
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
File: dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa (raw, json)
Hash identifier: OYrHmWDNTUDFji7Yrwga+XauZndJ+O1esB+pyTRkKwg=
Subject key identifier: 91:C6:1E:63:29:08:17:18:71:F8:29:DA:D2:C4:5B:6B:BF:99:74:EE
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 05A8B8BD9BB2AA285F5553671385881BF9C0BBB1
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
Signing time: Fri 09 Oct 2026 00:30:17 +0000
ROA not before: Fri 09 Oct 2026 00:30:17 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:a8:b8:bd:9b:b2:aa:28:5f:55:53:67:13:85:88:1b:f9:c0:bb:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 9 00:30:17 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=a965b1475e4d50c3f5513551b7f9130ecc049e18cad9c3101db40411bbf1a36f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:95:48:eb:d2:15:41:ea:6e:d3:a0:36:b8:d4:
f0:14:ba:75:36:47:76:23:37:fb:26:11:9b:51:cb:
84:e4:2c:40:4f:30:f7:c4:34:9e:c9:62:00:a7:1a:
11:04:2b:6e:d2:5d:33:08:39:1b:bc:20:9a:c0:2d:
3e:d8:84:1c:e5:77:49:0a:f4:94:20:c2:cb:11:66:
d3:9a:41:b5:ff:5a:a8:16:ae:04:22:9e:80:99:dc:
3e:45:4e:b0:62:8d:5c:0f:ed:04:d3:5a:9e:a6:1c:
a5:55:cc:ce:78:7d:3e:b0:e5:e2:73:51:61:1a:de:
e3:a2:47:1d:49:89:59:31:26:0e:80:db:b9:a0:53:
3f:6a:8e:48:e9:29:ca:4f:13:92:c6:f5:7d:ab:c4:
3d:a1:2b:47:f8:0d:a7:76:d9:f3:19:51:eb:32:27:
c2:79:62:ea:bc:c3:f4:10:ed:5b:79:ef:3f:ae:6d:
22:b7:f0:65:bd:0a:0f:dc:47:04:c0:81:85:88:5c:
30:08:34:63:14:3f:4d:59:e8:2b:10:02:a0:0a:2a:
b3:df:0e:92:97:c6:a0:5c:4a:34:72:b4:a4:88:a5:
e5:ee:94:bb:9d:f0:0d:35:69:b9:d6:7f:d0:37:4d:
3b:ea:db:e4:bb:d6:b5:d7:4d:df:01:23:f0:bd:88:
d2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C6:1E:63:29:08:17:18:71:F8:29:DA:D2:C4:5B:6B:BF:99:74:EE
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/dce2db93-8fb7-42b9-be56-23f46b5bf4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.189.0/24
Signature Algorithm: sha256WithRSAEncryption
51:20:ac:5c:d4:e3:2f:6e:f1:a0:60:6f:92:cd:28:ca:66:26:
91:68:d4:08:dc:08:a7:d9:b2:90:11:58:d7:2f:b4:50:da:94:
9c:f4:22:3b:c7:14:b0:48:43:7d:ee:5d:8a:67:83:72:bc:fb:
03:4d:74:84:ba:79:cb:96:bd:8e:e0:8e:50:67:f0:35:be:78:
42:71:12:2d:75:e6:16:92:01:cd:f0:31:77:f7:3d:1e:33:b9:
1f:7f:f2:be:42:24:0a:48:59:86:93:d0:20:f0:05:e8:9d:5e:
03:72:56:60:7c:2f:cb:69:cb:3c:e0:92:a3:d5:56:46:88:66:
2e:9f:28:75:a9:f2:c2:3c:8e:72:2a:f9:34:d9:8e:b3:e5:1a:
e7:8f:3a:06:88:b0:a0:18:da:83:d4:5f:a4:96:c3:e0:fb:77:
e8:a5:9e:34:ff:90:78:7f:50:c4:00:93:91:79:fd:f4:d9:9a:
bb:37:38:37:68:07:9c:ac:7f:41:81:2d:be:95:ea:cf:35:a0:
82:93:6f:92:32:15:2e:df:71:bb:91:71:19:7d:59:9f:fb:02:
e2:47:fa:70:04:26:3c:97:5a:a8:61:df:1d:65:ea:78:85:1b:
c2:3f:f2:8e:6b:dd:55:6e:08:50:a2:aa:f4:fd:8d:2b:28:25:
c4:47:f5:2f
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUBai4vZuyqihfVVNnE4WIG/nAu7EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDE3WhcNMjcwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0BhOTY1YjE0NzVlNGQ1MGMzZjU1MTM1NTFiN2Y5MTMwZWNj
MDQ5ZTE4Y2FkOWMzMTAxZGI0MDQxMWJiZjFhMzZmMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCjlUjr0hVB6m7ToDa41PAUunU2R3YjN/smEZtRy4TkLEBP
MPfENJ7JYgCnGhEEK27SXTMIORu8IJrALT7YhBzld0kK9JQgwssRZtOaQbX/WqgW
rgQinoCZ3D5FTrBijVwP7QTTWp6mHKVVzM54fT6w5eJzUWEa3uOiRx1JiVkxJg6A
27mgUz9qjkjpKcpPE5LG9X2rxD2hK0f4Dad22fMZUesyJ8J5Yuq8w/QQ7Vt57z+u
bSK38GW9Cg/cRwTAgYWIXDAINGMUP01Z6CsQAqAKKrPfDpKXxqBcSjRytKSIpeXu
lLud8A01abnWf9A3TTvq2+S71rXXTd8BI/C9iNIHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkcYeYykIFxhx+Cna0sRba7+ZdO4wHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2RjZTJkYjkzLThmYjctNDJiOS1iZTU2LTIzZjQ2YjViZjRlMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABM370wDQYJKoZIhvcNAQELBQADggEBAFEgrFzU4y9u8aBgb5LNKMpmJpFo
1AjcCKfZspARWNcvtFDalJz0IjvHFLBIQ33uXYpng3K8+wNNdIS6ecuWvY7gjlBn
8DW+eEJxEi115haSAc3wMXf3PR4zuR9/8r5CJApIWYaT0CDwBeidXgNyVmB8L8tp
yzzgkqPVVkaIZi6fKHWp8sI8jnIq+TTZjrPlGuePOgaIsKAY2oPUX6SWw+D7d+il
njT/kHh/UMQAk5F5/fTZmrs3ODdoB5ysf0GBLb6V6s81oIKTb5IyFS7fcbuRcRl9
WZ/7AuJH+nAEJjyXWqhh3x1l6niFG8I/8o5r3VVuCFCiqvT9jSsoJcRH9S8=
-----END CERTIFICATE-----
Generated at Sun Nov 8 14:55:59 2026 by rpki-client