
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa
File: fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa (raw, json)
Hash identifier: uy29tUUkIiZ5vuFZL7MKAd6cO89qQoBCvknpAVAeLKU=
Subject key identifier: 4E:4B:38:FE:33:A0:84:0A:59:FB:8C:A5:41:1A:13:28:BF:91:16:DB
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1D5DE8ED8F94515565AB7A224DBA9C03AAEBDC54
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa
Signing time: Fri 09 Oct 2026 00:30:20 +0000
ROA not before: Fri 09 Oct 2026 00:30:20 +0000
ROA not after: Thu 07 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 09 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5d:e8:ed:8f:94:51:55:65:ab:7a:22:4d:ba:9c:03:aa:eb:dc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Oct 9 00:30:20 2026 GMT
Not After : Jan 7 23:59:59 2027 GMT
Subject: serialNumber=9374e2c4e903ad52c8f3b1c66bcdc0d0ef0b856e87cb530e98acf5973fd1e2ea, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:15:50:af:b2:7e:ea:47:a3:66:d1:2b:71:
5c:ed:cc:cd:a0:a7:17:25:2a:08:8d:1e:f6:07:e7:
46:42:08:31:b9:14:3b:60:fb:36:4c:13:d5:38:1b:
a7:93:ce:a9:00:10:ec:4a:f1:6f:7b:06:2d:f1:ac:
d2:84:27:51:40:e0:44:47:25:bd:f9:8e:d8:28:31:
db:20:2b:07:70:16:56:d2:22:50:52:1f:51:80:b8:
e3:20:5a:8f:dd:15:32:96:d0:42:84:62:f7:82:37:
e6:9e:3a:4d:34:b1:b0:40:1a:9a:7c:fd:c0:64:58:
aa:24:f0:94:0e:2d:44:2f:bb:a7:9c:72:44:78:72:
5e:0b:16:05:cf:02:c8:ac:c5:95:d6:8c:01:1d:d6:
a6:cd:ad:2b:f1:b5:8c:dd:3a:2b:4a:45:b7:4f:1b:
62:56:64:61:32:2a:49:f0:c5:47:3f:c1:be:6e:d6:
f5:e5:7c:59:45:e9:8a:1b:8e:80:39:2d:18:64:9e:
58:d2:0d:bb:45:00:ec:f0:68:9b:27:ca:2f:cf:ab:
19:d6:c0:56:03:84:f0:69:66:5e:cf:aa:c0:29:4e:
91:78:c0:e3:fa:5a:96:5d:ee:3c:97:98:5a:2e:4f:
82:f0:c8:c4:e4:45:e4:e1:26:82:bc:0d:ec:f2:ba:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4B:38:FE:33:A0:84:0A:59:FB:8C:A5:41:1A:13:28:BF:91:16:DB
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/fa37fece-cb6b-47c4-9fdb-04a4117bc583.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.191.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a3:3e:e5:d2:cb:16:51:3f:09:0c:3d:48:f5:be:76:c9:25:
dc:b2:15:78:9e:be:2d:3c:92:71:9f:b4:2a:10:f9:bd:6b:a6:
0a:a4:ed:9a:18:a0:f0:71:52:3c:16:29:da:46:4a:b7:f9:07:
fd:cf:b6:37:55:0c:b7:85:c2:01:66:0a:ca:e7:2c:57:f9:c1:
a1:48:9f:4d:c5:9a:fc:ea:f9:14:b6:9f:d0:94:ad:77:77:3b:
3e:8c:3a:fc:eb:a0:85:b1:60:2d:5e:75:18:b7:fb:fe:6e:b2:
8f:e4:29:7f:e8:bc:16:0e:30:dd:fb:8c:42:fd:e2:63:b1:cf:
23:b0:35:01:5c:08:55:c0:fc:bf:42:99:06:f8:fd:c5:7c:a6:
87:fc:f9:01:a3:f7:91:b0:e7:1d:3b:6e:34:ff:0f:4a:ee:b6:
5e:bd:b1:f8:cf:0b:5b:81:9d:05:76:e7:ef:ea:c4:44:cf:f5:
f9:ab:52:e9:25:00:cf:1c:c6:f2:9e:96:e2:36:4f:b3:c4:d0:
46:75:9c:f9:35:8a:8f:54:33:08:38:63:37:93:c2:1d:d8:b9:
50:43:57:45:a6:9d:dc:1b:e9:78:4a:35:dd:0b:8a:58:ee:a8:
61:20:33:83:64:08:5f:e3:bd:bd:1d:c4:79:cf:b1:74:c7:3d:
8d:41:f6:54
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUHV3o7Y+UUVVlq3oiTbqcA6rr3FQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYxMDA5MDAzMDIwWhcNMjcwMTA3MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Mzc0ZTJjNGU5MDNhZDUyYzhmM2IxYzY2YmNkYzBkMGVm
MGI4NTZlODdjYjUzMGU5OGFjZjU5NzNmZDFlMmVhMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC5rBVQr7J+6kejZtErcVztzM2gpxclKgiNHvYH50ZCCDG5
FDtg+zZME9U4G6eTzqkAEOxK8W97Bi3xrNKEJ1FA4ERHJb35jtgoMdsgKwdwFlbS
IlBSH1GAuOMgWo/dFTKW0EKEYveCN+aeOk00sbBAGpp8/cBkWKok8JQOLUQvu6ec
ckR4cl4LFgXPAsisxZXWjAEd1qbNrSvxtYzdOitKRbdPG2JWZGEyKknwxUc/wb5u
1vXlfFlF6YobjoA5LRhknljSDbtFAOzwaJsnyi/PqxnWwFYDhPBpZl7PqsApTpF4
wOP6WpZd7jyXmFouT4LwyMTkReThJoK8DezyumbFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUTks4/jOghApZ+4ylQRoTKL+RFtswHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2ZhMzdmZWNlLWNiNmItNDdjNC05ZmRiLTA0YTQxMTdiYzU4My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABM378wDQYJKoZIhvcNAQELBQADggEBAFajPuXSyxZRPwkMPUj1vnbJJdyy
FXievi08knGftCoQ+b1rpgqk7ZoYoPBxUjwWKdpGSrf5B/3PtjdVDLeFwgFmCsrn
LFf5waFIn03Fmvzq+RS2n9CUrXd3Oz6MOvzroIWxYC1edRi3+/5uso/kKX/ovBYO
MN37jEL94mOxzyOwNQFcCFXA/L9CmQb4/cV8pof8+QGj95Gw5x07bjT/D0rutl69
sfjPC1uBnQV25+/qxETP9fmrUuklAM8cxvKeluI2T7PE0EZ1nPk1io9UMwg4YzeT
wh3YuVBDV0Wmndwb6XhKNd0LiljuqGEgM4NkCF/jvb0dxHnPsXTHPY1B9lQ=
-----END CERTIFICATE-----
Generated at Sun Nov 8 14:56:36 2026 by rpki-client