
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa
File: ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa (raw, json)
Hash identifier: 5hjSM8ld3XSfvMss7wUs3Cp+YZO0tHAW5FO1c3cW9EQ=
Subject key identifier: 3A:8A:F4:3C:21:D1:C7:52:0B:4C:89:F9:06:88:47:CE:FA:2E:42:70
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 2135905CF198DDB6E4B6E6983225C53CA0D8D8B0
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa
Signing time: Tue 19 May 2026 04:10:53 +0000
ROA not before: Tue 19 May 2026 04:10:53 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0fb:e600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:35:90:5c:f1:98:dd:b6:e4:b6:e6:98:32:25:c5:3c:a0:d8:d8:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: May 19 04:10:53 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=b745791e676f1c256205b62d59f0626af4bd76511f27776ea4eed91b84eb1f5e, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:77:f9:d4:a5:6f:51:4e:79:15:a6:4f:bd:d0:
ba:9b:68:51:64:74:38:52:e1:8d:d3:f0:11:e5:a5:
d2:77:76:23:5a:e9:18:c7:30:91:e9:7e:6f:91:5e:
b6:a3:db:56:84:cd:89:fe:be:50:ca:dd:46:5d:c3:
40:36:a4:3c:e7:ce:5f:3b:61:27:d5:d2:d8:2f:56:
2b:4c:73:67:fa:a5:c3:dd:73:cd:00:6c:42:1f:4e:
69:21:14:d9:3b:b6:d6:4d:89:25:e2:c3:29:9a:52:
fd:fa:e5:69:f6:be:6a:20:3a:c0:3c:ae:4c:a0:4e:
9a:ee:e2:0b:38:fb:86:db:eb:f9:91:78:d1:77:61:
61:c5:18:b4:9f:c3:0b:46:61:7a:7a:22:7c:28:73:
b6:15:83:ed:bc:16:a7:a5:45:4a:66:cd:df:6f:73:
e5:3b:22:40:73:a1:e0:ea:63:4b:b6:e9:1b:df:28:
50:1a:18:5c:4c:bf:31:d6:96:ae:fe:bb:8a:12:d2:
8a:3c:1b:e5:78:f6:a5:ed:d9:70:af:ab:0b:67:89:
05:68:8b:7f:a0:b7:bf:f6:09:87:88:fa:d2:5f:c3:
4f:f6:89:9d:82:fb:79:ed:7d:cf:6b:c6:ec:ee:05:
2c:9a:2b:25:ab:11:73:73:f5:40:1e:82:bf:1d:95:
bc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:8A:F4:3C:21:D1:C7:52:0B:4C:89:F9:06:88:47:CE:FA:2E:42:70
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ab4b0199-6a63-46e2-9ecf-6c0bbea54035.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e600::/40
Signature Algorithm: sha256WithRSAEncryption
a4:bc:ce:d6:fd:25:25:f8:4d:6c:b9:c1:45:2d:6f:59:27:ad:
cd:0c:70:b3:6e:ff:95:e3:27:e6:96:9e:38:cb:76:25:91:4a:
0f:04:21:99:c6:63:73:e6:07:cf:40:8a:4f:11:91:ab:38:7e:
e4:ae:90:c5:bb:34:dd:20:56:f0:bd:05:79:ef:bc:41:a8:88:
70:06:d5:10:6e:cc:5f:d2:ad:8b:38:1f:62:8f:41:60:84:fc:
cd:b3:e1:6f:7b:47:b9:2d:4f:7f:b1:4a:23:cd:8b:4f:d1:27:
e1:66:d6:52:81:43:09:78:7e:32:76:ed:1f:71:0d:e2:d8:65:
80:9e:af:cd:6d:d6:a5:b7:11:a9:28:2a:da:ed:d6:96:37:8b:
7d:5d:52:b7:62:2a:1e:a5:96:0b:04:d6:87:17:b8:b9:7a:ba:
bc:6a:a3:9e:4b:e6:29:9b:a3:9a:8b:e2:ab:eb:e5:02:99:52:
0a:e6:99:01:49:be:ff:9b:96:a0:2a:28:75:45:aa:d5:78:f6:
15:32:fd:94:b8:05:7b:0e:88:63:97:bf:10:5f:ec:b4:31:26:
9b:16:9d:f0:f1:65:cc:b5:cc:17:66:cb:0a:1c:86:d4:0a:fa:
c6:1b:35:e5:71:2d:7b:18:b6:9e:9d:b1:93:0b:13:78:8f:8b:
1e:4e:be:ab
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:58:04 2026 by rpki-client