
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa
File: b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa (raw, json)
Hash identifier: DfCiPCb2uChQjxHzQLm6jJ9FGZscqoddkx3X976+f70=
Subject key identifier: D1:F9:0D:24:05:0A:ED:5B:D6:91:5A:C1:81:F6:F9:C9:44:B4:8E:80
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 50A9685D980B68A1303F853C5EF9E1D9094E3562
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa
Signing time: Thu 07 May 2026 00:00:05 +0000
ROA not before: Thu 07 May 2026 00:00:05 +0000
ROA not after: Wed 05 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.111.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:a9:68:5d:98:0b:68:a1:30:3f:85:3c:5e:f9:e1:d9:09:4e:35:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 7 00:00:05 2026 GMT
Not After : Aug 5 23:59:59 2026 GMT
Subject: serialNumber=304ee10d6460ff3ce1d5f73b077b91e1261eea52775b12b964d7d6d6a3505fab, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a4:1c:64:68:d3:93:47:1d:a6:41:4f:15:3b:
10:e9:75:96:25:8c:87:61:63:93:1d:d3:a5:79:94:
8d:76:0c:04:f8:47:a6:7a:cf:d6:6f:ab:cb:b0:da:
75:dd:0a:ec:44:96:31:2b:44:b2:92:b4:ea:a3:b2:
80:d5:88:e6:c2:c0:01:f4:b4:38:08:52:fa:dd:02:
ad:fe:8a:7a:6d:c1:2d:0c:90:75:33:cf:11:7a:e4:
d2:21:d7:67:5c:13:8b:bc:12:4b:62:b6:be:cc:89:
15:53:e0:5e:b8:28:ac:d3:5e:e1:ac:ee:ed:3d:88:
fe:90:cb:81:4f:8c:8e:ad:91:91:21:8f:65:7d:ae:
a0:3a:55:d5:0f:9d:1f:76:8f:5d:6c:41:22:5d:8c:
f6:d2:e1:c1:85:e7:56:88:33:3a:67:07:37:8a:c0:
cc:52:e5:32:07:bc:17:6d:40:85:2f:a8:88:6f:00:
96:b0:35:0d:fb:05:21:b0:33:65:6d:d8:23:c0:a3:
06:9d:4e:0f:be:98:e7:73:7a:bf:2a:31:ef:94:70:
13:45:d2:13:63:a6:f7:50:da:8f:e1:e0:36:3b:0f:
61:40:66:81:c4:73:29:8c:aa:0f:7e:c2:7d:c7:74:
dd:3e:9b:d9:bb:9e:22:28:63:d5:0f:9a:fa:66:0a:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:0D:24:05:0A:ED:5B:D6:91:5A:C1:81:F6:F9:C9:44:B4:8E:80
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b1752dc8-4d6f-4fcf-b6d0-5b3b1e6423ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.111.254.0/24
Signature Algorithm: sha256WithRSAEncryption
43:97:db:3e:28:e7:56:6e:11:93:1f:f4:c8:38:b5:74:4d:f5:
fd:e5:66:ba:ee:64:65:78:30:01:c6:06:39:aa:b8:a6:c1:82:
93:09:fa:9f:08:22:ce:7d:6b:e8:dd:28:d3:87:4d:ba:aa:05:
58:80:68:4b:d1:22:df:24:a5:6b:5d:41:86:56:8d:b5:03:9f:
76:d4:47:40:b1:24:75:d1:85:83:fa:2d:54:b7:27:de:58:a1:
f0:0f:3c:54:9a:9d:04:32:29:67:2b:4c:2d:46:8f:a2:23:89:
24:78:59:3f:e6:84:68:63:bc:e7:87:da:af:8f:da:bf:66:61:
a6:0e:68:f4:00:df:6f:ce:5a:71:fd:ea:80:7d:c3:5a:c0:4a:
76:48:8f:22:f9:78:99:b2:81:ca:57:ee:08:ef:c5:c5:3e:fe:
23:11:26:2b:cb:f7:c1:b7:0c:13:55:b0:0b:41:30:6e:b3:c7:
8b:b4:d7:51:d6:7d:a5:31:07:68:99:d4:50:cf:e2:82:6f:90:
4b:66:88:75:c6:2f:33:c1:89:3f:f5:c0:72:83:5e:43:d6:3b:
19:fa:d5:29:42:3a:f8:7c:1b:26:a2:c9:24:b0:aa:b6:91:0d:
a6:48:97:bd:3b:21:17:53:ac:94:97:0d:9c:49:15:90:13:89:
39:fb:2f:3d
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUUKloXZgLaKEwP4U8Xvnh2QlONWIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTA3MDAwMDA1WhcNMjYwODA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMDRlZTEwZDY0NjBmZjNjZTFkNWY3M2IwNzdiOTFlMTI2
MWVlYTUyNzc1YjEyYjk2NGQ3ZDZkNmEzNTA1ZmFiMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDnpBxkaNOTRx2mQU8VOxDpdZYljIdhY5Md06V5lI12DAT4
R6Z6z9Zvq8uw2nXdCuxEljErRLKStOqjsoDViObCwAH0tDgIUvrdAq3+inptwS0M
kHUzzxF65NIh12dcE4u8Ektitr7MiRVT4F64KKzTXuGs7u09iP6Qy4FPjI6tkZEh
j2V9rqA6VdUPnR92j11sQSJdjPbS4cGF51aIMzpnBzeKwMxS5TIHvBdtQIUvqIhv
AJawNQ37BSGwM2Vt2CPAowadTg++mOdzer8qMe+UcBNF0hNjpvdQ2o/h4DY7D2FA
ZoHEcymMqg9+wn3HdN0+m9m7niIoY9UPmvpmCmQHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU0fkNJAUK7VvWkVrBgfb5yUS0joAwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2IxNzUyZGM4LTRkNmYtNGZjZi1iNmQwLTViM2IxZTY0MjNlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjb/4wDQYJKoZIhvcNAQELBQADggEBAEOX2z4o51ZuEZMf9Mg4tXRN9f3l
ZrruZGV4MAHGBjmquKbBgpMJ+p8IIs59a+jdKNOHTbqqBViAaEvRIt8kpWtdQYZW
jbUDn3bUR0CxJHXRhYP6LVS3J95YofAPPFSanQQyKWcrTC1Gj6IjiSR4WT/mhGhj
vOeH2q+P2r9mYaYOaPQA32/OWnH96oB9w1rASnZIjyL5eJmygcpX7gjvxcU+/iMR
JivL98G3DBNVsAtBMG6zx4u011HWfaUxB2iZ1FDP4oJvkEtmiHXGLzPBiT/1wHKD
XkPWOxn61SlCOvh8GyaiySSwqraRDaZIl707IRdTrJSXDZxJFZATiTn7Lz0=
-----END CERTIFICATE-----
Generated at Tue May 12 23:15:38 2026 by rpki-client