
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa
File: 6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa (raw, json)
Hash identifier: y9i4GmVlQPSLz1OVQq4Ghc6sxasTydvYq3tACpTHTGI=
Subject key identifier: DC:01:FB:B3:B1:40:5D:29:5A:71:E9:0F:0A:26:48:9A:BB:D2:D5:FD
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 65803C45A15A10F41AB3E0E7176731C85AC7796B
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa
Signing time: Sun 27 Sep 2026 00:00:10 +0000
ROA not before: Sun 27 Sep 2026 00:00:10 +0000
ROA not after: Sat 26 Dec 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f1:8a00::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:80:3c:45:a1:5a:10:f4:1a:b3:e0:e7:17:67:31:c8:5a:c7:79:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Sep 27 00:00:10 2026 GMT
Not After : Dec 26 23:59:59 2026 GMT
Subject: serialNumber=4cae8a99f2e165fd11fc78dc1612a9350e535e9a2011e6ea8c3259f354b9569e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:02:cb:7e:13:78:0b:36:5e:b1:f8:53:1d:
19:c8:e1:8f:c2:5b:2c:4d:76:0f:21:90:26:24:5f:
92:56:03:41:f6:52:87:bb:67:51:ec:91:09:45:71:
01:4d:17:f1:35:38:77:cc:0c:e9:2b:61:f0:b0:a6:
68:74:96:66:8c:de:3c:ae:e8:1b:af:00:c4:49:79:
38:4a:66:a2:5d:2a:63:60:98:b7:a7:5a:af:85:a9:
59:31:03:e8:a7:0b:7c:e8:8b:80:5c:5a:a2:08:e0:
1c:e8:5b:a0:91:ea:5d:6e:54:b0:7f:99:be:18:1d:
2f:18:d9:ce:b8:db:5c:a1:58:66:68:72:7f:59:a2:
9d:ab:a8:47:74:61:ec:fe:c9:c6:1b:07:3b:dd:57:
c9:00:2c:e1:a8:95:85:b4:d9:3b:48:57:d3:36:ef:
aa:5c:99:f2:46:a4:46:a5:1b:9d:0e:4c:47:9a:1b:
46:c3:8f:1b:d1:30:0d:69:7d:ff:c8:b8:df:e2:42:
0f:9e:bc:59:d9:c3:50:ad:98:2e:e1:58:3c:18:1a:
85:9c:57:ff:b6:da:4c:d9:9c:33:e3:ef:50:b3:6f:
42:f9:45:23:ee:c0:09:f9:a3:90:48:04:a8:ea:79:
86:25:db:ac:e5:c1:68:b6:2e:14:cb:dd:06:56:75:
15:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:FB:B3:B1:40:5D:29:5A:71:E9:0F:0A:26:48:9A:BB:D2:D5:FD
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/6f67fbaf-c6eb-4dfb-8d5f-c2b661fe2773.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:8a00::/44
Signature Algorithm: sha256WithRSAEncryption
0d:14:18:93:4b:8c:42:ef:ad:17:5f:85:0c:31:f4:ec:86:45:
da:66:fd:ed:24:9e:07:f6:70:98:9b:1d:3d:2d:20:27:81:e6:
b7:02:7e:7e:59:9c:7e:4d:f2:cd:54:db:ef:6e:dd:fa:72:cb:
d6:35:98:a5:65:90:42:c1:8f:6a:65:bb:9c:0a:5c:21:50:0a:
aa:f3:68:3f:1a:0d:cc:73:e9:38:5e:2a:e5:2b:8e:6a:b0:59:
b5:54:d8:33:c1:5b:a3:ba:c2:4a:56:3d:ff:ed:51:01:a0:a0:
b1:17:34:25:90:70:88:9f:dd:0b:cf:d5:4e:c8:20:37:cb:46:
01:98:e6:50:66:00:0c:1c:08:71:59:ef:13:8b:d1:5a:3c:22:
8c:38:0f:6d:d3:69:8e:eb:2b:ee:90:4b:5f:b9:a9:10:91:ad:
cd:75:e2:13:3c:44:48:47:89:8a:76:0e:79:c8:ba:0d:73:ae:
31:1c:55:ba:71:c1:7f:12:17:eb:9d:f4:eb:b2:9a:c4:77:6c:
e8:09:a9:39:75:da:fc:9a:e2:22:7f:3d:ee:85:0b:94:44:17:
fb:b7:70:0e:30:ed:1a:38:03:7a:db:69:b3:39:1e:73:cf:d0:
22:c8:94:e1:30:a7:df:6c:fc:d5:d2:14:1d:aa:24:43:2b:12:
b8:71:03:47
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 15:22:37 2026 by rpki-client