
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd74fd2f-666a-47ba-8bd6-42e8e9bc08f8.roa
File: bd74fd2f-666a-47ba-8bd6-42e8e9bc08f8.roa (raw, json)
Hash identifier: PUu+k6RXnb0Gz5vwWkAcdp8AQ3KMFQgNGfzKMsPnCQg=
Subject key identifier: 2B:C3:B9:69:16:01:5F:43:0C:AB:71:55:37:CB:94:50:99:BB:AD:EA
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 7F5B34A11855399CB157A8292652FAC50E393489
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd74fd2f-666a-47ba-8bd6-42e8e9bc08f8.roa
Signing time: Sat 12 Sep 2026 00:00:05 +0000
ROA not before: Sat 12 Sep 2026 00:00:05 +0000
ROA not after: Fri 11 Dec 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2600:f0f0:c11e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:5b:34:a1:18:55:39:9c:b1:57:a8:29:26:52:fa:c5:0e:39:34:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Sep 12 00:00:05 2026 GMT
Not After : Dec 11 23:59:59 2026 GMT
Subject: serialNumber=2440da1a5fc8151cdb2154eebf344eeba1a9b14c7d0ac37b3e0e13f2e63e7a17, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1d:f4:ca:80:51:09:57:11:b1:a0:be:b9:fd:
7d:f1:c4:0b:9a:d1:06:a7:be:a5:c9:5b:9e:b9:5d:
50:24:58:be:80:e0:b8:d3:0b:25:0d:05:0b:82:db:
88:96:f9:5d:dd:d3:18:9a:c7:75:ec:02:ab:3d:e1:
47:36:87:86:b3:af:95:aa:c6:3e:10:f4:50:aa:b1:
94:9e:81:58:14:61:ae:15:54:a2:6c:07:7d:ab:96:
5d:5d:d7:b9:05:7b:e0:8d:ba:c8:9d:c2:8e:57:27:
71:2a:8a:8e:ae:5c:02:b1:88:5d:3e:9e:8c:bd:9a:
29:bc:6f:f7:b7:4b:1f:7d:99:d1:0d:c3:aa:42:f8:
af:6e:20:d7:65:c0:7b:e8:af:37:d2:8e:74:8c:96:
1f:95:14:22:05:cc:88:52:2f:24:df:a0:74:0b:70:
9c:b2:26:1b:3b:4a:8f:bf:ea:15:a8:2b:e8:e9:34:
d0:79:10:ca:49:29:4d:53:10:30:31:21:d6:67:7e:
89:65:73:5d:6f:03:78:08:17:19:16:11:cf:e9:b9:
c6:03:a6:c1:6c:be:20:35:1c:ae:46:bd:77:6e:6c:
f9:05:5b:1f:2a:ac:9e:7c:45:1a:2d:3b:b6:ce:78:
a4:16:8d:22:52:5c:ed:f4:c7:0f:0a:00:9b:fc:db:
68:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C3:B9:69:16:01:5F:43:0C:AB:71:55:37:CB:94:50:99:BB:AD:EA
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/bd74fd2f-666a-47ba-8bd6-42e8e9bc08f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:c11e::/48
Signature Algorithm: sha256WithRSAEncryption
50:70:6a:c0:69:eb:42:14:7e:58:c9:2f:c1:13:20:bf:55:24:
93:d5:95:32:99:19:df:82:b5:fd:cb:6a:46:7a:1c:ed:a6:c5:
0d:fe:34:96:3f:8f:90:93:1e:4c:09:7c:7a:26:84:7c:01:f5:
7e:30:67:93:7f:e3:cf:d2:5b:e8:6f:65:a0:58:c6:a8:80:ba:
bd:00:6a:e2:8b:ad:3e:d9:83:f7:88:af:d2:b4:f2:3a:80:39:
e9:9b:17:79:39:c8:aa:4f:df:d7:68:52:7e:25:d3:cb:34:26:
7c:d5:90:68:48:81:6e:67:10:e5:8b:8f:62:f8:f0:5b:46:b8:
1a:1c:81:d8:90:43:3e:4b:7d:26:91:6f:b8:95:6e:12:54:d3:
bb:d6:8d:a9:64:f9:0c:83:35:b3:9a:b9:0b:ec:d8:9f:9d:8e:
3e:f7:8e:1d:78:6c:97:b2:ac:c6:f7:c3:4d:ce:e3:96:45:6a:
d3:4f:d0:d2:46:1c:fc:ea:53:72:d3:57:98:5f:f4:b2:48:c8:
93:3f:b1:29:63:58:34:ea:05:08:d5:23:52:21:2d:03:c1:7d:
cf:7d:2c:5d:7b:e6:c5:ed:e9:5d:f7:26:17:8a:7d:27:33:b9:
f6:46:fb:23:74:6b:e7:48:c8:30:9f:9a:d2:d8:80:63:84:d1:
69:54:71:16
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:31:55 2026 by rpki-client