
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa
File: b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa (raw, json)
Hash identifier: A6zZyGvJOEMyahVveyKmvWD9KEM/KtYD5LuZWuKeqmI=
Subject key identifier: 5C:E8:74:01:D2:39:A5:66:E8:C8:2E:4A:C9:8B:1F:11:EB:EF:A0:3E
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 29E25E72A689AA59543EC00C3DEE0C8974C47873
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa
Signing time: Mon 26 Oct 2026 04:10:10 +0000
ROA not before: Mon 26 Oct 2026 04:10:10 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:ec00::/42 maxlen: 42
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e2:5e:72:a6:89:aa:59:54:3e:c0:0c:3d:ee:0c:89:74:c4:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 26 04:10:10 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=bccb0a1f5cdb2ca41fb93309878d28b77c723b8224ddef77a7f5a07abb448b6d, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:d0:ee:73:0c:39:9b:ac:97:61:da:d7:4d:
c0:57:0a:30:e3:82:4e:6e:b5:ef:f9:c5:e7:6a:70:
fc:14:9b:08:6a:32:57:3b:a2:c6:4c:2f:dc:8f:87:
27:a8:23:2a:b1:73:e8:f6:81:0c:84:7d:9a:e9:0d:
12:4d:b5:8e:69:aa:cc:fa:e0:41:bc:4a:a7:62:fd:
17:99:31:91:d6:3f:96:ca:55:49:1b:b5:f9:4a:56:
78:c5:9f:9a:b2:43:c5:4a:f8:ab:dd:82:a2:0a:61:
87:00:ec:36:3e:72:c5:c9:f7:f6:dd:d6:1d:07:86:
e7:83:d5:8f:9a:d1:77:ac:ed:6c:2d:5a:d8:c5:be:
d2:f2:a7:e6:7b:5c:5a:24:8e:bd:51:f4:b9:0e:1a:
d5:0a:9f:fe:40:07:96:1c:0f:ae:22:bd:16:43:a0:
82:6b:cf:2d:f7:0d:07:08:2b:bd:8f:35:5f:a1:81:
e8:b1:bd:42:26:93:ae:f8:59:3b:e4:2b:7e:17:d9:
19:99:04:12:6c:3f:b3:4d:96:45:a4:d9:d1:5e:de:
77:90:2c:23:82:82:0d:6e:4c:c7:3d:30:55:08:4c:
f7:bc:1e:db:19:6f:52:f8:d7:b3:a3:9d:b8:c3:bf:
ba:b0:53:f3:07:6a:01:ac:cb:ca:c8:ac:1b:c6:67:
9c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:74:01:D2:39:A5:66:E8:C8:2E:4A:C9:8B:1F:11:EB:EF:A0:3E
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/b7b1d8e0-7fbb-4528-8c97-1051ca49505c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:ec00::/42
Signature Algorithm: sha256WithRSAEncryption
46:89:7a:da:40:5f:be:96:e8:be:69:47:82:72:3a:96:9c:41:
85:ed:b8:ee:77:0d:6c:af:97:56:44:83:1d:42:f0:e1:35:7b:
ca:af:9a:7d:c8:1c:c0:9c:3a:04:62:ee:65:87:75:e9:c7:d8:
ea:45:6e:7a:3f:bf:99:87:6e:95:d1:fd:fe:2f:84:6d:fc:f6:
68:ce:a5:46:25:5f:ca:d4:61:3d:f2:88:4f:60:15:a6:a6:cc:
bb:70:82:bb:ab:57:a3:70:c2:f9:f7:4b:37:f0:18:c7:1d:fa:
4f:c8:e9:91:94:af:28:bf:4e:0a:30:db:80:56:e7:64:16:9d:
55:f1:74:04:72:36:2c:0c:34:a8:5f:8b:9f:ea:cf:58:e5:7e:
8c:4a:c9:9c:78:24:a4:ac:de:3a:64:54:12:29:77:1a:3c:87:
59:5f:4a:2f:89:ac:00:c2:64:f2:16:91:95:31:61:c5:db:47:
ba:3e:50:3a:04:93:76:0c:1c:ea:93:41:a3:17:18:fd:e6:97:
df:32:22:b0:77:4f:0d:a6:95:0e:17:cc:43:72:6c:fc:04:07:
cf:c2:2a:0b:02:ae:ae:3b:bb:15:95:a9:7f:5a:43:6a:cf:9b:
66:a8:16:71:91:96:59:bc:52:a6:38:7c:ae:62:68:2e:35:49:
e2:1e:68:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 5 09:04:31 2026 by rpki-client