
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa
File: a3459b28-5505-461b-b15f-b4f61186ef44.roa (raw, json)
Hash identifier: PLKdXeBOhbu5oOzaizCSOog+SDttYZ50m6gBlPPdm1w=
Subject key identifier: DE:CD:B4:5B:52:EB:3B:08:EA:8E:A6:A9:D8:74:F7:34:63:5F:F8:FA
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: DBA8B463B578CE1C31F982C0D834F125ABE7E5
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa
Signing time: Mon 27 Jul 2026 03:00:41 +0000
ROA not before: Mon 27 Jul 2026 03:00:41 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 40045
IP address blocks: 2605:9cc0:c1c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
db:a8:b4:63:b5:78:ce:1c:31:f9:82:c0:d8:34:f1:25:ab:e7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Jul 27 03:00:41 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=70e046cd7014523e82f50faaf0acac69e8f193db997d88bca6200784004f4eec, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a6:25:f4:fe:0b:87:24:6d:ec:13:05:9a:f4:
65:16:b6:ed:ad:5f:61:73:bb:17:a7:48:ea:0e:63:
e3:2a:d6:29:d5:ce:e0:67:d9:6d:ba:e4:fe:f8:08:
73:c6:36:14:ca:55:7e:7f:ac:86:39:aa:79:b2:09:
41:6d:7d:3c:18:1f:c2:71:8f:9a:85:d0:b4:a9:8e:
23:17:70:45:ab:8b:a8:b2:20:6d:2e:2b:0b:ab:9d:
98:2c:40:a6:c3:1f:2a:6f:2a:1e:1b:09:82:7a:47:
23:fb:3a:98:52:70:18:d3:ad:58:63:89:76:02:98:
f3:48:e3:22:76:fa:56:9c:9d:20:b8:bb:a2:79:63:
68:76:81:8c:53:7d:68:e8:01:1c:5a:f7:c9:01:c5:
51:12:54:78:ef:03:8f:d4:00:df:ab:a7:0f:f7:da:
0d:a8:ff:4e:48:9e:41:e7:93:12:d1:10:20:dc:d1:
7d:02:ff:64:cf:1c:05:88:97:93:7b:5b:f0:72:01:
4f:cb:75:3e:03:d6:98:50:30:7c:19:72:2b:8d:73:
95:32:bf:44:43:a1:18:e2:14:c2:96:7a:bd:66:a6:
bb:46:7b:b2:28:94:37:8e:68:c7:5b:9f:92:c0:6e:
cf:2e:51:44:72:1f:04:4a:f8:cd:e4:62:0d:7e:b3:
25:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:B4:5B:52:EB:3B:08:EA:8E:A6:A9:D8:74:F7:34:63:5F:F8:FA
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/a3459b28-5505-461b-b15f-b4f61186ef44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c1c::/48
Signature Algorithm: sha256WithRSAEncryption
79:4f:30:d6:94:5d:20:dc:39:51:1d:a6:54:97:bf:9b:9a:4a:
fb:8a:65:9d:11:e5:d2:9f:a8:7d:1e:c9:77:89:c1:f6:fd:90:
ce:0c:c1:a0:60:00:78:01:c1:7c:97:65:ce:9c:f9:3d:46:90:
a0:91:fc:77:ce:6e:bf:b8:56:03:7b:35:01:5d:40:eb:f7:67:
88:17:70:a2:02:d3:bd:55:9c:68:13:54:87:a6:71:08:10:10:
6d:33:67:04:c0:73:47:44:18:23:a9:8b:9c:dc:4b:6a:33:49:
ee:5e:2e:ee:2f:f1:78:d7:cf:c6:ca:4d:95:fd:ed:8f:33:e8:
65:14:c5:ef:57:27:25:28:3e:52:14:1a:c7:0a:1b:d4:6d:05:
2b:33:9c:d8:02:c1:38:ee:16:e5:ea:0a:ec:6a:7d:f9:ec:87:
11:fb:9a:5b:c3:2f:a3:9a:36:7b:07:0b:19:6a:c7:3a:b1:71:
25:b3:7c:fa:a3:e7:8e:ea:77:86:1a:ec:99:7c:b5:6c:6b:53:
8e:44:49:d5:33:a0:42:5c:c9:8e:66:38:ec:4d:a0:6d:b3:6d:
90:35:26:d0:09:4d:f4:78:2c:2a:22:e6:d6:3f:1d:c4:76:63:
22:e1:72:d3:1a:49:2e:87:53:96:38:6f:f2:9c:88:10:c3:d9:
d7:3f:45:cb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:23:51 2026 by rpki-client