
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
File: eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa (raw, json)
Hash identifier: 0ZMye/TmXIMbs3AOBrS3awAYj6dRZPv98qF1PS3QwbM=
Subject key identifier: 51:C2:27:F6:D6:C7:11:54:BF:B5:D9:E6:8C:C1:4A:61:EB:DF:AF:1D
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 408484531B4FA11B807500C3E4F4C2764D1AC26D
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
Signing time: Mon 08 Jun 2026 00:00:09 +0000
ROA not before: Mon 08 Jun 2026 00:00:09 +0000
ROA not after: Sun 06 Sep 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f1:12::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:84:84:53:1b:4f:a1:1b:80:75:00:c3:e4:f4:c2:76:4d:1a:c2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Jun 8 00:00:09 2026 GMT
Not After : Sep 6 23:59:59 2026 GMT
Subject: serialNumber=af40fa022d139904d53dd62bc979434f94487a599805e4643debcf3cd93712ca, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:95:b7:12:db:d6:a6:e5:f6:91:d0:b2:a8:
85:c0:52:d3:a6:39:65:75:1d:a0:5c:79:ce:bd:3f:
03:e4:dd:37:f3:6c:d6:e0:f1:c2:3a:de:72:2c:6e:
5f:aa:b4:aa:f7:6a:84:c0:ff:db:1b:23:f0:2a:db:
22:13:fa:40:be:3d:ad:35:ac:ab:65:3b:aa:3e:5a:
72:5b:33:d2:9f:78:3b:d5:fc:19:3a:3b:14:1e:a2:
f9:3b:60:ab:87:58:12:1b:d3:13:13:20:5f:bb:d0:
f6:e8:5c:1e:c8:36:40:59:b5:f8:c4:34:40:33:c4:
59:b2:42:83:31:72:d4:60:a5:ee:41:32:18:50:49:
14:d9:1b:18:72:46:80:e1:de:25:dd:2e:89:16:bd:
72:03:67:6f:a4:a5:9f:68:a2:2f:1a:2c:f2:17:d8:
0c:67:e3:0a:1a:9c:4f:1f:58:e9:f7:a0:5c:b8:f9:
b2:1e:d4:23:82:f1:57:f0:ee:00:7b:65:a9:b0:80:
75:96:0a:45:4d:c2:44:4f:ed:47:4c:62:b2:f1:01:
c1:27:0a:f6:f8:94:78:b8:81:47:69:a0:ed:6f:5a:
48:51:bd:2c:b6:7e:52:ef:74:22:65:b2:29:f8:36:
11:a5:e0:9e:23:95:21:59:c3:9a:39:f7:47:03:e4:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:27:F6:D6:C7:11:54:BF:B5:D9:E6:8C:C1:4A:61:EB:DF:AF:1D
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/eb22323f-ed9d-4cc1-8bb1-b9dd97bb12c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f1:12::/47
Signature Algorithm: sha256WithRSAEncryption
11:da:a9:d9:0b:d8:59:05:0d:34:e6:67:4d:d1:16:eb:cb:41:
00:db:5f:f0:df:8c:b6:d0:6d:2c:6a:4e:c2:b2:73:21:aa:13:
74:2d:1a:fa:35:33:ce:9a:6b:9d:fa:60:a3:c2:45:15:06:42:
a2:7f:6d:a2:54:6e:0e:3c:c2:1e:a2:2c:6d:db:5b:ff:41:f1:
76:36:e9:34:cf:76:fe:ca:a8:09:da:eb:fa:c0:f5:2b:ea:eb:
a9:8c:15:3b:7c:ea:e4:d8:40:27:ce:29:1c:5b:04:65:b6:6e:
cd:4f:b0:46:56:f3:61:d8:37:11:a2:cd:e7:70:aa:82:b3:22:
ee:04:82:61:2d:26:24:f2:d9:82:c5:a3:99:3b:94:34:49:e3:
9b:99:b7:7b:7b:56:62:3e:79:57:a4:99:bb:9e:7f:e3:1b:9e:
ec:de:06:2b:f4:33:a6:3f:03:ac:2a:1d:9c:64:49:15:90:6d:
04:ff:e7:1a:22:b2:c2:17:d9:f5:aa:e0:11:b1:6c:2a:bb:d3:
96:b8:b0:ca:95:32:94:e7:1d:c8:2e:e4:f8:9b:46:ab:5f:82:
d9:fb:c5:2b:2a:90:e0:bf:26:49:47:f3:5e:1a:bd:b5:aa:0c:
60:e8:43:47:ce:08:9b:5a:c3:29:4c:2d:10:15:01:01:85:1b:
66:d4:7d:4d
-----BEGIN CERTIFICATE-----
MIIF+zCCBOOgAwIBAgIUQISEUxtPoRuAdQDD5PTCdk0awm0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi
MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNjA4MDAwMDA5WhcNMjYwOTA2MjM1OTU5
WjB6MUkwRwYDVQQFE0BhZjQwZmEwMjJkMTM5OTA0ZDUzZGQ2MmJjOTc5NDM0Zjk0
NDg3YTU5OTgwNWU0NjQzZGViY2YzY2Q5MzcxMmNhMS0wKwYDVQQDEyRmYmIyNzU3
Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcPpW3EtvWpuX2kdCyqIXAUtOmOWV1HaBcec69PwPk3Tfz
bNbg8cI63nIsbl+qtKr3aoTA/9sbI/Aq2yIT+kC+Pa01rKtlO6o+WnJbM9KfeDvV
/Bk6OxQeovk7YKuHWBIb0xMTIF+70PboXB7INkBZtfjENEAzxFmyQoMxctRgpe5B
MhhQSRTZGxhyRoDh3iXdLokWvXIDZ2+kpZ9ooi8aLPIX2Axn4woanE8fWOn3oFy4
+bIe1COC8Vfw7gB7ZamwgHWWCkVNwkRP7UdMYrLxAcEnCvb4lHi4gUdpoO1vWkhR
vSy2flLvdCJlsin4NhGl4J4jlSFZw5o590cD5MxZAgMBAAGjggK0MIICsDAdBgNV
HQ4EFgQUUcIn9tbHEVS/tdnmjMFKYevfrx0wHwYDVR0jBBgwFoAULhjiCKGCVxsJ
fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h
Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4
YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk
NjJlNDhmMDU2L2ViMjIzMjNmLWVkOWQtNGNjMS04YmIxLWI5ZGQ5N2JiMTJjOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3
LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC
MAkDBwEmAPDxABIwDQYJKoZIhvcNAQELBQADggEBABHaqdkL2FkFDTTmZ03RFuvL
QQDbX/DfjLbQbSxqTsKycyGqE3QtGvo1M86aa536YKPCRRUGQqJ/baJUbg48wh6i
LG3bW/9B8XY26TTPdv7KqAna6/rA9Svq66mMFTt86uTYQCfOKRxbBGW2bs1PsEZW
82HYNxGizedwqoKzIu4EgmEtJiTy2YLFo5k7lDRJ45uZt3t7VmI+eVekmbuef+Mb
nuzeBiv0M6Y/A6wqHZxkSRWQbQT/5xoissIX2fWq4BGxbCq705a4sMqVMpTnHcgu
5PibRqtfgtn7xSsqkOC/JklH814avbWqDGDoQ0fOCJtawylMLRAVAQGFG2bUfU0=
-----END CERTIFICATE-----
Generated at Wed Jun 17 08:53:54 2026 by rpki-client