
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
File: b59643bf-eb80-414a-aca0-653646d46e07.roa (raw, json)
Hash identifier: 0gAL0vDztZHwQYwK+cxgtpixvp23NSZUYqTiFDYO0ec=
Subject key identifier: 02:40:FD:6F:C2:D3:33:70:68:E6:A6:08:59:93:21:7D:FB:53:93:AC
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 341F52286C718807185E3E6B917DD4B97D8DFAE7
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
Signing time: Tue 04 Aug 2026 00:00:36 +0000
ROA not before: Tue 04 Aug 2026 00:00:36 +0000
ROA not after: Mon 02 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 199.127.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 17 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:1f:52:28:6c:71:88:07:18:5e:3e:6b:91:7d:d4:b9:7d:8d:fa:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Aug 4 00:00:36 2026 GMT
Not After : Nov 2 23:59:59 2026 GMT
Subject: serialNumber=60251c0f7279cd42cadd0b192b52fe36606c5da9bce30bbd78cfb08d837d94c9, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:16:6d:26:d6:48:6c:28:85:ed:f1:23:5d:
3b:3e:b9:70:07:ca:c3:e0:6d:d9:65:7c:25:97:1e:
65:0d:c0:bc:2d:01:41:a8:1b:12:79:fa:34:b1:1a:
95:25:0c:75:3b:45:eb:f4:d0:94:03:b6:60:7d:b1:
0a:c2:3d:0d:7e:e3:d6:3e:6d:a4:1c:6a:ea:64:aa:
c9:e1:4b:b0:94:9d:3d:9e:c7:67:58:dc:6b:13:72:
cb:a3:1f:db:e7:3e:69:11:0e:e2:fe:d8:38:37:af:
a9:9b:7f:00:7c:62:ae:fe:54:09:f2:7d:09:d0:e5:
cd:9a:b7:1f:dc:9e:ab:06:ca:fb:f1:b1:14:c2:be:
b9:e8:63:ab:d6:ef:89:37:32:c3:42:3b:7e:9d:4c:
6c:37:77:e4:9c:d2:c4:20:a4:50:fa:58:26:77:69:
03:f2:1e:4f:96:04:41:d2:a2:39:50:50:1e:33:08:
f5:83:46:50:0b:7e:e2:6c:6e:2f:d3:47:b8:a3:73:
cf:45:a3:0d:9d:70:a2:24:fc:de:65:67:41:42:df:
1b:24:69:89:10:f0:0a:ed:45:fe:d6:b2:b4:96:fa:
70:a1:4f:49:52:8d:27:9f:44:e9:f7:e1:8c:59:df:
21:32:63:68:91:fc:62:2c:f7:14:46:bd:c7:28:d4:
96:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:FD:6F:C2:D3:33:70:68:E6:A6:08:59:93:21:7D:FB:53:93:AC
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b59643bf-eb80-414a-aca0-653646d46e07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.127.232.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:3a:cd:cb:c7:e4:35:45:d3:95:bc:88:6f:1b:11:13:5a:6b:
ca:99:62:06:28:e0:4d:51:5b:a4:d6:19:be:5f:64:0b:a3:89:
1e:2b:29:f4:fa:be:8b:47:c5:5a:fc:76:c0:07:8e:82:e8:32:
6e:d0:11:b1:7e:3d:9b:9a:4b:22:3a:8d:f7:c6:f2:56:ff:a9:
ad:dc:23:c5:d0:ee:3a:b0:4b:0b:a7:88:a2:06:43:bd:54:ab:
1d:00:b7:90:b8:9c:3c:04:61:1b:cd:8e:fe:90:4f:8e:88:1b:
7f:f1:2b:f3:dd:38:c4:19:07:24:7e:07:93:56:85:f5:72:74:
f9:3d:07:56:59:87:05:f4:eb:66:bb:5e:b4:87:b7:56:23:bf:
e3:5f:25:a9:b3:ea:3e:37:17:e3:79:ee:e5:88:fe:70:94:1f:
93:4f:7d:94:fb:db:a2:6e:ed:96:3d:c5:79:c6:f3:27:2d:61:
c8:e3:bf:6d:01:f3:86:0f:c3:37:2d:df:ef:2b:56:2e:41:b2:
64:a6:aa:0e:56:b4:54:82:1a:fd:32:b6:e2:45:1a:81:e4:ef:
94:fa:77:7b:34:3e:35:70:fc:e9:e7:56:72:34:5c:4d:55:88:
98:78:ca:7e:fa:4f:6d:e2:43:1c:3e:b4:ec:07:61:f1:ef:fd:
ad:7f:20:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 16 08:34:33 2026 by rpki-client