
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa
File: ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa (raw, json)
Hash identifier: T/XT689wiRQOy6m1EKegUGmtBkFirO8zvIaOmxookyE=
Subject key identifier: 42:73:C9:C6:A2:68:7C:D5:16:BB:66:0D:A2:BD:4C:E2:2B:B0:65:FC
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 365BA56799AABF0FB647C9A52EB565D0D2728441
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa
Signing time: Fri 13 Feb 2026 15:10:40 +0000
ROA not before: Fri 13 Feb 2026 15:10:40 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0f0:108::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5b:a5:67:99:aa:bf:0f:b6:47:c9:a5:2e:b5:65:d0:d2:72:84:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 13 15:10:40 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=f77aa0f726896896bac05b204fdadb41eabd612446b0b97c2620b2ff2dee6911, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:72:04:13:e0:8f:9a:4c:51:d2:dc:28:fb:
c3:52:af:91:ea:be:1a:29:c2:0e:94:e5:05:20:17:
1b:39:fe:06:95:46:f2:88:c4:ff:9c:30:c0:c3:31:
24:7f:cf:76:90:74:24:76:ee:2b:a0:ff:2d:f7:64:
3c:bb:7a:d8:5f:07:81:68:39:48:9f:7f:77:b0:b8:
bc:75:37:2b:f1:43:74:b4:fa:29:b8:5d:9c:d8:2c:
1b:74:16:45:de:64:6d:41:2d:2d:41:33:36:86:20:
02:2a:d0:fc:ce:88:ae:d8:15:25:ee:9c:1e:40:64:
49:68:6f:42:ac:5e:a1:e2:4b:68:36:bf:c5:16:ca:
86:98:e1:c2:59:93:b7:da:91:68:5d:79:42:cf:78:
3c:3f:5d:51:15:7f:00:d0:28:4b:c1:8b:38:7d:9c:
bf:7b:77:ba:c2:b5:e8:c2:ff:61:f9:61:2d:71:4a:
1c:87:1f:a6:33:05:c8:7c:a4:cb:8b:0f:81:86:6c:
24:5b:53:33:5e:f1:00:61:1a:c3:50:a5:b1:90:31:
0e:70:0b:55:30:94:c7:85:fe:16:d4:19:d7:93:8c:
04:09:03:1c:42:3e:fd:1d:c2:75:3a:cf:e2:29:f5:
ac:72:0b:7b:bc:f6:f4:76:42:e8:f5:a6:f9:b5:63:
3a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:73:C9:C6:A2:68:7C:D5:16:BB:66:0D:A2:BD:4C:E2:2B:B0:65:FC
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/ecd4e407-1eb0-44f2-a3a7-d4714ca63aea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f0:108::/47
Signature Algorithm: sha256WithRSAEncryption
15:10:7b:36:8a:a9:ac:36:f4:e7:ac:e1:23:2e:8b:1d:47:a9:
ce:4c:9e:2c:fc:b5:cb:63:48:60:2a:84:12:85:2c:9f:f5:16:
16:1e:5f:19:a6:17:0b:72:a4:99:e9:08:58:e8:df:f6:3d:49:
c3:8f:13:d8:af:29:30:0a:80:90:c7:c6:c5:9f:38:ff:1d:6f:
2e:e2:93:af:8b:b8:8f:3b:5e:0a:01:61:c9:a3:54:ae:99:aa:
c3:74:99:8e:a5:5f:06:83:48:b0:0a:79:d2:52:27:15:9d:c6:
51:80:63:b1:63:e8:ed:d7:45:de:5c:af:4e:3b:3f:77:30:3f:
12:99:dc:04:63:30:5f:96:bc:ab:c3:94:70:24:37:7f:01:ce:
ef:a0:cb:d3:65:dc:30:55:f0:c5:f0:7c:9b:4c:13:5b:e0:d5:
75:46:b8:8d:ad:83:33:b2:41:50:6d:44:ae:7a:19:e0:f9:53:
be:ab:a7:9b:72:8e:61:7a:ee:a4:38:c3:fb:ed:23:a1:6b:fc:
db:cf:ab:c6:cc:14:0a:93:69:94:d4:73:7c:95:2e:3a:ae:da:
4d:ef:cc:20:40:41:2f:07:be:c3:47:71:60:77:ee:6c:08:bb:
bf:b7:d9:88:c1:e1:c3:6e:99:b8:f0:76:90:6a:ab:88:1e:bd:
b7:1c:75:91
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:27:24 2026 by rpki-client