
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
File: e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa (raw, json)
Hash identifier: +aUcBJ5gw34+ioCAw4XSUi1lJuNGqnY3qoFe1AZnWrk=
Subject key identifier: EE:EC:CD:B6:75:97:67:5C:65:06:24:40:98:CA:D4:C8:09:4A:B4:90
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1831ADA775837A5D27D9C3A8F5AF3C3384EE20BA
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
Signing time: Fri 09 Oct 2026 00:20:10 +0000
ROA not before: Fri 09 Oct 2026 00:20:10 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:31:ad:a7:75:83:7a:5d:27:d9:c3:a8:f5:af:3c:33:84:ee:20:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 9 00:20:10 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=2792f6a7e820f2b47026b37ed9f7cae968b815d2fa38c688f07ade956f86415d, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d1:30:7e:02:69:be:a1:40:d0:34:16:19:80:
7e:df:0b:9a:5b:c9:a3:13:3c:f9:dd:63:7b:6d:76:
3f:e4:29:98:7c:0f:2f:69:4b:24:b9:86:73:10:5b:
15:06:32:64:9d:5e:7b:eb:57:af:c6:34:fc:34:6e:
f7:a5:c1:ab:61:cd:5f:80:35:d3:04:a4:82:c3:68:
f1:aa:67:64:94:cc:73:67:b1:b3:be:f5:1b:93:53:
c1:ef:2d:31:cf:0c:c6:9e:aa:19:c7:c2:20:04:71:
4a:0d:3e:a8:da:d4:aa:ca:a7:d5:90:ee:00:4a:8f:
61:83:98:04:6a:8d:3e:f7:38:55:77:b8:e0:f4:97:
58:26:93:db:f3:64:a7:1a:4b:46:74:36:6c:1d:67:
8e:1f:cb:48:14:17:1d:43:cf:71:4e:61:f1:7e:c6:
ff:b4:60:ef:4c:27:98:90:bc:6b:af:fb:e5:6b:97:
f2:f5:4e:c9:36:8a:56:bb:46:db:aa:43:7e:6d:49:
da:f5:b6:3a:f0:9f:d3:b2:a1:58:e0:d0:51:f8:d5:
7d:78:87:a5:14:bb:f4:5a:ac:d9:6e:e1:2f:a0:11:
7d:d6:24:f5:59:f6:ed:1d:0e:47:78:35:f4:91:e6:
9f:11:6f:5d:5c:48:19:4a:b2:06:07:bf:1d:76:a8:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EC:CD:B6:75:97:67:5C:65:06:24:40:98:CA:D4:C8:09:4A:B4:90
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/e3b86984-4ebf-4fde-b68c-ca2e3fbf7825.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.190.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:64:d3:f4:fc:c7:24:0d:91:8c:8e:e1:df:0d:fa:f7:bb:d3:
da:ca:00:fc:13:1f:f2:99:8c:b2:61:d0:6e:88:c5:ca:9e:38:
89:39:19:05:75:17:86:90:d2:d4:67:85:59:a8:b6:23:f8:08:
cc:ef:70:e8:42:67:87:8d:ae:c2:ef:be:93:9a:9f:a9:89:fe:
61:85:78:c8:34:12:71:cd:b2:87:28:e0:da:85:5a:3e:36:e6:
ea:3e:29:e4:1c:3b:9c:1f:67:40:d8:55:77:5a:6c:27:73:37:
1c:f1:dc:01:c7:2b:75:a7:86:27:8a:bd:80:64:af:55:12:3a:
25:79:77:86:ae:72:a8:73:5e:2a:e3:24:22:cf:37:56:e5:b4:
a8:d5:89:d4:ea:3f:88:9f:cd:47:2e:6c:f6:76:3d:e6:38:39:
9f:2c:c5:4c:a8:e8:8c:21:17:c8:be:2c:aa:8e:a5:a2:b6:6f:
19:75:9f:dd:49:a5:9e:cb:f8:f2:73:ba:31:6a:e1:b3:4f:ce:
65:87:a6:8a:95:cf:b9:71:1f:40:b9:e3:ab:57:6d:07:0d:68:
99:e5:db:9e:65:cf:85:3b:05:bb:f5:25:14:ed:15:97:58:3d:
76:5a:48:72:64:b4:1d:55:d4:94:15:33:44:32:13:b5:1e:68:
34:ce:cc:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 14:56:08 2026 by rpki-client