
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
File: 60789a29-f516-47ec-9154-b2b610f7282e.roa (raw, json)
Hash identifier: IMeFuMS0mz4QZV2c8Qg+NDA7DlkeVBeuUWrPBPuBvpQ=
Subject key identifier: 50:BE:46:34:5B:E5:7B:8D:E5:8D:DF:9A:4B:A8:58:7E:B1:A0:CC:54
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 201F2E7B43591F89454A20D28BF0FE4490038991
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
Signing time: Fri 01 May 2026 00:00:36 +0000
ROA not before: Fri 01 May 2026 00:00:36 +0000
ROA not after: Thu 30 Jul 2026 23:59:59 +0000
asID: 14618
IP address blocks: 216.221.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 05 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1f:2e:7b:43:59:1f:89:45:4a:20:d2:8b:f0:fe:44:90:03:89:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: May 1 00:00:36 2026 GMT
Not After : Jul 30 23:59:59 2026 GMT
Subject: serialNumber=9ebe52b09e5ffc3bc9e3ee617dec44e7f43acc5b2e22b93d05cb47caa63098cd, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:03:47:b0:31:c7:32:46:d4:40:8e:04:39:
ff:35:37:a2:3e:35:ec:c0:14:6d:38:45:f8:57:f5:
33:cf:cf:e1:a0:c8:f7:c6:f7:76:05:78:f0:1a:ba:
76:98:33:31:03:f5:a0:75:08:c6:46:d2:d6:b8:6f:
7e:7a:e3:e8:87:da:a0:37:d2:96:59:43:fe:eb:61:
63:ec:f2:0d:dd:a9:93:4c:06:58:08:00:10:0b:ca:
2a:26:a8:68:0d:4d:b0:b7:4b:f5:bb:53:6e:b3:2e:
75:29:b8:44:e0:5c:27:da:64:8b:a0:c5:39:8b:20:
69:52:12:02:e2:ed:d3:7b:03:e5:19:1d:47:c9:03:
70:09:a3:1a:01:01:3a:36:81:48:ec:d0:da:81:95:
9a:ee:a3:9f:6d:a7:9e:ca:b7:b4:e1:62:78:cf:93:
27:64:41:f3:87:51:28:04:1e:e1:52:c8:98:58:04:
08:66:f8:05:3b:56:53:5f:23:e3:33:ee:4a:6e:f6:
d5:e6:92:4e:27:df:fd:dc:e7:a0:e8:ac:d3:cb:5a:
fb:c6:e2:4a:da:2b:fd:ec:d1:1c:8c:49:30:ee:09:
83:36:95:a7:22:42:08:83:11:1f:e0:4d:e3:56:6b:
6f:90:95:ff:75:b2:34:32:df:74:69:c3:0e:96:60:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:BE:46:34:5B:E5:7B:8D:E5:8D:DF:9A:4B:A8:58:7E:B1:A0:CC:54
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/60789a29-f516-47ec-9154-b2b610f7282e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.221.168.0/21
Signature Algorithm: sha256WithRSAEncryption
31:20:31:7a:02:20:11:f4:da:12:87:90:2d:5a:0c:e9:51:58:
77:e7:25:57:07:8e:d9:b6:8a:e5:56:5f:2b:53:b9:76:92:2d:
7c:63:b6:82:63:e6:f2:f6:17:38:f4:9b:c4:dd:c8:90:62:3c:
b0:87:29:18:dd:30:3a:2b:68:7b:cb:19:ef:18:f4:bd:30:cc:
5e:33:ae:63:de:1d:82:b6:ed:4c:1d:ea:91:d5:7f:cd:a8:ce:
5b:51:7e:d5:96:41:03:6d:aa:36:3d:3e:3c:02:25:3b:72:05:
32:42:4d:db:13:a7:93:56:6f:c8:55:74:d5:fe:3b:ea:69:43:
83:cb:fc:11:ea:43:bc:0e:39:ec:2d:6f:61:34:8a:dc:df:2b:
fc:05:79:0c:1c:f7:76:4a:39:f6:30:b2:78:2b:26:25:da:bf:
19:c5:d6:41:28:a6:e6:25:41:a7:fb:92:b9:d4:68:78:0d:58:
d0:13:43:0f:0f:ba:0e:2f:42:6f:26:66:68:a0:ae:b0:ee:82:
17:d7:a5:27:62:0c:bc:5a:b5:fd:85:96:96:56:5d:a2:d0:a2:
69:d2:ec:6e:4d:c0:e6:c1:c6:86:fd:6e:5a:c4:71:c4:31:88:
71:a7:8b:73:99:3d:57:96:ce:42:b2:a3:e8:99:f4:ce:05:99:
a4:2a:77:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:00:17 2026 by rpki-client