
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
File: 946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa (raw, json)
Hash identifier: 4q98f0P6Q0h9t405nwmoPupsdNWSpn28IkWD/oqbcQs=
Subject key identifier: 2D:B8:C4:B9:42:F5:86:77:9C:2D:1D:0B:B3:84:ED:96:01:9B:92:D7
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 1A41708C265476FFFA16FB288FB9E9506CF26F89
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
Signing time: Sat 02 May 2026 00:30:10 +0000
ROA not before: Sat 02 May 2026 00:30:10 +0000
ROA not after: Fri 31 Jul 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 04 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:41:70:8c:26:54:76:ff:fa:16:fb:28:8f:b9:e9:50:6c:f2:6f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: May 2 00:30:10 2026 GMT
Not After : Jul 31 23:59:59 2026 GMT
Subject: serialNumber=bd5126ee966a08b444963bc57dc91ef9789b6833d2be9a2b5f157a7ba6ca8cc5, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:19:74:05:47:8a:a6:c9:1c:3f:cd:99:78:
7e:cb:56:83:a7:9e:44:41:c3:89:9c:7e:e9:97:da:
8e:d4:5f:07:62:85:0e:6b:f8:f2:14:f9:57:6f:fc:
0d:80:87:5b:79:c7:c2:59:23:2d:2e:c1:3b:9c:88:
69:73:5e:ea:cb:59:df:2f:92:72:1e:c9:fa:3c:fe:
60:4d:05:61:d2:b3:8b:1f:38:76:9a:a0:c6:81:39:
d4:b6:85:f9:4b:65:df:da:ac:cd:58:60:3e:9b:e8:
bb:0e:90:df:9c:f1:51:8d:fa:80:26:af:22:30:af:
a7:b9:06:38:44:05:aa:78:60:33:46:35:41:6c:b5:
7b:be:88:71:a2:2c:95:71:12:14:67:a3:42:1d:76:
34:53:60:ef:26:42:f2:d2:f2:a1:5a:08:19:52:80:
b7:9d:7e:41:5f:2a:0e:6f:b4:cc:56:9f:79:8b:fa:
df:c4:db:a9:b6:01:d8:87:da:63:ea:29:7f:04:8a:
e0:fd:67:2f:1d:79:61:7a:f7:10:d6:62:17:63:a1:
31:bf:19:f1:4a:19:c2:9b:97:cd:1d:e6:c5:bf:3c:
83:17:be:dc:4a:59:2f:74:05:c1:df:54:6a:2d:2d:
dd:7c:7a:46:a9:c9:fa:09:d3:7d:c0:6c:9f:7b:4d:
ea:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:C4:B9:42:F5:86:77:9C:2D:1D:0B:B3:84:ED:96:01:9B:92:D7
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/946aec0a-dddf-49ab-b5bf-ec7281eb1e7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2f:de:eb:07:b4:b8:b7:3e:dd:2a:92:61:b4:c3:68:a2:92:
44:59:43:ed:d3:c5:a1:ec:88:d5:dc:25:bf:cf:e6:e2:e2:83:
4b:79:9f:86:d3:52:78:0a:a4:95:75:53:c6:83:6a:01:a7:92:
27:78:83:28:fd:8f:84:3d:d2:4f:ab:80:c5:5c:f7:1e:3a:11:
42:6f:ae:81:db:1a:f2:69:44:87:71:06:9b:e3:1c:b2:b2:ad:
c7:ab:16:18:6c:75:03:c8:45:8d:45:15:5b:c9:c6:a5:29:a4:
fe:17:d9:eb:dc:2e:f6:2f:0d:b0:48:e7:ba:80:3a:72:53:56:
03:b6:f8:ad:3c:15:98:89:72:5e:1f:65:68:31:92:01:b5:69:
dc:0e:f0:cc:60:73:72:a5:34:55:9f:d4:6f:a6:f9:d8:36:dc:
05:ae:be:97:c6:15:30:f1:dc:33:08:02:eb:b8:69:43:2c:d4:
f3:2a:ce:d6:cf:1b:db:82:4c:bb:7f:a9:dc:b9:3f:2c:ab:14:
ca:71:ad:24:f7:76:71:76:9f:21:74:a9:53:18:0c:38:ed:aa:
f2:47:0b:02:f0:ba:88:ca:8c:9d:1d:e5:ab:a1:5b:44:ff:3e:
a1:b5:e8:f9:6f:fc:d4:b1:97:8a:52:47:7a:9d:eb:02:78:c5:
08:a3:9b:1c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUGkFwjCZUdv/6Fvsoj7npUGzyb4kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwNTAyMDAzMDEwWhcNMjYwNzMxMjM1OTU5
WjB6MUkwRwYDVQQFE0BiZDUxMjZlZTk2NmEwOGI0NDQ5NjNiYzU3ZGM5MWVmOTc4
OWI2ODMzZDJiZTlhMmI1ZjE1N2E3YmE2Y2E4Y2M1MS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDcJhl0BUeKpskcP82ZeH7LVoOnnkRBw4mcfumX2o7UXwdi
hQ5r+PIU+Vdv/A2Ah1t5x8JZIy0uwTuciGlzXurLWd8vknIeyfo8/mBNBWHSs4sf
OHaaoMaBOdS2hflLZd/arM1YYD6b6LsOkN+c8VGN+oAmryIwr6e5BjhEBap4YDNG
NUFstXu+iHGiLJVxEhRno0IddjRTYO8mQvLS8qFaCBlSgLedfkFfKg5vtMxWn3mL
+t/E26m2AdiH2mPqKX8EiuD9Zy8deWF69xDWYhdjoTG/GfFKGcKbl80d5sW/PIMX
vtxKWS90BcHfVGotLd18ekapyfoJ033AbJ97TerFAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQULbjEuUL1hnecLR0Ls4TtlgGbktcwHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkLzk0NmFlYzBhLWRkZGYtNDlhYi1iNWJmLWVjNzI4MWViMWU3ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAX++EwDQYJKoZIhvcNAQELBQADggEBADwv3usHtLi3Pt0qkmG0w2iikkRZ
Q+3TxaHsiNXcJb/P5uLig0t5n4bTUngKpJV1U8aDagGnkid4gyj9j4Q90k+rgMVc
9x46EUJvroHbGvJpRIdxBpvjHLKyrcerFhhsdQPIRY1FFVvJxqUppP4X2evcLvYv
DbBI57qAOnJTVgO2+K08FZiJcl4fZWgxkgG1adwO8Mxgc3KlNFWf1G+m+dg23AWu
vpfGFTDx3DMIAuu4aUMs1PMqztbPG9uCTLt/qdy5PyyrFMpxrST3dnF2nyF0qVMY
DDjtqvJHCwLwuojKjJ0d5auhW0T/PqG16Plv/NSxl4pSR3qd6wJ4xQijmxw=
-----END CERTIFICATE-----
Generated at Sun May 3 15:23:28 2026 by rpki-client