
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
File: 765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa (raw, json)
Hash identifier: QT01Ym0FPK57wb1qOmbHtfVrinYowQo4wgHoHTqxtRU=
Subject key identifier: B2:93:14:9B:E4:A2:99:53:AC:4B:70:73:9E:00:36:27:DA:A1:91:60
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 07FF16D3BAF7DE9F50F69EA908351272A478AFD5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
Signing time: Mon 26 Oct 2026 04:20:10 +0000
ROA not before: Mon 26 Oct 2026 04:20:10 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:ff:16:d3:ba:f7:de:9f:50:f6:9e:a9:08:35:12:72:a4:78:af:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 26 04:20:10 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e6a12a1711e4f4e51c6de4d3c40f5079778b3c79fbc0f8fa90643d7c587aa2c0, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:eb:fe:46:04:e1:da:58:82:21:1c:7e:20:
d6:de:c3:77:33:fa:48:8f:19:99:38:41:79:66:d8:
09:16:60:cd:2c:d9:7a:c1:46:89:08:22:97:a5:bb:
86:14:fc:ca:ef:2a:77:ca:01:e7:a9:49:a9:65:f5:
9a:54:ae:ef:a1:52:c2:a2:46:48:66:4a:15:8d:0f:
1c:98:a6:1b:20:ac:08:62:f7:39:53:38:c1:3c:7a:
72:86:a9:3b:98:ed:17:86:61:e1:8e:1e:aa:9f:02:
33:5d:9c:25:30:f7:4d:70:79:db:8a:a4:37:03:4e:
2c:71:e3:46:27:52:27:75:0b:54:9a:c6:87:e0:a7:
3e:c4:be:2b:67:e9:ae:11:2d:e1:b5:11:b0:3c:36:
6b:1e:37:a2:7e:3d:64:d9:fa:d9:6d:6a:e9:9b:aa:
cd:bd:b6:bd:44:8d:a5:9b:a1:4c:53:e8:75:dc:95:
b9:d4:39:70:fd:53:4d:27:b0:56:79:47:f5:51:26:
d6:ad:e2:e1:a9:fe:46:ea:1a:2f:a9:9f:69:4b:a5:
9e:d6:5f:1a:10:e4:cc:44:da:9b:cb:c6:5a:71:45:
1b:ad:f8:87:71:33:86:2b:af:93:6e:82:0e:a5:7b:
f1:8c:f1:29:c6:e9:95:64:94:bc:9a:69:7a:3b:e9:
d4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:93:14:9B:E4:A2:99:53:AC:4B:70:73:9E:00:36:27:DA:A1:91:60
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/765dfa6c-35d1-42cf-ba89-eaf88577e4f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:8::/48
Signature Algorithm: sha256WithRSAEncryption
48:68:34:5e:26:47:8e:ea:ff:68:38:b1:2e:a0:8f:1e:27:1a:
81:03:fe:4b:55:a5:68:53:7a:30:1b:01:ea:02:1b:20:e2:30:
73:dd:9e:01:41:b5:ac:40:20:a2:ed:2c:c8:1b:25:5d:e5:93:
66:83:16:86:0f:d9:06:b6:b5:28:ab:eb:ca:66:7c:ac:6f:b7:
d9:ed:df:9f:c2:7d:03:d0:1b:61:e9:09:ca:48:23:32:d3:cd:
18:29:e9:2b:e5:90:5c:63:38:17:44:4c:3b:48:d8:2e:cb:6e:
6c:b8:e7:f4:3d:0d:95:45:dc:59:a2:16:0b:41:5f:ac:d7:61:
81:a1:a8:b3:eb:ee:7f:13:db:8d:e5:5b:3c:cd:e1:81:59:be:
58:c1:85:d1:b1:ed:e5:34:cb:b8:84:0d:1f:75:b4:7e:ca:47:
13:a7:4b:b7:4d:01:48:52:bb:30:31:34:bf:f0:15:46:d9:b8:
a7:fe:d9:0d:85:92:b2:dc:8f:36:dd:2b:3c:c1:40:f0:60:63:
5e:4e:1a:65:1f:9f:66:85:0d:8e:62:15:9c:64:b7:55:b3:32:
b4:4a:06:ee:27:93:19:c1:c3:73:67:08:dc:31:f9:21:21:e6:
3d:50:94:e8:d8:fd:ab:c1:43:66:6c:15:cf:2f:52:8e:9f:8f:
29:5c:da:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 11:18:57 2026 by rpki-client