
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa
File: f67723c2-64ad-4374-9b2b-3c1633b90448.roa (raw, json)
Hash identifier: jgDmbDaeaOF73Lphd6FlRxw86UhQh0BcZSuX14jQ6mc=
Subject key identifier: 79:95:56:3E:FB:49:90:91:24:EC:14:56:C0:1B:83:4F:E0:0F:16:06
Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Certificate serial: 0E4F346CD6C89C2A9B52F10FC3B12EE0A06D37A8
Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa
Signing time: Tue 19 May 2026 03:50:03 +0000
ROA not before: Tue 19 May 2026 03:50:03 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 8987
IP address blocks: 2605:9cc0:39c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:4f:34:6c:d6:c8:9c:2a:9b:52:f1:0f:c3:b1:2e:e0:a0:6d:37:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424
Validity
Not Before: May 19 03:50:03 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=dd5881f01a4237864a343df353ec1cd52b42b18c87bb0396405dbd52296d88e3, CN=f7243785-46de-414b-9b8f-7a9699e979e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6a:9e:5e:60:43:d1:87:0c:e0:6a:b5:67:b4:
cb:17:b9:06:27:b5:98:4f:25:97:a9:14:ac:04:05:
43:c4:98:40:ea:5b:e9:ef:12:df:cf:cf:3b:fa:c3:
fa:67:a5:7e:ac:64:30:d2:97:6c:e2:4f:ba:b2:67:
a6:03:80:05:0a:5a:66:d3:97:c8:f5:e4:d4:28:23:
fd:d0:dc:71:48:1f:60:90:c7:03:ad:1c:70:3d:b4:
ce:01:93:5a:cd:f1:15:b0:85:c2:4f:50:39:4f:18:
68:68:98:6f:52:08:e8:09:18:40:45:92:fe:11:c7:
16:53:73:e9:70:c7:7f:44:23:e4:d9:0f:f0:6e:b9:
2e:93:8a:78:02:e3:79:84:fd:49:6c:6a:d5:32:c5:
23:ab:36:f4:7d:8c:72:23:fa:92:aa:85:0e:3f:6e:
32:5b:11:34:d2:15:c8:2f:41:d2:bd:91:4a:0f:b7:
12:26:6b:34:dd:76:f2:a6:3f:d7:f2:5c:b2:32:08:
a1:a0:59:81:61:85:db:27:11:83:ff:49:47:43:3c:
74:23:59:4b:de:14:cf:fb:b7:9f:ac:03:e2:67:1e:
94:fa:36:de:35:e2:6e:70:df:48:5f:eb:52:bc:de:
42:b7:5b:87:39:c7:05:8e:9c:2f:75:56:06:97:ed:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:95:56:3E:FB:49:90:91:24:EC:14:56:C0:1B:83:4F:E0:0F:16:06
X509v3 Authority Key Identifier:
keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/f67723c2-64ad-4374-9b2b-3c1633b90448.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:9cc0:39c::/48
Signature Algorithm: sha256WithRSAEncryption
52:c5:34:bf:bb:a4:f8:44:fd:40:b5:0d:0d:5f:ab:cd:db:ab:
af:fb:40:88:7c:aa:60:37:a7:5f:41:a2:3d:c4:a8:47:90:57:
a3:a1:41:93:e9:dd:e6:84:b9:16:b2:b7:e3:f5:4e:e4:15:83:
72:c6:a6:e6:65:19:a8:0d:75:f8:21:b4:53:34:2c:49:b8:a9:
d0:71:06:90:29:54:15:c6:6b:47:6f:e8:b3:b0:00:2f:5a:bf:
1f:56:7a:8b:c6:46:f1:b8:8f:4f:4d:8c:ce:3b:6b:b5:a4:cb:
c7:6e:b2:71:e4:bb:71:cd:ef:c6:1c:9c:ea:70:40:1b:62:6c:
b8:88:d5:47:d5:ef:0e:8a:13:62:f2:50:b9:64:47:f6:48:ca:
a8:d7:4a:5d:4c:4d:73:e8:e8:47:e4:69:be:a1:4d:57:72:dd:
8d:52:28:98:3b:e3:a6:f8:6f:f4:20:2b:8d:3f:aa:e8:f7:5d:
a8:5d:a9:e9:fc:3d:92:59:6a:3a:1f:13:99:37:9a:f9:37:67:
9a:ed:19:2b:54:ec:5a:3e:63:80:b2:01:5a:e8:7b:d3:63:cd:
b0:86:77:b0:ee:76:33:1c:8e:31:23:10:82:5d:e3:47:92:fe:
bf:0b:34:11:c2:7a:3c:c2:2c:4a:6c:11:06:b7:d3:93:db:51:
07:cf:98:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:24:28 2026 by rpki-client