
5f:86:95:59:82:6c:0b:c7:94:f6:9c:d3:d9:09:62:20:fb:41:
1b:2c:f8:ad:13:83:d1:17:51:d5:fd:0f:e7:92:6d:eb:53:53:
88:5b:ef:0f:3c:1a:c3:a3:7b:75:2e:02:48:dc:a5:d0:0d:e8:
09:20:a9:f3:8f:7f:a6:39:b9:f3:f5:6c:ca:a0:ad:c1:82:db:
37:e7:e2:b7:f0:f3:e4:da:10:d2:ef:2e:f3:2b:8e:4f:cd:a0:
f1:3c:0e:30:ee:35:e8:00:fb:2c:a2:ea:f7:88:17:83:05:87:
d2:4a:e3:3d:38:00:e8:ed:07:fe:74:ad:05:5c:8f:f5:52:16:
de:40:6a:32:e1:3f:9a:73:af:8a:f9:37:d4:0b:59:93:ab:2f:
cf:ca:22:ab:05:d5:1b:2a:57:ea:c4:04:38:9d:9b:20:fe:9e:
76:73:a6:ad:30:36:2f:0d:27:1e:33:07:c8:d0:6d:34:08:33:
fc:58:5a:f1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:24 2026 by rpki-client