
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa
File: a11f9364-e88a-440b-a95f-a94c5ecdc863.roa (raw, json)
Hash identifier: u8ShSr2D33PJpwPk/5meDe3iY3jI8BOCC7/7GkG0XxY=
Subject key identifier: CA:5F:B7:90:86:C5:B6:F9:E3:17:47:47:EF:4C:46:80:68:39:52:AF
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 225BEEEDE227C058AC6494F30A344960A38AF246
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa
Signing time: Fri 09 Oct 2026 00:30:17 +0000
ROA not before: Fri 09 Oct 2026 00:30:17 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:5b:ee:ed:e2:27:c0:58:ac:64:94:f3:0a:34:49:60:a3:8a:f2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 9 00:30:17 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=ae1c908c8ba8c835c9d207d4de8cb34314719d5e7b5a18d9e809e1dc65fa716e, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:b5:00:01:5b:ea:ad:57:b0:df:7f:f3:58:
e4:2f:87:42:bf:bb:3c:85:a7:13:8a:c5:bb:e0:83:
12:77:33:47:51:19:2a:96:3e:10:9d:4c:b6:20:ce:
40:51:69:7b:05:18:ff:05:fd:7b:c1:18:7e:31:30:
46:90:cb:6b:5f:05:f5:88:04:0a:de:74:9c:47:f1:
98:24:dc:a5:d8:fc:6f:78:6b:6c:fa:1d:0b:3d:05:
04:f4:f3:44:bd:9f:21:7a:02:79:1d:80:2a:da:5a:
83:35:2e:1e:b5:86:ef:50:cd:fc:67:0b:b0:10:7b:
e4:c3:31:32:50:be:2f:00:28:d7:17:f1:02:3f:f9:
1f:91:d9:2e:c9:43:1d:4b:17:7a:bb:07:2b:ae:30:
1d:f8:8d:c5:b5:74:8c:2c:ba:78:0d:a5:97:85:36:
dd:a5:07:c8:83:8a:c6:56:33:62:35:b6:c6:bb:4c:
e5:63:f9:4d:cb:49:43:70:1f:5b:d5:5d:6e:f3:3d:
35:77:20:c9:8d:5d:5e:98:8d:4c:d6:bd:a5:0e:0d:
7a:3a:da:53:14:8f:6c:42:e1:d3:76:29:84:d1:b5:
81:e7:52:6a:be:c4:94:97:48:95:74:05:39:ca:93:
fa:fa:8c:16:ab:ad:b6:42:f0:ea:b5:09:e3:c9:25:
0d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5F:B7:90:86:C5:B6:F9:E3:17:47:47:EF:4C:46:80:68:39:52:AF
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/a11f9364-e88a-440b-a95f-a94c5ecdc863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.237.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:49:82:7e:4d:49:18:a8:ea:6b:15:65:6f:0c:2f:20:c7:93:
7c:63:fe:bf:56:12:6d:aa:d3:b1:4d:8a:21:c5:a5:08:bc:d4:
91:01:f1:06:da:24:b9:e6:bc:b0:46:7d:c0:62:df:57:5b:b7:
ca:6c:ba:a3:61:84:e0:39:be:46:4d:b7:b2:69:4f:c7:8a:70:
d8:35:f8:b4:e7:61:d1:3d:63:40:34:6a:73:ac:59:d5:85:8a:
78:0e:25:c5:b6:68:9c:d1:d0:a1:d9:99:7c:5d:7c:b9:70:6d:
d9:b9:3a:b5:e2:31:4a:87:ef:b9:34:d3:01:2c:07:8c:d2:7e:
57:ef:e7:48:78:02:0e:df:e0:12:90:03:d5:dc:df:1a:8e:b9:
15:ad:ce:04:6d:1d:59:52:d2:50:5c:05:d6:3c:f2:cd:25:43:
49:a1:d7:0c:73:2d:80:f0:17:13:ec:e8:28:c3:98:21:04:2e:
62:5a:b2:2c:ee:1f:f1:c1:b0:9d:bb:bb:d7:50:d0:2f:41:43:
46:54:98:c5:42:ff:dd:1a:29:8a:5d:1e:5b:9e:fe:33:5d:ca:
36:11:c3:c4:19:6f:25:fa:82:f2:86:e0:36:6a:92:5f:80:d1:
4a:4e:ef:fe:07:9a:16:19:0c:3f:4d:85:67:68:0f:cd:82:b4:
5d:ad:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 14:56:43 2026 by rpki-client