
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
File: 5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa (raw, json)
Hash identifier: FbIiMnMqkp2T6dH0NsUc0QpVA6MmfCSnihL3vHRFrv0=
Subject key identifier: E8:45:90:47:01:AD:97:F9:EB:91:B9:7C:47:D4:97:AA:C9:61:8B:D1
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3481373D4290B3415EF6A3D0969DED11BD40C4EA
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
Signing time: Thu 22 Oct 2026 00:10:09 +0000
ROA not before: Thu 22 Oct 2026 00:10:09 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 10 Nov 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:81:37:3d:42:90:b3:41:5e:f6:a3:d0:96:9d:ed:11:bd:40:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 22 00:10:09 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=4a81588d872fbb1805a0149ac0f3e5f934a858aad25c0ea4eab5fcdd82002a4b, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3c:85:e3:3a:99:45:6b:f9:cb:ea:3d:95:31:
42:3d:f3:2b:e2:56:ef:34:95:7f:8c:cb:07:9a:a1:
ce:e8:3d:d9:45:de:7a:46:39:d9:ed:36:63:7d:52:
b9:a4:a7:26:58:c6:f6:88:81:35:9c:16:89:79:72:
33:a0:71:ad:ed:90:44:30:86:63:98:20:7d:c6:56:
20:48:c4:73:57:91:0e:be:12:a9:cd:76:8c:ad:65:
2d:a8:62:ad:1d:0a:8d:73:4e:38:61:76:4f:36:2f:
36:aa:c9:b4:20:79:4c:af:a9:3f:19:e2:a8:10:30:
a0:b6:4a:cf:42:71:49:20:35:12:74:54:27:e7:5e:
25:13:75:de:f0:c4:e1:15:26:08:00:9d:4d:66:68:
0c:7d:45:c0:a4:b4:02:f2:2c:42:87:40:f3:3f:bf:
fe:ce:c0:08:3b:f2:a9:8e:a1:d4:70:22:f6:ca:84:
0e:1f:dc:be:c2:ff:93:0d:9a:32:37:5f:8d:04:5f:
e3:6a:7d:eb:fc:df:32:f1:68:bf:29:fe:0f:46:9b:
c5:54:76:b2:47:56:cd:ae:81:0e:6f:61:e0:6a:eb:
44:f7:16:28:04:f2:90:01:0c:de:7c:e5:57:1d:14:
57:7d:02:2f:50:94:e5:44:16:d4:1e:09:95:dc:9d:
ac:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:90:47:01:AD:97:F9:EB:91:B9:7C:47:D4:97:AA:C9:61:8B:D1
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/5d3e8652-f410-4c92-b5a2-7173c9ab4ea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.235.0/24
Signature Algorithm: sha256WithRSAEncryption
06:59:45:64:c0:88:f5:a1:2a:74:10:79:a8:fc:7b:97:1a:67:
8b:a6:30:7a:ee:eb:55:42:0f:b8:59:e9:f6:ac:10:06:9f:1c:
3b:be:0f:a1:37:dc:a0:7c:44:63:0d:75:5b:d5:bb:c3:0b:d9:
98:e2:d0:9d:aa:3c:9e:e2:d3:18:a0:b1:36:20:ef:12:8a:4d:
34:0c:28:7b:a2:89:08:72:b7:09:77:c0:e1:b0:4d:bb:1c:8d:
b0:75:0e:3f:c6:9c:bf:97:c2:b2:fc:5f:17:36:54:3c:52:5f:
aa:1d:b4:09:3d:2c:7e:8a:ba:08:a5:c1:b1:73:72:bd:78:1b:
7a:a5:4e:e9:32:50:36:fc:6a:c2:48:52:97:ee:cc:44:1f:2f:
67:5b:ad:1b:49:4d:4c:ed:dd:0c:0e:16:b8:4c:5b:31:db:f6:
01:3b:61:92:12:cf:71:51:4c:20:18:30:92:70:13:5d:99:9c:
26:e3:0f:5e:29:76:8c:db:63:f5:0c:1d:73:92:e4:56:b1:6a:
ba:1c:d6:00:5b:cf:bf:a8:1f:1d:4b:57:4a:66:3c:a6:94:d5:
88:5b:1d:4c:f6:52:ca:bf:e5:0a:ab:22:00:7f:1f:e7:37:c1:
68:96:06:a2:74:62:d4:78:9a:ee:24:b2:7c:46:bb:49:34:5f:
7b:ad:e3:85
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUNIE3PUKQs0Fe9qPQlp3tEb1AxOowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDIyMDAxMDA5WhcNMjcwMTIwMjM1OTU5
WjB6MUkwRwYDVQQFE0A0YTgxNTg4ZDg3MmZiYjE4MDVhMDE0OWFjMGYzZTVmOTM0
YTg1OGFhZDI1YzBlYTRlYWI1ZmNkZDgyMDAyYTRiMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCuPIXjOplFa/nL6j2VMUI98yviVu80lX+Myweaoc7oPdlF
3npGOdntNmN9UrmkpyZYxvaIgTWcFol5cjOgca3tkEQwhmOYIH3GViBIxHNXkQ6+
EqnNdoytZS2oYq0dCo1zTjhhdk82LzaqybQgeUyvqT8Z4qgQMKC2Ss9CcUkgNRJ0
VCfnXiUTdd7wxOEVJggAnU1maAx9RcCktALyLEKHQPM/v/7OwAg78qmOodRwIvbK
hA4f3L7C/5MNmjI3X40EX+Nqfev83zLxaL8p/g9Gm8VUdrJHVs2ugQ5vYeBq60T3
FigE8pABDN585VcdFFd9Ai9QlOVEFtQeCZXcnawjAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU6EWQRwGtl/nrkbl8R9SXqslhi9EwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzVkM2U4NjUyLWY0MTAtNGM5Mi1iNWEyLTcxNzNjOWFiNGVhMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABFqeswDQYJKoZIhvcNAQELBQADggEBAAZZRWTAiPWhKnQQeaj8e5caZ4um
MHru61VCD7hZ6fasEAafHDu+D6E33KB8RGMNdVvVu8ML2Zji0J2qPJ7i0xigsTYg
7xKKTTQMKHuiiQhytwl3wOGwTbscjbB1Dj/GnL+XwrL8Xxc2VDxSX6odtAk9LH6K
ugilwbFzcr14G3qlTukyUDb8asJIUpfuzEQfL2dbrRtJTUzt3QwOFrhMWzHb9gE7
YZISz3FRTCAYMJJwE12ZnCbjD14pdozbY/UMHXOS5Faxaroc1gBbz7+oHx1LV0pm
PKaU1YhbHUz2Usq/5QqrIgB/H+c3wWiWBqJ0YtR4mu4ksnxGu0k0X3ut44U=
-----END CERTIFICATE-----
Generated at Mon Nov 9 07:55:13 2026 by rpki-client