
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
File: f1746927-d9c4-41c2-8abc-289ecb180bdc.roa (raw, json)
Hash identifier: lNYO4refgvMiIdiBhTNizQAuZNkkUFqNmGZYz+IQyNQ=
Subject key identifier: A0:95:29:C2:69:A1:87:34:90:31:BB:D6:10:77:F9:A8:9A:05:5A:DA
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 011F9949B47ECF4650B7D7F1D742692BA6BB7EBF
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
Signing time: Mon 26 Oct 2026 04:10:26 +0000
ROA not before: Mon 26 Oct 2026 04:10:26 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 2600:f0fb:e500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:1f:99:49:b4:7e:cf:46:50:b7:d7:f1:d7:42:69:2b:a6:bb:7e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Oct 26 04:10:26 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=e3f87172d5bb43acbc66abb4a089f36089e078a05cdb3d8a2d41dca3bc8a7561, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:01:3a:ee:89:b6:e6:86:b5:eb:72:2d:57:
c5:b6:07:05:45:6a:b1:3d:71:aa:c9:8d:cd:ef:69:
67:e9:c4:97:b9:9f:df:78:51:db:14:3f:c4:d6:37:
80:37:54:d7:7b:0a:66:c5:5e:ad:5c:b5:d7:95:89:
76:52:95:4c:73:a8:71:d1:52:51:fb:fa:fa:97:f2:
f7:a3:a9:da:3d:a8:50:bd:1e:6c:06:38:16:48:c4:
2c:13:f8:a2:3e:6b:84:83:3c:b6:1c:88:4f:3d:3d:
d6:92:58:18:d6:00:41:6d:52:1f:0f:55:8b:25:ec:
63:b7:f1:b8:d3:4d:ab:85:64:b4:fd:fc:06:cd:66:
ef:7b:dd:6c:6b:8b:f1:bc:6a:b1:1b:e2:96:2e:39:
9c:2c:28:42:3f:92:72:b4:23:f0:96:a7:d1:05:f9:
a9:f2:b2:5f:e7:d6:56:9b:aa:fb:04:14:7e:5b:52:
64:b2:d7:e1:eb:81:f2:b8:52:4b:e1:ec:10:32:50:
4b:36:0c:0f:06:a6:ca:02:71:cf:63:bc:d0:d1:20:
ee:bc:a3:97:d6:55:5b:7f:d2:8d:83:aa:72:65:92:
ce:88:23:2f:e5:55:c0:71:81:a3:c4:d5:e3:75:23:
73:9f:7c:7b:b5:4e:a5:c1:3c:27:15:48:b9:d1:80:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:95:29:C2:69:A1:87:34:90:31:BB:D6:10:77:F9:A8:9A:05:5A:DA
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/f1746927-d9c4-41c2-8abc-289ecb180bdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0fb:e500::/40
Signature Algorithm: sha256WithRSAEncryption
2f:b6:8f:1d:59:52:c6:fa:f5:8b:dc:76:dd:75:fd:56:8d:91:
e5:2d:dd:78:95:e0:73:96:db:cf:33:bb:55:41:46:4a:9d:20:
ed:0f:db:37:a8:ac:27:49:b3:d0:b2:fd:52:90:14:9d:99:ec:
d8:41:69:e7:40:1a:75:8e:1f:be:eb:dd:c4:c6:a0:f7:4d:fb:
36:65:a3:25:d7:4c:d0:16:67:15:33:c3:0a:66:06:31:88:20:
11:33:46:64:a1:23:15:38:e7:1e:b7:e5:0f:16:8d:21:8b:2d:
b1:89:21:63:39:a5:b7:a4:d7:ee:a5:ad:5d:7f:6a:f8:01:a7:
ab:a6:bd:67:9d:a6:32:eb:a3:a9:17:8d:52:36:73:3b:3e:0e:
af:e6:23:5d:e1:6c:52:2e:f7:bc:87:6a:5e:96:b6:fd:b3:9e:
42:7e:19:97:1a:ae:4f:31:6e:1c:38:2d:2e:7a:91:81:37:9d:
37:9a:03:04:7f:78:81:7a:33:29:96:8c:8d:0f:dd:d1:89:b3:
7e:aa:c2:53:bd:f2:8b:23:d5:2d:7f:e9:96:35:42:4b:b9:05:
45:41:42:d8:de:c1:f3:68:f1:27:da:39:e3:93:0a:0f:f9:ca:
e7:3b:49:fc:e2:b4:cb:14:37:07:bd:bd:86:35:a4:6a:c7:26:
49:f2:98:ac
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Nov 5 07:19:46 2026 by rpki-client