
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa
File: 2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa (raw, json)
Hash identifier: pdnqxarP/eTRk3vb7uMbqUJxX8gw1SbF0SC39hM8kn0=
Subject key identifier: D1:02:7C:D3:31:16:F8:C6:85:3B:9D:39:10:41:4E:CB:FF:81:57:0E
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 758285B279100188C7BA498033DBBF37F42DAF93
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa
Signing time: Sun 11 Oct 2026 14:50:09 +0000
ROA not before: Sun 11 Oct 2026 14:50:09 +0000
ROA not after: Sat 09 Jan 2027 23:59:59 +0000
asID: 801
IP address blocks: 35.96.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:82:85:b2:79:10:01:88:c7:ba:49:80:33:db:bf:37:f4:2d:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 11 14:50:09 2026 GMT
Not After : Jan 9 23:59:59 2027 GMT
Subject: serialNumber=32b96d9d66dec447f8e420312d6d0abd5a6d1d95c9bba188d174aee2805f9166, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5b:48:77:44:15:de:c3:38:03:14:d8:2b:24:
88:95:ea:1c:9d:ee:6e:6b:d0:3c:15:4e:0c:08:55:
46:06:37:17:f3:d3:30:8e:b4:0b:62:c7:00:63:b2:
91:b5:72:9f:c4:66:d9:5a:5c:28:8c:8a:fa:a9:bc:
a3:75:45:b4:43:fc:20:38:f1:c4:55:f4:28:d4:2c:
54:bb:39:0c:52:3a:da:93:9c:53:ac:48:87:2d:b4:
58:a4:47:3b:0b:02:f1:18:b7:5f:4c:f7:0c:54:d1:
79:3c:fe:87:b3:ab:55:dd:34:9b:fb:df:3e:ad:2c:
2d:8f:9c:a9:75:4a:50:e0:92:6b:c0:66:df:42:a5:
49:43:c3:4d:42:f8:3f:00:f3:fc:f0:0f:6c:dc:4d:
5e:2e:60:12:02:42:4a:61:11:a4:5d:32:be:7c:61:
27:8e:a7:34:c8:66:cc:cb:f1:c7:23:34:78:f3:44:
71:88:2e:39:29:61:45:ba:a4:fe:52:94:d5:e2:83:
7a:da:9e:d7:0e:77:ab:5a:9f:28:16:93:a5:34:7e:
23:38:06:17:e5:0c:e9:03:a4:55:ed:36:1c:a6:9a:
15:0a:bc:69:fb:8a:58:d3:9e:4e:0b:23:c9:b5:0a:
e2:6c:83:df:d3:cb:2a:5d:61:73:ff:87:29:ed:f0:
90:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:7C:D3:31:16:F8:C6:85:3B:9D:39:10:41:4E:CB:FF:81:57:0E
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2c3d7247-e07b-4d1c-a6ee-ebaa13fbd9cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.246.0/24
Signature Algorithm: sha256WithRSAEncryption
53:14:31:12:50:3f:cb:69:58:d4:6d:e6:da:4d:41:16:ca:05:
a3:c9:6e:89:0d:e1:1c:05:6b:82:e6:bc:8f:4e:9d:b4:98:a5:
92:29:0d:54:96:f1:ac:b4:4b:6c:84:49:95:cd:bd:a1:ee:56:
3c:73:0b:e2:66:d0:4d:4f:93:c8:c9:3b:45:1b:83:25:64:a6:
ae:09:28:89:d9:30:46:47:d8:19:d4:fe:31:bc:1f:0d:1d:55:
81:05:0f:28:5f:96:eb:41:66:d6:40:c5:ff:33:85:71:62:ba:
28:41:8e:ae:68:80:80:5f:1b:e3:60:6a:42:9b:81:b8:69:10:
ef:5f:42:a4:4c:15:bf:00:de:80:0b:a3:63:c6:05:80:0f:f1:
b0:69:20:a8:67:af:82:45:7b:6a:06:8a:61:2b:69:3a:6a:f8:
a9:68:78:fa:b4:d1:1b:c7:19:91:97:57:fc:a5:e2:b3:1b:ed:
12:b9:48:28:ed:37:50:3f:ea:bd:86:d0:df:84:48:f9:f5:76:
f5:91:f6:80:bd:00:5d:46:41:f6:8a:bc:db:e9:bd:cc:9c:43:
fe:05:e8:7d:ee:a0:fe:69:48:14:5a:e2:e9:a3:76:9c:74:b4:
fd:12:dd:70:55:df:7f:db:35:d1:8f:eb:65:fe:4f:3e:97:fc:
2b:d8:0e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 09:59:28 2026 by rpki-client