
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa
File: be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa (raw, json)
Hash identifier: 9VBv3s1EOZLxRdYPHwpqelQwwdN1n06GA/BnKF0ljyE=
Subject key identifier: 1B:1B:52:1B:BE:0E:0D:CE:6C:14:87:1F:B3:B9:2C:D9:0C:48:CC:13
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 3F9DEE2C2522816A571A298954AD2C610DC69267
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa
Signing time: Mon 03 Aug 2026 00:10:07 +0000
ROA not before: Mon 03 Aug 2026 00:10:07 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.249.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:9d:ee:2c:25:22:81:6a:57:1a:29:89:54:ad:2c:61:0d:c6:92:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Aug 3 00:10:07 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=84d5fcd3fc5d1c7a8c310626c8727e27371e4bce7c80a2eca175b1486a7194f5, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:f0:55:6b:a8:b3:2e:52:1a:51:ed:7e:4c:
31:d7:4a:b6:42:1d:27:90:d6:4f:23:44:25:8a:3e:
38:53:51:1b:ad:00:4b:ca:d2:9f:45:9b:06:07:85:
38:f2:73:c4:68:41:11:b4:42:5e:e3:3f:89:87:dd:
b7:4e:d3:09:2b:da:29:e8:60:f1:af:64:0a:b2:62:
86:09:92:8a:d0:7b:d0:aa:78:e6:96:ff:a2:28:78:
a0:88:10:b0:02:f1:46:3b:f9:c5:f6:53:26:4b:26:
d8:28:a8:0b:54:ff:b0:35:b5:6d:a8:60:cf:4d:1c:
9c:f8:d5:ad:6a:24:f7:eb:b9:75:09:fb:40:75:7e:
db:3b:74:5b:92:ba:c4:1f:66:98:0d:35:87:9d:3b:
5f:0b:74:8e:9f:82:a6:a1:cb:c6:e2:41:d3:ae:7c:
69:2b:5f:d7:0f:59:7d:d1:e9:54:25:9a:e7:b8:7f:
d2:af:49:b2:ce:63:54:45:01:22:36:f6:30:1f:fd:
fa:a8:68:09:9e:a4:bc:8a:06:92:5a:9a:b5:67:54:
f1:25:dc:dc:48:5e:6d:2a:fd:54:0b:c0:6a:d1:5a:
2d:7b:a6:ee:ab:e2:b8:7e:0b:69:a3:4c:81:75:98:
d4:77:d5:68:c9:fe:6a:5d:88:63:8b:f3:6e:d1:c9:
52:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1B:52:1B:BE:0E:0D:CE:6C:14:87:1F:B3:B9:2C:D9:0C:48:CC:13
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/be6d27bc-a56d-4dce-b2c2-5a756eca4157.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.249.210.0/23
Signature Algorithm: sha256WithRSAEncryption
04:16:65:56:87:4d:21:4e:e1:ee:a6:10:55:04:af:0d:ef:4a:
af:a0:f2:b4:d5:24:c4:12:23:27:a8:17:0c:c6:76:f7:b6:f0:
c9:46:e6:33:73:04:ef:30:fb:7f:89:be:9a:16:01:fd:0a:66:
99:f2:54:34:5f:70:00:1b:99:a9:e8:53:79:72:07:b5:59:22:
10:1e:20:18:f5:93:c9:5f:bc:f9:cb:04:89:b2:c0:06:f3:bb:
68:97:5f:d2:29:91:e5:76:33:d8:e8:16:05:12:28:66:0c:9d:
dc:76:c7:69:4f:f5:00:c0:15:13:ae:b7:dd:c9:da:31:b7:33:
b3:0a:71:3b:70:15:bb:d1:a4:5a:e1:56:a0:83:53:9a:c2:d6:
28:a2:a1:e9:36:29:31:be:89:46:ed:c3:75:a9:e5:f0:30:0f:
61:64:63:b9:f7:08:ba:8a:bd:c2:2a:42:d5:b5:40:f4:69:90:
81:90:63:2f:5d:22:af:ed:85:79:91:0e:4e:3d:a9:d6:bf:b4:
fa:5e:fc:b6:61:ce:cf:74:c2:56:6f:69:76:62:a3:af:da:cf:
95:f0:28:48:21:2a:1c:7e:2e:f8:10:2e:eb:73:b1:04:dc:17:
65:6b:b4:ef:79:68:64:23:3f:2e:93:20:1b:24:b2:3c:71:77:
4a:36:58:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:17:48 2026 by rpki-client