
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa
File: 9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa (raw, json)
Hash identifier: WtDgsS2LbjnEZtTbLeWqFNTNKgGBG08m7FLQNUiQZ4g=
Subject key identifier: AC:6B:1D:64:3C:1E:78:2C:A6:96:64:73:CF:4B:0C:0F:2B:4C:D9:AE
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 40A25DEDDBE8232DCBCA3EB1C5FBF92F98DA28F6
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa
Signing time: Wed 20 May 2026 00:40:10 +0000
ROA not before: Wed 20 May 2026 00:40:10 +0000
ROA not after: Tue 18 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f0:c000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:a2:5d:ed:db:e8:23:2d:cb:ca:3e:b1:c5:fb:f9:2f:98:da:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 20 00:40:10 2026 GMT
Not After : Aug 18 23:59:59 2026 GMT
Subject: serialNumber=d8ab2d62f8a61699644f9092db3276fe98d8e849f857a2fa4ea524fbc7e574bb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:28:df:b8:23:5c:c0:2b:f0:b2:93:5b:a6:
13:f5:7e:0f:a1:27:38:8c:ca:aa:07:54:76:b1:75:
89:82:21:7c:6e:ab:84:13:f8:96:7d:99:8b:42:b1:
7b:44:91:e6:40:a3:53:1e:96:29:6f:2b:25:5f:e9:
ba:67:d4:8c:79:61:8f:05:f0:4f:f9:ef:fa:36:2b:
d5:17:0c:88:38:3c:bd:fd:68:a3:a7:76:ac:34:d1:
d9:f6:39:8c:27:3d:fa:13:6a:6a:8c:e7:10:eb:80:
21:1a:cc:dd:d3:7d:e9:3b:66:fc:9c:39:64:a7:22:
cd:d1:1b:c6:45:48:14:5c:65:4b:74:7d:fd:2f:e2:
23:ce:7b:49:ac:f0:c2:43:1e:dd:1d:06:0d:28:53:
20:91:03:c6:96:52:d5:b8:83:5c:68:c3:ea:14:c1:
7e:1d:4c:e3:4f:84:49:95:3a:e7:23:59:92:0f:a8:
e5:e5:a0:72:d6:e6:07:fa:d6:62:44:36:d1:a5:42:
ff:5c:3b:67:cb:54:f8:48:bc:3a:ad:88:02:8f:70:
e7:5c:32:46:f8:f1:a6:fb:24:95:01:ef:15:d0:56:
49:21:44:2b:e2:09:7e:e7:45:39:c7:67:0e:be:3b:
a1:33:30:a9:01:0c:2b:e7:70:cf:6e:da:ac:b0:af:
f1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6B:1D:64:3C:1E:78:2C:A6:96:64:73:CF:4B:0C:0F:2B:4C:D9:AE
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/9e9ea1d5-7bdb-456e-bf42-4f12c5d6c899.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:c000::/40
Signature Algorithm: sha256WithRSAEncryption
81:0c:c4:95:f2:4c:a5:a1:91:4b:f9:4d:2b:80:54:3a:65:a7:
3d:ef:9e:bd:94:90:40:6e:69:f7:56:47:b1:9e:84:44:d8:6d:
c6:1c:fe:e5:ec:73:87:e6:c2:21:3d:80:87:79:fa:7e:6a:80:
60:db:2c:82:a9:8b:b4:47:8b:46:39:1e:a1:9e:37:f3:b0:65:
05:4a:4b:74:99:cc:e4:08:6f:f3:c4:8b:74:2d:38:9f:41:7c:
6d:2b:7e:8b:2d:1c:d8:9c:ca:42:6b:1e:c8:f5:43:2a:3e:95:
58:23:3c:57:91:62:4d:15:8b:f7:f7:b0:61:aa:55:f6:b9:5b:
ce:89:52:d3:54:9b:e0:12:bc:85:60:3a:15:16:a1:9c:cb:04:
c3:ef:3e:e6:45:f5:30:86:8a:6f:b5:18:56:4e:02:42:ab:a5:
31:aa:dd:66:a7:8c:7f:11:00:bc:00:6f:00:a8:80:63:42:ed:
10:ee:bd:6c:f1:d9:91:53:dc:e0:8f:53:6b:44:88:74:58:ee:
dd:fc:64:af:8b:ec:58:c0:3d:ba:b0:b2:1b:33:53:a4:60:f3:
99:2a:9c:0d:df:48:c9:67:3d:4d:14:17:d4:63:1c:49:e6:16:
d1:81:7f:76:bb:50:44:86:f7:ad:7a:30:49:66:99:2e:6d:f8:
8b:95:21:e0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:42:50 2026 by rpki-client