
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa
File: bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa (raw, json)
Hash identifier: RQdrUw6FKBYC0IuTtCXig1mWPWUupMxSlX8QjxSzt+8=
Subject key identifier: F3:6F:6D:24:AD:E8:33:BE:F0:F1:8E:B9:24:8C:5B:0C:D3:E6:42:09
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 4EE276885E21E7694E2415E7DC1C8970390FC3F7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa
Signing time: Sun 04 Oct 2026 00:30:14 +0000
ROA not before: Sun 04 Oct 2026 00:30:14 +0000
ROA not after: Sat 02 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 2606:8140:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e2:76:88:5e:21:e7:69:4e:24:15:e7:dc:1c:89:70:39:0f:c3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 4 00:30:14 2026 GMT
Not After : Jan 2 23:59:59 2027 GMT
Subject: serialNumber=650e41b895f6d8920cec071d9d76e0a4333714c7345a3e1f1492c2b3d68c730f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:78:2e:1f:35:f1:b0:29:b6:45:0a:7b:b0:6b:
d5:76:e2:61:0d:b2:7b:94:e7:be:e0:34:c2:15:37:
34:bb:b2:fd:d4:1e:d0:3b:be:67:5d:cd:46:db:e8:
f0:b1:c7:1d:7c:bc:c5:90:3c:47:1e:dc:4d:38:d7:
71:00:f7:31:3e:73:6b:b8:52:78:9e:ca:fa:3c:b2:
8a:55:29:07:27:85:3f:5b:a5:f9:93:9f:32:4a:55:
cc:00:30:2c:00:51:ac:19:75:9f:fb:be:c2:11:37:
f2:d2:d7:96:fe:07:ba:c4:b5:5c:a9:ad:e7:6a:72:
a3:9c:a2:c9:4d:ff:05:64:43:ed:74:68:98:8e:ad:
ab:5a:9b:bf:26:77:46:45:cc:d1:cd:29:42:e8:fe:
a3:b7:05:a2:a5:72:ad:58:bc:f1:a1:dd:07:eb:ec:
65:51:6e:7c:26:b9:c1:ed:97:7b:f7:46:52:e9:64:
83:f8:63:a2:22:47:8b:10:a0:b2:11:ec:0f:57:c0:
68:30:86:dd:c9:bb:af:b0:ab:05:a2:d0:7a:9b:b1:
0e:ee:30:5f:71:55:c6:aa:d9:02:42:73:7a:af:64:
eb:bf:b4:26:d0:5c:70:6b:36:2e:fb:61:ed:b6:f6:
4e:e7:06:11:e1:c4:6a:1b:c3:88:4a:55:8f:18:49:
69:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:6F:6D:24:AD:E8:33:BE:F0:F1:8E:B9:24:8C:5B:0C:D3:E6:42:09
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bba8191b-5b5b-4515-a3ee-493cab66a2dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2606:8140:100::/40
Signature Algorithm: sha256WithRSAEncryption
51:47:db:e0:c6:0d:42:18:7c:5d:c1:64:41:1e:28:4c:0d:da:
9f:cd:7f:75:0f:7d:c8:9d:14:7e:8f:09:cc:82:9e:77:01:55:
a9:d9:64:91:fd:72:d5:25:8e:c6:17:c5:b6:c1:a4:5d:b6:74:
00:a6:9c:fb:58:6e:99:c4:72:74:af:b5:38:96:9d:6c:e2:4d:
57:ed:60:45:df:cb:3f:1b:3f:52:4f:39:18:00:4f:0b:1a:f0:
e0:d2:99:d0:f3:c6:e0:79:9c:5f:84:e1:2d:bf:a9:01:ac:fa:
c8:32:08:34:22:ef:93:fb:5f:7c:a2:6c:49:eb:a4:30:73:0a:
25:c5:57:8f:50:ab:94:a8:c2:6d:63:8a:9f:d3:e3:21:73:21:
9e:00:a7:7e:97:14:eb:ec:23:a5:f0:68:a9:da:c2:f4:77:cf:
db:8f:16:0b:65:e2:20:7d:13:7e:83:76:24:06:36:d3:f5:ac:
cc:2d:a4:c1:46:cc:31:8c:f1:d9:2b:4d:4b:a8:aa:87:1b:bb:
2c:06:4b:9c:8c:7a:df:48:d2:97:90:34:76:86:b9:11:d8:55:
15:51:f9:55:90:7f:68:64:f0:95:74:33:8e:02:e0:82:f8:f0:
46:b4:03:e8:40:12:50:89:d1:e4:ed:7f:c1:6f:42:82:87:a1:
c4:0e:67:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:41:23 2026 by rpki-client