
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
File: 161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa (raw, json)
Hash identifier: KhP2iERbZo7sIGsvKsVjACR8Wqwx5upeNxOKtIoAfuI=
Subject key identifier: 0A:6E:0D:6C:31:B2:3B:B6:E5:F5:B0:E8:AC:8A:D0:20:E0:BA:E2:A7
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 324C0D86162F31DBCA0BC9C772A70C4C2828A876
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
Signing time: Fri 15 May 2026 00:10:07 +0000
ROA not before: Fri 15 May 2026 00:10:07 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:4c:0d:86:16:2f:31:db:ca:0b:c9:c7:72:a7:0c:4c:28:28:a8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: May 15 00:10:07 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=1e1c45c9a1258df5dccefbf1884419bb80b22b12b6f75bf5dd345a5d3acbb1f1, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:58:4d:65:4b:9d:60:e7:ce:6e:84:13:8f:
bd:ab:98:9c:e0:be:06:3a:2d:09:2a:83:cf:8d:57:
99:81:f4:26:13:4f:1f:8d:f2:08:14:19:91:bb:3a:
21:89:bf:0c:01:e9:6d:69:69:ad:71:bd:be:fc:6c:
55:2a:5a:77:11:99:1c:3d:fb:3f:4c:e7:5e:fc:d0:
ca:c9:61:bd:c6:7d:92:d7:c6:57:6f:fe:78:5a:fe:
0e:33:08:3a:ca:da:0d:ca:65:f4:bc:e2:fd:03:78:
30:0f:3d:dc:84:51:8e:c3:9e:2d:c4:8f:63:ca:2c:
2c:12:bd:ec:ad:c0:2e:f1:a8:79:30:50:39:08:1d:
ce:3e:45:cc:c6:c9:4f:ac:97:5c:ac:39:e2:35:1d:
9d:07:f3:81:8c:1a:a2:86:e9:0e:8d:44:ae:01:85:
24:23:f4:10:93:4a:d0:24:08:c8:f6:83:5f:77:d9:
cf:f2:c8:2d:e7:a1:16:01:bc:12:87:ab:4a:6a:30:
c2:6d:15:90:c6:60:65:cc:16:5a:8c:d5:5c:9c:d5:
ce:08:9e:fd:6d:3c:d0:92:47:30:61:f4:ff:08:31:
dc:9f:0b:90:05:bc:8e:ec:64:2e:a8:a7:05:ab:c1:
1d:c5:6b:56:bc:16:40:4a:0b:e4:a4:8c:06:92:ab:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6E:0D:6C:31:B2:3B:B6:E5:F5:B0:E8:AC:8A:D0:20:E0:BA:E2:A7
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/161fc1b3-35e6-4e0b-9781-62c5b6f6a5bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.244.0/23
Signature Algorithm: sha256WithRSAEncryption
90:88:37:b5:ea:8e:b8:45:c7:22:0e:26:27:01:c8:5a:37:7c:
06:ab:8b:00:be:8a:93:b1:e7:59:6a:01:5f:a0:61:65:23:2b:
c3:2a:ea:a8:7f:ed:b7:9d:e9:a0:79:3a:57:a1:d4:10:b4:7d:
0d:22:60:72:50:d5:25:14:cf:c8:93:26:38:f6:d0:be:7b:8a:
b0:9e:b7:9d:cb:82:64:fb:bc:86:1c:2a:ab:88:ca:dd:5d:46:
34:64:8b:24:df:bf:db:d1:fb:ae:d3:4a:68:bd:dd:21:39:7c:
36:04:1b:b6:1e:cb:13:cf:e4:62:0b:35:10:e9:2f:86:0a:9c:
73:e9:d1:d9:0e:59:7f:09:9b:9f:f5:20:bc:55:07:7c:fd:f3:
fd:02:6e:5e:17:4a:9f:38:83:d2:8e:8b:a9:42:f9:04:3b:27:
17:91:50:c9:fb:fb:ce:0c:01:98:88:00:19:9d:c6:82:2f:00:
e8:f4:fc:9e:ae:84:a3:0f:f2:02:00:1b:c2:f5:a2:14:7a:e5:
cd:96:44:6c:17:6c:a1:22:97:05:a1:b4:ff:51:68:2c:78:2b:
ab:14:05:00:d1:34:91:6b:ea:c2:a5:9d:98:ac:d3:8d:d5:34:
5a:32:1e:0a:54:27:7d:9b:53:4e:fe:b6:16:f8:2e:fc:65:43:
a1:1e:85:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:36:17 2026 by rpki-client