
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa
File: eaef83ec-c27a-4971-921b-164f8f284067.roa (raw, json)
Hash identifier: EQnFKlXEmNmhEmUuwT0XHPnXQdWNLLGv8ar2TpapwAw=
Subject key identifier: 26:2E:06:F8:CE:41:CA:D5:82:BB:BF:30:18:4E:1E:CD:33:6A:4A:97
Certificate issuer: /CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Certificate serial: 4943D4909451ACB93440E8DA241E698B00D4D357
Authority key identifier: BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa
Signing time: Tue 21 Jul 2026 00:20:03 +0000
ROA not before: Tue 21 Jul 2026 00:20:03 +0000
ROA not after: Mon 19 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 76.223.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/1059b52d-846a-4cbe-a7db-796f1dd8b929.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:43:d4:90:94:51:ac:b9:34:40:e8:da:24:1e:69:8b:00:d4:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5
Validity
Not Before: Jul 21 00:20:03 2026 GMT
Not After : Oct 19 23:59:59 2026 GMT
Subject: serialNumber=f0dd04ddfd4cbadaf046647500e691dc5d06ecf314527df1fd8b82aefcbfa442, CN=42519eb9-9579-4979-bdaf-164abd0e290e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:86:e1:86:c0:40:a0:f9:15:52:a6:a3:54:c8:
62:f0:63:81:de:54:2d:c1:85:e7:3a:1c:7a:05:84:
57:00:26:e5:5d:ed:e5:d6:ec:33:cc:b3:b8:0a:2a:
ae:bb:e4:68:e2:5a:4d:b9:6a:b9:9f:96:70:7f:6f:
b0:38:17:f4:01:6c:df:f2:8c:6b:fc:b0:34:ec:4b:
66:d5:26:bf:ff:b4:12:a4:a7:ee:3a:01:57:f0:13:
f4:cb:58:a4:40:90:77:f6:cc:42:f8:40:e0:6d:b0:
fd:6d:ce:0d:0e:cc:2d:ba:30:7d:94:51:46:f0:a3:
07:8c:4c:9c:2c:d2:30:54:08:79:36:51:43:52:a4:
d2:17:7c:06:eb:1e:9d:fc:eb:e6:4f:b5:c1:57:50:
d2:f6:a4:ff:69:f1:03:32:f4:f3:97:77:43:e0:ce:
35:02:81:ce:80:3b:d8:03:86:9d:0a:ab:ab:d7:d5:
a3:37:3e:56:73:12:9c:05:c2:88:c5:cc:be:34:23:
3e:72:ec:2c:af:3d:89:59:02:b0:df:55:31:58:fb:
89:94:fe:a0:16:0b:fb:9c:64:81:c5:02:14:38:c7:
b1:aa:71:66:10:81:fe:f6:02:85:21:b3:e8:4a:46:
b3:84:3a:6d:e9:57:6d:df:fb:9b:e1:bd:39:f5:78:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:2E:06:F8:CE:41:CA:D5:82:BB:BF:30:18:4E:1E:CD:33:6A:4A:97
X509v3 Authority Key Identifier:
keyid:BC:93:AE:71:0F:AF:14:22:36:08:2F:8E:D9:6B:56:CB:A9:D5:02:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1059b52d-846a-4cbe-a7db-796f1dd8b929/d58fa2ccb66b1b0eae2d6e3f5c46e9c2f2d1d309dfbd9d2af5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/eaef83ec-c27a-4971-921b-164f8f284067.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b8a1dd25-c313-4f25-ac21-bf55514d9c7d/axsOri1uP1xG6cLy0dMJ372dKvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
76.223.187.0/24
Signature Algorithm: sha256WithRSAEncryption
37:06:c3:dc:5a:83:fe:04:16:77:61:63:08:37:7a:f3:45:11:
d5:61:dd:c8:e0:2f:02:d7:2f:1b:9d:f3:11:4f:a5:7c:3c:a9:
2e:fe:f3:2e:b4:10:4b:dc:c4:ff:d2:96:55:f4:e5:b9:ad:13:
9d:ce:0c:9f:46:b1:3a:ef:b9:fe:f2:0a:33:2b:03:6c:5f:86:
b4:2a:4d:c6:18:44:ed:02:31:df:92:bb:80:3a:4d:52:92:9a:
47:19:42:af:e6:10:20:1a:fe:c0:60:e4:73:cd:f4:79:2b:bb:
01:bd:9d:0c:f0:cd:e4:a5:59:a0:a7:8e:24:4c:0b:eb:ca:f3:
8e:ce:03:b5:36:08:d5:3c:28:f3:81:8a:fb:28:ed:c8:35:42:
51:1a:3d:b4:b3:f6:5e:90:e9:a4:19:96:65:70:cd:3b:29:32:
81:68:a5:84:2f:b6:e0:8e:1c:91:00:7f:26:65:67:8c:ec:57:
fc:6c:e9:d5:49:7e:b2:b0:2b:0e:7a:1c:16:e0:19:76:d0:ed:
70:26:1d:1e:6c:ab:03:94:0b:8b:fd:6e:22:03:b2:bc:ec:27:
22:32:64:8f:ce:64:73:24:ac:fb:3a:72:cc:ec:d3:ca:27:c8:
12:a1:d9:61:11:ad:ef:e4:5e:ad:5c:49:04:3e:7a:d3:2a:3d:
0f:f3:dd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:26:45 2026 by rpki-client