
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa
File: fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa (raw, json)
Hash identifier: fHtrtwCeOry6ZlfTyYxG19hBzFUDxhpFlbo8GR7FDkQ=
Subject key identifier: AF:02:7A:59:37:B8:2A:2C:3D:4B:CB:D1:39:99:2E:52:C4:0C:75:97
Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Certificate serial: 775E5E4FBC866F4B68B20010C6CFA7FE5F862E74
Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa
Signing time: Fri 20 Feb 2026 01:30:15 +0000
ROA not before: Fri 20 Feb 2026 01:30:15 +0000
ROA not after: Thu 21 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2600:f0f2:7010::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5e:5e:4f:bc:86:6f:4b:68:b2:00:10:c6:cf:a7:fe:5f:86:2e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08
Validity
Not Before: Feb 20 01:30:15 2026 GMT
Not After : May 21 23:59:59 2026 GMT
Subject: serialNumber=ce12c2868fa5ae54f0dabba1a6c856ff0b328c20ef482a104a154ab706b6cc22, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:5f:aa:d1:73:82:39:d2:2a:b3:2e:22:2d:
15:c4:bf:bf:5b:44:4b:66:63:f7:95:80:8f:be:77:
73:46:6f:01:81:1e:ae:e2:c6:b4:c9:80:16:2d:16:
51:6a:26:15:8c:7f:a5:67:0a:12:e9:5b:5d:02:c2:
e5:80:69:e1:ef:ca:eb:b1:a9:a0:8c:fa:06:9d:0e:
3e:2f:90:ab:a8:18:84:f7:7a:43:f2:94:4f:7c:71:
6f:00:01:ab:ee:fb:00:f6:b8:82:e1:0b:e8:d9:1a:
7f:af:7d:bb:37:68:c0:6e:1e:ab:0a:2d:f2:d0:09:
d2:f3:17:27:36:2c:5b:47:61:bf:aa:53:d0:c4:70:
7e:f3:4f:66:b7:0f:99:98:24:15:36:44:92:92:3e:
9c:57:9c:16:46:42:ed:f6:3f:e6:ea:cd:04:5c:b0:
c7:86:23:2c:80:dc:0c:74:aa:dc:20:0b:c0:d6:7f:
70:33:e7:e6:f3:32:dc:7b:2e:6c:8e:24:9c:c1:e2:
27:db:50:57:86:ef:c4:ac:f5:a3:db:3f:52:f8:95:
5f:0c:ea:07:26:49:b8:ff:0a:4f:94:1f:a3:9d:b2:
44:ff:a2:1a:6f:1f:1f:b7:9a:98:58:9a:b5:6e:58:
49:f2:93:a3:f6:52:37:be:e6:93:8f:98:09:e3:28:
45:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:02:7A:59:37:B8:2A:2C:3D:4B:CB:D1:39:99:2E:52:C4:0C:75:97
X509v3 Authority Key Identifier:
keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/fab882b1-a5c9-4c16-a9b2-b7fd9891d5b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2600:f0f2:7010::/44
Signature Algorithm: sha256WithRSAEncryption
73:9f:0b:f3:b1:04:2a:8f:41:61:14:d8:2f:32:f9:df:a8:c4:
12:57:67:17:45:44:a0:c2:a9:b3:f5:31:f1:39:0c:7d:9a:6c:
8f:a7:bf:08:d1:e6:a9:42:31:dc:5d:7f:20:33:82:a6:a6:8b:
f3:56:74:4b:7f:8f:2e:28:56:77:39:b7:38:e6:24:38:90:6a:
93:2e:c0:d3:37:c4:a5:4e:58:04:ad:a7:9c:06:2b:24:3a:2e:
45:ea:4f:82:20:2f:80:8e:21:37:65:af:72:75:3c:e8:ee:08:
6e:24:df:58:4a:5d:27:43:8e:79:47:c2:97:77:9a:4e:25:7a:
59:6e:9b:52:62:e1:03:9c:ae:6d:e8:a4:15:4c:23:fa:da:29:
83:c6:5b:d6:12:74:01:35:e3:22:35:3c:9d:9f:68:bb:14:e2:
05:ac:22:a8:35:87:2f:da:d9:93:27:53:00:67:67:94:3b:f9:
31:bd:1b:0b:04:3e:8c:98:c9:ff:be:15:48:f8:7f:80:ec:10:
80:25:b3:2b:19:dd:9b:5b:23:91:b6:b3:51:05:3f:24:7c:0f:
a2:af:20:3f:45:bc:f4:bd:fc:79:35:55:d1:dc:56:b5:76:87:
2c:73:f2:96:b4:35:0a:26:3d:04:fa:4e:da:b3:41:80:2b:7c:
ba:b1:5b:cc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:04:32 2026 by rpki-client