
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
File: 8f549665-8398-44a1-8d57-5658d76e1c61.roa (raw, json)
Hash identifier: G33YWgH2pt5s1YdRmZ/X8YHm2zelirzShSTG37/uBOY=
Subject key identifier: C7:40:58:B4:05:1E:C7:1B:C3:69:C5:EC:8A:A9:12:2F:04:8F:95:B4
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1E1647E59012E954EE46C79C35D1E4C797258D1F
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
Signing time: Thu 22 Oct 2026 00:10:07 +0000
ROA not before: Thu 22 Oct 2026 00:10:07 +0000
ROA not after: Wed 20 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:16:47:e5:90:12:e9:54:ee:46:c7:9c:35:d1:e4:c7:97:25:8d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 22 00:10:07 2026 GMT
Not After : Jan 20 23:59:59 2027 GMT
Subject: serialNumber=4c6d22162cd203bf623d164933a0a6aaa2104ba4350503e5306c07de5d6049cf, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:d9:87:fb:29:ba:4c:33:47:6e:29:0f:8e:30:
85:bc:9b:56:f4:99:f3:1e:69:64:9b:32:c7:6a:d2:
90:e5:6d:f1:da:f7:ce:b8:90:53:4d:23:30:4c:18:
31:a7:f2:fe:49:8b:74:22:2f:5c:ad:37:4d:2b:95:
8d:91:1e:67:86:55:e0:81:bf:34:99:02:fc:cf:31:
d0:67:ba:b7:ce:1f:c9:3b:5d:a7:09:3d:1a:d1:3d:
4c:d4:fd:97:22:ac:52:b0:4e:0f:d8:3c:34:63:ee:
2b:47:1f:2c:6f:11:79:76:ca:a9:aa:88:96:e2:e4:
81:87:76:73:17:7f:32:ea:cb:46:44:93:73:bd:03:
44:6b:6c:8a:6e:02:bc:6b:10:76:fd:d6:8a:0b:a1:
15:26:c1:4d:d4:ef:3f:0d:9a:22:67:72:0d:df:43:
af:3c:10:a1:f2:10:d2:3e:b2:22:b3:7b:e5:2d:36:
98:8e:c5:97:e1:90:24:b7:2c:db:32:10:3e:02:85:
b5:97:ac:b1:ad:ab:8c:73:b7:ad:bc:b8:73:ff:fd:
73:4d:ee:17:24:13:8b:b3:99:d0:63:60:39:c6:2c:
1f:c5:6b:6a:50:e4:4b:a8:78:13:5b:09:37:86:69:
96:13:f8:e2:96:77:fe:9b:d5:4b:c4:f7:d1:e9:da:
ea:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:40:58:B4:05:1E:C7:1B:C3:69:C5:EC:8A:A9:12:2F:04:8F:95:B4
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/8f549665-8398-44a1-8d57-5658d76e1c61.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.234.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ea:8c:ab:3d:9f:bd:16:5e:ee:44:e5:8e:b8:0f:92:35:a9:
92:e9:31:37:1b:ab:6f:5a:69:69:e2:9b:54:2a:d0:a7:c2:76:
67:09:b4:48:03:3a:79:3f:93:97:ea:0a:fc:f3:6d:da:26:40:
ee:98:ee:16:2e:e5:77:61:9b:5c:4a:3a:83:5c:b4:3d:3a:de:
7e:a4:0d:93:d9:0c:03:f2:0a:61:22:44:19:20:44:f3:6d:e2:
dd:6e:09:77:8f:2e:3f:15:77:7e:87:78:65:e6:8c:33:48:6c:
3e:95:2d:90:f9:dc:ed:ba:d0:5e:b3:80:ac:76:14:79:f8:c9:
28:d4:98:56:81:1f:7a:5a:e6:40:f2:fc:ec:3c:90:cb:dc:26:
ab:8d:23:03:8c:fc:d4:68:d0:8f:61:65:32:7c:81:7b:f9:58:
89:04:4e:5e:ac:4d:a3:b7:2b:ae:39:6c:c6:46:56:68:9e:d4:
b4:eb:2e:d3:98:36:a9:09:a2:28:b7:4b:8c:16:75:51:49:ea:
ec:9c:89:2f:e5:3d:15:a2:12:94:86:a0:fa:84:7a:88:27:91:
eb:82:99:25:14:98:c2:3b:73:24:d8:62:93:0a:f0:90:60:b7:
90:12:99:a1:c2:94:e3:6f:3b:f6:5f:ce:5c:fe:8e:e5:7b:08:
6b:de:99:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 16:24:07 2026 by rpki-client