
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa
File: d4e0833b-3ace-4211-a7aa-b56839feaad7.roa (raw, json)
Hash identifier: 7XJcTxMjWeARp1LdrPGLUijxzQzyTdoI4NdcbYghaJg=
Subject key identifier: 37:05:61:F2:3A:E0:71:0A:2B:C4:8B:1B:9D:38:DF:7F:7B:5F:97:BA
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 56F70294CF49C332EAA95BF7CAF071ED47319526
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa
Signing time: Sun 11 Oct 2026 14:50:24 +0000
ROA not before: Sun 11 Oct 2026 14:50:24 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 40045
IP address blocks: 2605:9cc0:c1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f7:02:94:cf:49:c3:32:ea:a9:5b:f7:ca:f0:71:ed:47:31:95:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: Oct 11 14:50:24 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=adcb0cb17aaad538953bace358ebda8903288d19f7eab8a13ab63f84127d424b, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:a9:48:d1:df:30:27:0d:55:40:be:c1:a3:
36:f4:31:b8:80:23:3b:fc:af:f8:2f:8f:18:45:be:
9e:d6:79:db:2e:3f:9a:30:b1:e3:0a:5d:90:f2:a5:
d7:71:7f:9e:36:70:36:2f:f0:db:e5:7d:b4:cc:d9:
9e:6c:93:dd:11:78:22:10:af:89:38:34:df:72:42:
2b:5a:6f:77:73:89:6c:16:c4:17:89:c8:fc:38:5c:
0c:70:24:15:86:44:17:23:12:d7:2c:fb:49:a1:c5:
d2:f0:18:61:6e:fb:f7:24:ba:ea:93:e1:71:1c:13:
f6:25:cc:0c:54:16:6c:76:0f:89:1b:13:e2:b5:27:
b2:23:b7:85:2b:80:c8:7f:de:18:f3:2b:70:7b:bf:
da:f6:78:70:ba:a0:f5:b3:0f:41:e8:20:5b:d3:fe:
cf:b3:7d:fc:b5:55:89:51:da:d7:05:af:f1:9a:36:
76:79:52:74:8f:65:b1:ad:7a:db:67:95:e0:90:8f:
c9:9b:d9:69:89:ab:23:b4:24:4a:32:81:2c:b5:28:
53:b8:1f:84:a0:68:a0:46:9b:de:fd:56:35:3a:68:
f5:40:3a:1b:9d:ac:06:c2:91:e8:d6:51:73:0f:cd:
40:0d:db:09:7d:7c:01:5a:12:dd:8f:7e:c3:9d:f7:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:05:61:F2:3A:E0:71:0A:2B:C4:8B:1B:9D:38:DF:7F:7B:5F:97:BA
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/d4e0833b-3ace-4211-a7aa-b56839feaad7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:c1e::/48
Signature Algorithm: sha256WithRSAEncryption
58:b2:1d:1d:15:93:ad:af:8b:e6:31:6b:ee:6f:e0:cb:bb:44:
23:69:2f:cb:c3:67:de:29:a0:d9:01:9a:8c:89:3b:05:fd:10:
2d:be:1f:f9:dc:0c:6d:eb:cd:13:90:9c:c9:d6:0c:3a:6c:f6:
4b:1b:1a:e3:67:79:81:46:b6:49:62:91:78:ec:d5:c4:af:9f:
42:e6:ba:f2:97:17:6e:ca:b5:86:39:15:c2:fe:b5:67:60:3a:
65:18:2f:75:40:a5:67:70:03:1f:ab:56:3d:d3:9e:ff:8e:80:
3a:58:91:c1:bb:b8:57:21:90:e3:83:85:2f:f5:5c:2d:2c:b8:
ee:f7:92:af:de:88:e6:eb:30:22:88:11:e5:bf:aa:10:e8:aa:
69:85:6c:26:d9:80:07:2a:db:4d:46:e7:9c:3f:73:6f:36:8a:
d2:1c:64:45:36:e2:aa:fb:69:a1:60:72:75:82:40:0f:8a:75:
e6:27:e0:68:e5:a6:23:9f:52:94:08:4e:74:c2:0f:c7:41:26:
d0:b7:83:f8:38:e1:80:93:af:99:4e:22:25:91:af:2f:65:21:
da:7f:4c:ef:6d:e1:cb:15:cb:d7:a0:43:af:52:58:93:ba:1d:
08:54:90:c3:92:4a:be:eb:8c:76:06:c9:27:c7:d7:92:45:0b:
d5:40:f4:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 8 04:16:42 2026 by rpki-client