
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
File: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (raw, json)
Hash identifier: nQ2VisFbxxqEJ70XRveXluCQy7tUXMnJRIhZgrdn6u0=
Subject key identifier: A0:AA:5D:3D:42:E0:B5:C1:8F:45:A2:B1:1D:E5:19:81:D4:76:61:E6
Certificate issuer: /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial: 28D0F8BA8173C75F66A1EA048A8E9D8ACD3EE882
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
Signing time: Mon 27 Jul 2026 00:00:38 +0000
ROA not before: Mon 27 Jul 2026 00:00:38 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 2605:b140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d0:f8:ba:81:73:c7:5f:66:a1:ea:04:8a:8e:9d:8a:cd:3e:e8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Validity
Not Before: Jul 27 00:00:38 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=d5595ef157f37e47aa886df741b42dbc3647d3b3da8d78510f686a92aa88df26, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:80:31:91:d2:e0:3b:e2:2f:cc:c1:e2:cd:
d7:4e:1e:da:89:5c:01:cf:89:ed:89:db:f6:17:33:
f8:14:3a:03:7c:59:03:4d:b3:ca:c8:93:7b:55:5f:
0d:a5:40:7c:38:f5:8c:e5:71:21:a6:b0:05:e4:3d:
64:30:17:9d:b9:e1:7e:3e:2f:00:f5:da:b3:20:ed:
59:e1:b9:73:2a:b1:38:bd:5d:9c:d0:8e:e4:04:46:
5f:ff:a0:91:ed:cc:e3:53:4f:71:45:1a:f3:a0:c4:
46:ce:78:77:93:8b:55:90:48:8e:63:97:8b:ca:6d:
9a:fb:bd:62:1c:ca:c9:66:01:88:c6:f3:a1:59:19:
30:01:31:a4:3e:bc:32:b9:60:16:e9:49:45:f3:82:
5d:2f:70:7f:61:f0:a6:e3:0c:74:a7:11:b3:8d:3e:
52:c1:25:b7:6d:d8:08:41:52:ca:f9:4b:27:14:fd:
22:d4:4c:73:60:08:d1:10:2b:cc:a7:6c:ad:94:73:
0d:c9:df:51:d2:d4:88:f6:9f:61:ea:78:6a:95:08:
99:e2:dd:24:1f:36:77:9d:a4:0a:5c:55:c9:3e:3c:
46:43:a4:e5:d5:f3:00:28:3a:f1:bb:d9:a3:a3:db:
86:19:0e:43:c6:94:72:7d:93:aa:6a:3a:58:7c:8c:
68:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:AA:5D:3D:42:E0:B5:C1:8F:45:A2:B1:1D:E5:19:81:D4:76:61:E6
X509v3 Authority Key Identifier:
keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/66edf542-bd09-43ab-8640-a67a7cbe5a17.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2605:b140::/32
Signature Algorithm: sha256WithRSAEncryption
7f:73:2c:68:29:f0:10:68:09:5b:af:21:60:cb:73:e2:ae:9d:
72:6d:c8:3f:58:50:b1:51:d6:67:c9:83:29:eb:35:05:28:a5:
ea:45:10:d2:ec:5a:9a:af:6e:6d:4b:0c:a6:f1:3e:ee:e7:9a:
65:78:20:cc:6e:14:df:9d:e7:d7:91:5e:ba:1a:32:c8:f9:39:
a5:6d:db:a3:88:6e:8b:55:29:1b:10:ac:f5:b3:bf:39:2c:f8:
f0:0b:83:ae:ce:fe:02:19:42:73:9f:35:85:ca:1b:9b:5c:a2:
79:d4:4b:ff:95:bb:57:c0:7c:ba:99:31:2d:72:bc:5f:2f:62:
68:b7:98:c3:2f:e2:bc:a0:b5:9b:96:0a:c4:0a:8d:95:e4:6a:
26:3f:c0:96:27:00:c4:21:7d:5c:50:be:6f:1a:20:73:11:86:
bf:b2:f9:fc:98:4a:cc:c7:46:b4:01:92:9f:e7:d8:b0:28:54:
7f:18:dc:f2:7a:1c:db:44:da:95:b5:fa:59:f6:ee:69:d9:2f:
77:b5:a7:8d:e9:6f:cf:65:e1:a0:f0:a0:92:7f:63:9b:e5:02:
89:e6:0a:31:bc:55:cd:fb:17:12:a2:61:44:f7:45:87:cd:81:
be:5b:e1:15:f7:67:87:c8:8d:e3:85:f9:f5:3c:9e:1b:6a:ea:
96:d2:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:22:48 2026 by rpki-client