
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa
File: 9142ad9d-3e15-4f28-ad73-674e53fb644e.roa (raw, json)
Hash identifier: GHE8Iwr2pF5+mz/qmuVElotfNTiWbQeuDXgQEmyIv/U=
Subject key identifier: 93:62:5B:C8:A8:DB:C5:26:87:A0:09:6A:8F:1B:9A:F4:31:83:99:B7
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0D9F4B801E0BA81713342821D4E109E75D24EB7E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa
Signing time: Sat 11 Jul 2026 00:00:03 +0000
ROA not before: Sat 11 Jul 2026 00:00:03 +0000
ROA not after: Fri 09 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.99.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:9f:4b:80:1e:0b:a8:17:13:34:28:21:d4:e1:09:e7:5d:24:eb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jul 11 00:00:03 2026 GMT
Not After : Oct 9 23:59:59 2026 GMT
Subject: serialNumber=017289b6d8d29727608c5f556af402309948325269f0b3e1d637d4b47633d7fb, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:72:97:af:2d:34:23:e4:87:2f:d0:ca:2e:
e9:dc:63:a8:06:2e:ed:12:69:c0:9a:01:94:38:51:
2e:95:e0:6e:d0:4e:e1:1d:25:56:f8:1d:4f:4f:fe:
25:a8:83:a8:56:fd:ba:0a:f7:a1:1b:40:b9:47:df:
86:65:52:a6:34:1f:da:b6:9b:76:58:ad:ee:e3:e0:
6c:95:ae:03:9d:8a:9a:24:7c:a5:f1:37:6e:c6:8e:
9e:6a:e8:18:f7:ae:82:de:3b:ea:42:f4:6d:53:59:
0d:f3:f8:3c:c7:44:cd:6a:e8:64:75:c2:41:0a:5f:
13:14:f7:1b:76:3c:71:83:a4:7a:b2:81:95:0b:70:
8a:9a:e0:82:90:5b:36:15:85:7f:0a:fa:51:7b:16:
20:23:09:8f:31:4f:6e:9b:be:0d:db:f4:17:50:c2:
72:c7:c9:79:ab:97:31:aa:56:08:b9:88:e5:21:dd:
d2:d8:89:fb:1e:1f:9d:9d:04:4f:aa:17:b9:4e:93:
9b:c0:f9:f8:75:13:19:8c:89:17:fd:e2:e4:14:b2:
5f:bf:a6:0e:42:44:3c:15:0e:8e:af:f9:ac:72:f2:
19:59:37:a1:28:9f:80:cb:98:27:11:29:02:0a:4e:
54:35:6b:f1:69:19:6f:0e:b8:28:d5:e9:8e:3f:1b:
52:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:5B:C8:A8:DB:C5:26:87:A0:09:6A:8F:1B:9A:F4:31:83:99:B7
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9142ad9d-3e15-4f28-ad73-674e53fb644e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
4f:ba:df:91:0d:65:6c:84:05:09:e0:a4:80:92:2c:33:c9:a1:
0d:df:ee:49:82:6e:38:4b:8d:6b:3b:66:05:60:87:33:ee:d2:
72:5d:8e:d5:06:dd:e4:e5:74:b9:db:e8:58:32:82:16:e8:dc:
0e:27:8f:1a:78:5d:14:eb:fc:8a:81:a3:d6:0b:f3:f1:06:f1:
92:cd:38:61:bd:54:f2:25:b3:aa:9d:bc:89:a5:8b:52:cd:2f:
05:c9:33:de:c8:25:5c:56:37:2e:24:f4:08:6a:8f:b5:6a:27:
76:a2:60:a6:01:8f:1b:3e:0a:7b:85:d7:cd:4a:d7:25:2d:38:
f5:a5:f8:27:c3:5a:26:9f:8c:95:36:50:e9:ba:e3:82:bc:5c:
d2:da:96:26:bf:c0:1a:5c:f5:8f:19:ff:1d:9f:0c:59:b9:1d:
bb:11:38:48:69:ab:74:79:a4:d4:4a:37:8d:4f:05:83:61:ba:
82:1e:46:2d:79:15:c4:bf:e1:22:47:37:83:c6:cc:2f:82:b2:
67:42:87:da:73:50:42:61:d6:c7:ea:a1:65:e4:3d:b2:15:99:
17:35:ff:6b:e2:0d:db:db:7e:1a:1c:85:fd:93:6a:42:ba:37:
c4:43:50:95:c2:0b:7a:00:d6:7f:b0:53:80:08:a9:fc:86:8c:
c4:ec:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:35:50 2026 by rpki-client