
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
File: b63fd343-5e29-48fc-84c9-2d11751d74e8.roa (raw, json)
Hash identifier: W2PUVZytsj/pPLKJi4UYSgsj90hcfKZp4DhJyBn/Z00=
Subject key identifier: 47:5D:33:78:A3:80:AD:F3:B9:A0:FF:DF:3D:A5:3B:5E:08:D7:C4:CA
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 0E0413E3E3103A560A81BA9B944C88DFE9FA93DA
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
Signing time: Mon 03 Aug 2026 00:10:06 +0000
ROA not before: Mon 03 Aug 2026 00:10:06 +0000
ROA not after: Sun 01 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 69.169.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:04:13:e3:e3:10:3a:56:0a:81:ba:9b:94:4c:88:df:e9:fa:93:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Aug 3 00:10:06 2026 GMT
Not After : Nov 1 23:59:59 2026 GMT
Subject: serialNumber=ce8ed10bffd88b36e882d71b0c82ec6befd0c0349f5f616e41a424580ccb15eb, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:31:51:2e:27:8b:f6:05:f5:6e:b0:f5:8a:1e:
31:e4:d3:0c:a2:be:8b:88:3b:c6:89:ac:9e:3b:4d:
04:c8:2f:6c:00:e3:93:b0:80:61:9c:70:39:ef:24:
91:c5:1c:ca:aa:40:83:eb:38:8c:d6:9b:53:b6:0b:
c1:ec:2f:a4:3f:c4:68:7a:66:e5:2e:e8:b5:11:1a:
42:3a:8f:68:c3:66:0a:8f:6c:5d:d8:63:cc:d3:25:
3d:9c:c9:dd:01:db:fb:4e:36:1d:e5:1a:80:e5:21:
07:c6:94:23:8a:97:be:c8:51:49:70:1a:61:22:14:
3d:5d:84:93:af:30:9b:11:14:97:a7:9d:cf:e3:20:
c8:ec:20:0e:60:7f:60:fa:e2:1c:73:9d:1e:5f:07:
4a:8b:8a:67:6e:30:6d:0c:c0:23:b4:b1:eb:ef:8d:
ce:4e:55:24:91:15:b8:3f:91:6a:6d:9d:b3:d8:63:
c3:0f:45:5a:78:cf:aa:a7:d1:7a:94:09:df:11:e0:
60:40:c2:5f:83:26:84:b7:85:31:37:a4:5a:4d:fa:
31:4e:52:2c:8a:4d:15:a4:12:2f:a8:13:72:70:3b:
b9:01:e9:5f:5c:f1:6f:af:a4:06:d7:5c:7e:e8:05:
49:be:e2:f0:2d:74:9a:1b:67:b6:79:93:d2:b8:64:
b2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:5D:33:78:A3:80:AD:F3:B9:A0:FF:DF:3D:A5:3B:5E:08:D7:C4:CA
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/b63fd343-5e29-48fc-84c9-2d11751d74e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.169.238.0/23
Signature Algorithm: sha256WithRSAEncryption
69:b2:8b:92:45:e1:5a:54:aa:72:42:f7:8c:01:f9:20:1c:15:
50:5a:ad:c8:0e:79:c2:fb:d3:78:f4:4b:35:19:c7:d0:0b:a3:
91:4c:55:9b:a7:59:ac:ea:3b:e2:6e:f8:75:27:80:97:ee:fb:
5e:61:87:8b:e6:b9:69:a8:43:05:23:64:94:b4:54:e2:9c:39:
61:28:80:ce:b8:92:2e:f2:ab:0e:35:a3:51:b8:68:b3:93:1d:
a0:b0:21:41:46:6b:5c:b4:b7:dc:6d:5b:cd:e4:0d:9e:85:79:
f1:20:71:7c:aa:8d:18:8f:9e:79:06:1b:30:f8:c9:f0:20:05:
07:a1:93:52:44:70:20:79:55:d2:32:70:71:27:b3:53:6d:24:
27:de:1c:3c:d2:37:14:62:2f:8e:34:a9:10:f9:d6:9b:ed:f1:
02:00:cb:31:62:4b:98:96:be:c6:85:f3:70:f5:42:6d:5b:62:
49:f6:a8:d1:43:7b:e2:60:4c:8d:e6:b1:97:61:f8:32:62:5c:
26:44:ba:c5:1c:ab:bc:71:78:57:84:cc:10:31:d7:52:aa:8b:
4f:74:8c:c2:f2:8a:17:1b:c1:73:45:9a:ab:b8:d4:6b:91:5a:
63:45:cf:c7:f3:41:01:34:3a:9d:c8:c0:76:43:83:1a:5c:8c:
78:6f:8e:9c
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUDgQT4+MQOlYKgbqblEyI3+n6k9owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2ZTNmNWM0NmU5YzJm
MmQxZDMwOWRmYmQ5ZDJhZjUwHhcNMjYwODAzMDAxMDA2WhcNMjYxMTAxMjM1OTU5
WjB6MUkwRwYDVQQFE0BjZThlZDEwYmZmZDg4YjM2ZTg4MmQ3MWIwYzgyZWM2YmVm
ZDBjMDM0OWY1ZjYxNmU0MWE0MjQ1ODBjY2IxNWViMS0wKwYDVQQDEyQ0MjUxOWVi
OS05NTc5LTQ5NzktYmRhZi0xNjRhYmQwZTI5MGUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDDMVEuJ4v2BfVusPWKHjHk0wyivouIO8aJrJ47TQTIL2wA
45OwgGGccDnvJJHFHMqqQIPrOIzWm1O2C8HsL6Q/xGh6ZuUu6LURGkI6j2jDZgqP
bF3YY8zTJT2cyd0B2/tONh3lGoDlIQfGlCOKl77IUUlwGmEiFD1dhJOvMJsRFJen
nc/jIMjsIA5gf2D64hxznR5fB0qLimduMG0MwCO0sevvjc5OVSSRFbg/kWptnbPY
Y8MPRVp4z6qn0XqUCd8R4GBAwl+DJoS3hTE3pFpN+jFOUiyKTRWkEi+oE3JwO7kB
6V9c8W+vpAbXXH7oBUm+4vAtdJobZ7Z5k9K4ZLINAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUR10zeKOArfO5oP/fPaU7XgjXxMowHwYDVR0jBBgwFoAUvJOucQ+vFCI2
CC+O2WtWy6nVAo0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMDU5YjUyZC04
NDZhLTRjYmUtYTdkYi03OTZmMWRkOGI5MjkvZDU4ZmEyY2NiNjZiMWIwZWFlMmQ2
ZTNmNWM0NmU5YzJmMmQxZDMwOWRmYmQ5ZDJhZjUuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvYjhhMWRkMjUtYzMxMy00ZjI1LWFjMjEtYmY1
NTUxNGQ5YzdkL2I2M2ZkMzQzLTVlMjktNDhmYy04NGM5LTJkMTE3NTFkNzRlOC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2I4YTFkZDI1LWMzMTMtNGYyNS1hYzIx
LWJmNTU1MTRkOWM3ZC9heHNPcmkxdVAxeEc2Y0x5MGRNSjM3MmRLdlUuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAFFqe4wDQYJKoZIhvcNAQELBQADggEBAGmyi5JF4VpUqnJC94wB+SAcFVBa
rcgOecL703j0SzUZx9ALo5FMVZunWazqO+Ju+HUngJfu+15hh4vmuWmoQwUjZJS0
VOKcOWEogM64ki7yqw41o1G4aLOTHaCwIUFGa1y0t9xtW83kDZ6FefEgcXyqjRiP
nnkGGzD4yfAgBQehk1JEcCB5VdIycHEns1NtJCfeHDzSNxRiL440qRD51pvt8QIA
yzFiS5iWvsaF83D1Qm1bYkn2qNFDe+JgTI3msZdh+DJiXCZEusUcq7xxeFeEzBAx
11Kqi090jMLyihcbwXNFmqu41GuRWmNFz8fzQQE0Op3IwHZDgxpcjHhvjpw=
-----END CERTIFICATE-----
Generated at Mon Sep 21 09:27:48 2026 by rpki-client