
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
File: eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa (raw, json)
Hash identifier: PQShmwK3kxhph5ew8ta0X8V8ZzN+UkR20VJ2pYp5438=
Subject key identifier: EC:9D:B9:1F:FD:43:26:C6:FF:C0:E9:28:3B:68:25:D9:F0:1B:F3:BA
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 40B9F781FDEFD9DD8B054F3BD4EDBFB69B969BB5
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
Signing time: Thu 27 Aug 2026 00:00:07 +0000
ROA not before: Thu 27 Aug 2026 00:00:07 +0000
ROA not after: Wed 25 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f1:12::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b9:f7:81:fd:ef:d9:dd:8b:05:4f:3b:d4:ed:bf:b6:9b:96:9b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Aug 27 00:00:07 2026 GMT
Not After : Nov 25 23:59:59 2026 GMT
Subject: serialNumber=59aabedae156aa831cfe822d645727e86f1b782bc8ccba56cd2162e0674b190f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:57:08:1c:34:cb:1e:b6:74:9c:54:ce:18:5f:
c0:57:fc:ef:0f:a7:52:03:a3:c8:39:5a:3d:26:b0:
2d:0d:d6:ca:8f:60:66:09:0e:5a:02:34:e0:cc:b8:
8c:ec:fc:14:e3:32:84:74:24:17:8d:a1:de:fb:85:
50:fc:8d:17:a8:4f:11:42:3f:b8:2d:ff:82:5b:7e:
cd:7b:dc:a4:bb:dd:b5:e8:c5:4b:50:cf:4f:75:f6:
23:85:42:41:5b:43:11:29:50:3d:b6:3f:c3:93:83:
4f:b7:54:ad:b2:95:da:d1:8f:56:62:91:cb:36:96:
96:b9:2b:c4:6f:18:d6:c6:8f:e5:6e:ff:22:69:07:
dd:47:ef:fb:61:d6:8c:ce:9d:e8:29:5a:9d:70:9e:
c7:e0:9b:32:15:31:65:44:d1:41:50:0f:82:b4:ff:
95:89:83:3e:0b:a5:0b:7e:ec:15:ed:31:1d:93:23:
41:c8:d9:14:81:59:ac:52:d6:b1:58:5a:d7:02:5c:
d6:b8:97:86:d6:8e:19:de:53:51:4b:f0:db:1a:eb:
54:00:15:1f:bc:03:20:f5:83:ff:46:82:10:60:b1:
b6:10:16:c8:50:ea:56:cf:f0:fa:cd:ac:3e:f9:d9:
91:5c:e8:b5:6a:8b:2a:f7:3a:84:a4:56:6f:1b:f3:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9D:B9:1F:FD:43:26:C6:FF:C0:E9:28:3B:68:25:D9:F0:1B:F3:BA
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:12::/47
Signature Algorithm: sha256WithRSAEncryption
14:fd:40:2e:61:c5:46:e8:29:73:03:97:e5:9d:73:3c:1f:58:
b2:60:87:39:b6:21:60:21:f7:f4:ab:35:fd:b5:02:91:f7:7c:
df:82:02:bf:74:2a:f3:52:78:1b:be:0d:bf:88:fb:1a:cb:72:
a5:08:d5:72:6d:6c:52:21:66:b0:95:3a:88:04:f0:11:9a:2b:
f4:e8:43:b7:50:97:10:73:0a:a9:06:6a:52:f3:23:3c:64:03:
5e:52:6e:74:ef:cc:3f:34:f1:2e:5c:26:5a:de:93:81:3a:a2:
99:16:5e:81:a9:e3:06:1b:78:18:b3:8b:bf:bb:7e:f0:85:24:
4a:f8:06:e8:2e:a9:f8:c1:0c:07:41:c2:1e:b9:00:f4:97:72:
10:69:d3:08:15:d4:8a:af:54:21:a6:50:a9:3c:03:60:d6:cc:
d2:4d:8f:e7:d5:0f:95:14:36:b0:39:dd:ad:30:fe:31:f2:15:
d3:08:65:cc:1c:b1:d9:af:9d:4e:55:26:8a:a9:95:b4:e2:d5:
aa:d9:30:34:37:9b:4d:eb:25:33:68:2d:76:40:13:b8:e9:56:
05:80:6f:96:e1:6f:66:20:fe:5a:82:5b:ab:d5:8a:20:75:2a:
f2:6d:b3:63:bc:a5:4e:6c:9b:c0:31:1b:71:b7:7f:9a:a5:78:
13:2b:7a:64
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:53:06 2026 by rpki-client