
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
File: 3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa (raw, json)
Hash identifier: HgyaVNqdNFBzXd6SXnilLQiagdLE5cBvbZbOserVG6E=
Subject key identifier: 49:2B:AC:DE:13:38:4F:7B:36:F8:AC:2D:67:9E:53:6A:E5:E6:71:EB
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4FB7120DF182F34E3694976B96D9774817669A40
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
Signing time: Tue 21 Jul 2026 00:30:51 +0000
ROA not before: Tue 21 Jul 2026 00:30:51 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 23.251.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:b7:12:0d:f1:82:f3:4e:36:94:97:6b:96:d9:77:48:17:66:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jul 21 00:30:51 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=573ea174f45182c68273997b331c4899785b7018a9095fd71c6eb66a4ed5519f, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:3a:41:1f:50:a5:fc:37:22:5e:88:4d:0d:
80:6a:ca:d2:68:75:0d:e0:d2:b6:f0:6e:25:68:33:
f7:d8:2d:0f:d3:d0:fe:e7:c7:cc:5b:53:c4:cb:73:
a1:02:fc:2b:bb:95:00:30:c4:77:26:38:af:08:9f:
d7:1d:2b:5b:09:b5:a2:af:c5:05:d7:4d:9f:94:a1:
7b:56:61:55:9a:a0:ae:b0:84:53:77:e4:88:03:f7:
6b:35:d5:14:ed:fd:d0:7d:fa:6c:d0:78:d4:00:5f:
99:1a:6d:9a:87:a2:ad:1d:ba:bf:25:09:9e:8a:a5:
22:8d:a0:d9:0f:d8:50:3b:ee:85:7c:96:97:fe:25:
46:2b:9a:d1:c2:6f:3c:5e:c1:03:05:50:cd:5f:84:
0d:44:46:6c:12:f4:1a:8b:20:15:7b:af:7c:bd:42:
dc:1e:8c:11:a9:4d:ec:c7:95:d5:3b:08:6f:e5:2d:
e9:bb:75:1c:a4:7b:14:77:6a:f0:88:78:80:c9:e8:
df:1e:f8:5b:6e:de:98:47:27:88:b3:8a:ef:2b:ea:
b5:05:a4:2e:8b:20:69:25:f7:b6:59:9e:4f:95:c3:
f8:73:f4:63:93:64:9f:96:80:2e:47:52:10:3f:21:
df:06:21:5e:51:fc:44:80:24:cc:c9:08:ee:7d:62:
a1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:AC:DE:13:38:4F:7B:36:F8:AC:2D:67:9E:53:6A:E5:E6:71:EB
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/3ad2ae9c-d505-4b53-8a03-c0034602d40e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.251.224.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ef:68:d0:81:4d:5b:c3:19:9e:2c:e3:e8:38:67:ab:c9:0d:
3b:cf:df:e2:92:cc:2c:22:32:19:a2:1c:04:92:7a:44:b9:12:
0d:01:81:c9:fe:a2:ac:0a:04:4d:a1:b1:92:03:78:7d:4b:65:
d9:ef:28:0a:85:b3:d3:b2:06:6e:e7:e5:df:11:da:c2:be:a0:
ce:e5:c8:5d:80:ce:c5:7a:f7:04:18:cf:ee:e1:37:93:85:64:
d7:9f:80:36:44:3c:c7:ec:a7:85:35:f3:6e:4e:69:b9:84:28:
18:3c:14:af:88:79:a8:d6:5a:46:0b:a9:fb:f0:ec:81:24:ee:
57:ac:bc:28:f7:d3:c4:8a:b6:bb:9c:c4:b4:47:83:99:fc:4c:
f4:30:84:68:97:d0:18:a2:91:db:de:5f:e8:5c:7c:89:13:09:
96:d0:c7:3f:b4:af:b4:be:4b:45:35:ea:36:b7:f7:c1:db:94:
e5:47:25:67:f8:61:b0:18:66:6d:86:b3:d5:25:39:3e:85:12:
4f:59:28:e4:a6:b3:b6:d2:87:f5:d1:44:3d:bf:4d:05:ca:d7:
16:7e:fa:7e:d0:23:44:d6:6f:91:86:4f:7b:89:52:43:fd:be:
74:08:4f:e1:f4:c4:62:c6:22:f6:8c:f4:45:6f:d5:98:c8:a3:
09:e8:15:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:18:45 2026 by rpki-client