
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa
File: 26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa (raw, json)
Hash identifier: i8F2+lTZcBFwOal+7juO2pIcAMmTJJYjS3ZoYwWuSHQ=
Subject key identifier: 65:17:10:F1:19:A9:52:43:D3:5A:14:DE:08:C2:FC:08:1A:44:B8:CC
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 28D28F5AE0958D16CF78183298B4B1BF76904360
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa
Signing time: Wed 29 Oct 2025 00:10:12 +0000
ROA not before: Wed 29 Oct 2025 00:10:12 +0000
ROA not after: Wed 03 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:d2:8f:5a:e0:95:8d:16:cf:78:18:32:98:b4:b1:bf:76:90:43:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 29 00:10:12 2025 GMT
Not After : Dec 3 23:59:59 2025 GMT
Subject: serialNumber=6caf8f75cba12fdbb4d8c7088164647b3fb4899873c9c98d1b7d620ea9382282, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:6b:07:9a:4f:dd:d8:de:8c:33:d2:cb:8f:
a1:e8:8d:ef:09:4d:3b:1c:86:e3:b6:ca:b5:d7:aa:
59:9c:44:16:53:4e:63:4c:31:bd:92:81:ef:48:ab:
2e:23:c9:be:a4:ac:f7:9a:86:f0:1d:50:bd:1d:c9:
eb:61:74:51:b4:7c:95:cc:49:da:98:c8:19:1e:5e:
f5:6d:26:68:be:e2:7c:05:ca:29:ca:d1:81:bb:68:
b2:b4:ba:08:8d:dd:63:5c:51:b2:d8:a5:83:30:fc:
78:51:3d:1c:ae:d8:87:2a:b4:29:82:60:ee:28:d9:
0a:0a:e0:c3:6c:b6:8f:e4:89:a4:0b:49:25:83:14:
d7:12:da:56:aa:81:26:d5:40:de:b8:7e:8b:c7:e6:
79:49:26:43:5d:b7:32:56:46:61:44:f1:3b:28:93:
ce:8b:4c:65:2c:c1:3d:9a:86:f8:e0:58:cb:c9:9f:
25:82:f0:5f:e8:83:fb:a5:ff:ec:ff:57:71:70:81:
b1:40:dd:0e:e3:8f:a4:10:7e:e3:b2:3b:5e:7f:4b:
3f:ea:3d:76:dc:e3:fd:40:43:47:e7:28:c0:69:a3:
e5:85:e9:81:18:b1:ef:86:0f:2a:37:0a:6a:44:36:
39:9d:a7:f7:3f:0a:88:ad:d5:87:60:c4:00:db:40:
30:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:17:10:F1:19:A9:52:43:D3:5A:14:DE:08:C2:FC:08:1A:44:B8:CC
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/26d77bd4-20cb-42ee-8bae-c418156ab7e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:f9:ae:65:93:10:b9:f8:a6:a8:56:4a:95:8b:a6:80:5a:d7:
85:ea:4e:9c:56:c7:4d:c0:85:7e:2f:44:2b:7e:0c:7c:aa:e0:
75:59:d8:29:1f:3d:97:8c:08:b3:87:e3:a1:20:cf:73:53:a4:
fd:79:05:ad:da:57:b4:83:dc:16:46:fc:ca:f5:4f:c5:68:6a:
c5:77:70:17:10:61:b4:9c:e4:93:28:52:18:96:69:f3:15:37:
91:57:d1:6e:4a:c0:f4:e9:18:6f:b9:96:43:5a:bb:e5:8e:a8:
e5:49:e1:81:ef:33:29:79:9e:24:22:41:6e:9d:7b:5c:86:b5:
5a:e4:5d:a9:44:b2:f3:57:1f:b6:60:93:3e:5e:5d:ae:ad:29:
c2:db:d2:bc:71:bd:74:09:86:da:2e:3e:b1:36:43:77:e1:d8:
3d:98:1c:8d:0d:ba:1b:19:1f:74:a9:33:95:3f:e6:8a:4b:a9:
b6:4d:77:2d:62:f3:5d:13:fb:d4:f0:1f:69:70:d5:64:70:f3:
a4:1d:a5:34:37:48:27:ef:e0:2f:88:b7:3b:da:b4:ba:c7:db:
9e:b7:f2:8c:58:ad:7f:5b:8f:64:03:ac:9a:6d:ce:0f:62:70:
41:26:2a:8c:50:76:ad:33:c7:58:03:9a:8f:1c:f3:fd:51:98:
6e:2c:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:53 2025 by rpki-client