
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c91e5573-a757-4c6b-9000-0403e0e4fa00.roa
File: c91e5573-a757-4c6b-9000-0403e0e4fa00.roa (raw, json)
Hash identifier: G8WY9JzhntUJQRsZ48+jGvqLAdfa3r+o/aOuyg2iM28=
Subject key identifier: DA:A7:BB:E7:3B:89:D7:68:2D:AE:29:84:9B:74:14:0F:35:63:6C:A1
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 4A3A03FD398F7DF43E9307791BD700D2BD0B01C9
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c91e5573-a757-4c6b-9000-0403e0e4fa00.roa
Signing time: Tue 19 May 2026 04:01:00 +0000
ROA not before: Tue 19 May 2026 04:01:00 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:544::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:3a:03:fd:39:8f:7d:f4:3e:93:07:79:1b:d7:00:d2:bd:0b:01:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 19 04:01:00 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=d882f7300ec89a16131a9a8068dc65827a5a317db567805fae12fcb22538eea6, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:02:fa:45:a2:0f:53:ad:8f:86:7b:2a:6a:
d9:53:c9:7f:bd:cf:59:ff:db:4b:50:0b:ae:98:34:
16:66:53:41:89:eb:39:88:00:d4:43:54:55:b0:3c:
24:38:40:55:b2:a1:36:ae:08:ea:64:3d:24:53:60:
90:eb:5f:6e:62:d6:6c:1c:e9:e3:d0:63:a4:b0:81:
d3:e1:86:19:b1:c8:0f:8b:c2:27:20:9e:49:aa:21:
af:58:c0:75:41:2a:e5:3b:54:32:5e:0b:10:f4:b8:
9a:8f:7f:6a:46:03:dc:68:e3:87:4f:7e:97:f1:d9:
b5:25:c1:88:a5:bf:07:53:e0:b8:45:c0:08:17:ea:
20:f9:47:4e:09:ac:fa:16:5a:f7:1a:a7:34:f0:dc:
a3:1e:45:bd:11:c0:eb:70:d4:9f:b3:9a:40:99:4a:
20:87:5d:f9:68:e3:e6:f5:4f:b4:49:46:8a:93:76:
e6:04:38:d8:69:06:a5:51:ef:91:44:2e:f5:48:2d:
01:87:19:ae:69:9f:9c:6b:7b:bb:63:76:66:2d:db:
5a:a2:c4:48:f1:3a:f7:72:dd:bd:43:06:89:d7:a9:
4b:f7:ff:c2:e4:87:31:38:79:16:e1:ff:2e:c5:a2:
5a:bc:64:db:14:6b:09:57:23:b4:66:af:c2:51:fb:
f8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A7:BB:E7:3B:89:D7:68:2D:AE:29:84:9B:74:14:0F:35:63:6C:A1
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/c91e5573-a757-4c6b-9000-0403e0e4fa00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:544::/48
Signature Algorithm: sha256WithRSAEncryption
ab:fc:e6:49:ff:30:18:af:e5:58:0d:6b:07:36:40:6f:85:fe:
e2:c0:52:54:68:45:ce:a0:de:4f:16:8f:00:ff:dc:56:6c:61:
a7:ac:f7:ae:1b:46:75:39:20:9f:83:e7:48:2f:b9:dd:89:fb:
bc:94:9b:c8:95:47:70:23:f0:7c:8e:4f:5a:83:67:88:d5:c6:
70:8e:77:68:6e:db:8e:4e:4c:67:71:47:7c:47:4a:ee:b7:c8:
b3:63:ca:e3:47:aa:8b:e3:28:9c:31:fc:c1:0e:b4:fe:15:81:
70:5a:28:23:ad:99:61:74:40:eb:62:4f:05:f7:24:45:d2:3a:
24:c5:80:28:bb:c5:64:fb:1b:c1:9e:a0:3f:49:d5:bf:6d:6f:
5b:a9:c5:0f:05:e9:91:eb:a2:fb:f1:06:14:4c:83:62:0c:fd:
6e:78:2e:0a:eb:21:e4:fc:2c:be:b2:4b:4f:78:14:e8:62:7f:
5f:90:7f:fc:af:03:be:b9:1f:ed:53:b7:8f:a3:3f:f9:08:f1:
5f:bd:58:24:a3:90:f0:ac:30:72:23:77:69:88:a1:b5:17:3f:
32:a2:03:6a:c3:49:2e:68:ac:e2:2f:ea:1b:93:fa:b5:e0:e0:
04:51:ac:99:9c:92:5d:74:d0:9b:d8:7d:7f:30:0f:eb:f0:d0:
fe:d5:f2:05
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:01:30 2026 by rpki-client