
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa
File: cc9456b4-9220-4344-96a0-04b9d83c30f6.roa (raw, json)
Hash identifier: LdE8fV6hRFCRWtaULTL9Xc+iMKKGc/gxrEcq2BZOVPw=
Subject key identifier: 4D:43:CE:17:61:61:26:D5:38:A4:51:3D:75:12:FA:A5:2B:7B:40:7E
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 61B89AFC383395220B1F61F804BCB0DE8CA6D072
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa
Signing time: Fri 15 May 2026 00:10:24 +0000
ROA not before: Fri 15 May 2026 00:10:24 +0000
ROA not after: Thu 13 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 18 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:b8:9a:fc:38:33:95:22:0b:1f:61:f8:04:bc:b0:de:8c:a6:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: May 15 00:10:24 2026 GMT
Not After : Aug 13 23:59:59 2026 GMT
Subject: serialNumber=0d8b9f25c12ff58ba5e7671ef44ade8058d3049dd07be2cf8d0f90dee3cb7451, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:4c:97:5b:b0:94:32:32:22:4e:79:77:f8:
86:5a:2e:d8:24:b7:21:e8:1f:b3:a3:8b:45:56:f6:
0d:04:48:33:ca:05:cf:ee:64:3d:49:82:3b:59:14:
ef:27:52:80:1b:93:f8:1f:b0:fe:67:db:1b:13:3d:
a1:87:8f:09:06:95:3d:32:70:df:e4:ba:71:54:98:
34:f4:96:f7:8f:1d:2a:cc:aa:95:a1:0e:47:3e:5a:
cf:16:68:cf:6c:f2:1e:b1:3b:c5:92:9c:67:ec:2f:
47:76:ed:67:d2:ae:d3:19:eb:c8:5f:a7:df:99:d6:
61:47:ea:02:63:3e:0e:0b:27:01:db:2d:ca:cb:95:
da:6b:77:4b:f6:3d:82:53:84:6c:a7:e1:1f:1d:80:
93:e2:99:d9:14:02:32:11:41:3c:61:c5:0b:8f:e7:
60:bb:5d:6e:f3:31:6d:70:24:6c:f5:ba:62:54:3f:
d3:13:73:ff:64:bc:f9:34:b5:a0:4f:af:fb:7e:36:
0d:71:7f:a1:43:49:6f:32:8c:1c:99:28:af:34:55:
c2:e6:ff:20:b2:6e:58:96:51:8a:85:b6:f3:91:c6:
9b:f0:2c:f5:84:8f:5c:2e:a1:9c:e8:09:76:42:f9:
c4:49:c4:c7:f3:e1:cd:14:c2:bd:d2:fa:cb:4c:08:
93:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:43:CE:17:61:61:26:D5:38:A4:51:3D:75:12:FA:A5:2B:7B:40:7E
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/cc9456b4-9220-4344-96a0-04b9d83c30f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.248.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:01:f3:cd:b1:af:82:8d:b4:fc:7c:0c:e0:46:92:ea:60:96:
b1:78:0e:d7:1d:7a:16:cf:0a:c5:23:0c:00:68:2d:c4:e4:7d:
56:d1:2c:01:f9:5b:bf:ac:2f:69:46:7d:b2:14:55:bd:0d:6c:
df:7e:db:a2:ca:18:81:3c:29:1a:b6:e4:b3:d3:74:9a:fd:0a:
6b:e8:28:62:83:4a:b7:37:11:69:c7:de:3a:11:d1:b1:f3:83:
60:02:10:d5:39:00:15:dd:ea:87:ad:5d:7c:8a:08:9c:d0:1b:
92:c4:7a:e2:c0:69:85:02:1c:c3:88:49:a8:79:11:aa:70:92:
a4:e6:0c:1b:bf:6b:ff:4e:90:e9:24:2b:3d:c9:d3:4a:be:6d:
ea:e0:e1:00:e4:f9:e1:99:41:c1:60:d3:f3:9b:46:c2:9d:ee:
a5:8c:7f:3a:4e:00:4a:be:c9:ba:cd:8a:e1:ee:1b:56:b6:b9:
f4:9a:6b:35:9f:bc:3b:f6:ba:fe:da:42:71:49:e8:fa:e4:e1:
89:c0:82:1c:bf:52:e6:b0:b3:2b:70:aa:ac:7f:98:73:64:3d:
d0:93:93:fb:43:aa:04:3e:30:da:a2:5d:57:44:3c:a3:8a:d0:
1e:4c:53:d5:46:02:5c:18:81:82:a8:76:a6:6a:7e:52:af:7a:
d5:c8:7b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:55:11 2026 by rpki-client