
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
File: ecc15691-9732-4fda-b2d1-5ad157c2818e.roa (raw, json)
Hash identifier: Jaz6XwANpfeQwt6DQUr8ngle0nL5BxliWDvbWhCRIbc=
Subject key identifier: E5:48:06:6F:30:8E:A9:5E:BD:88:CE:5A:A6:7E:0F:3B:8E:7C:D4:59
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 7737108ED2033B0C4123F8A1202DA51E4E72C6B2
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
Signing time: Fri 08 May 2026 03:10:12 +0000
ROA not before: Fri 08 May 2026 03:10:12 +0000
ROA not after: Thu 06 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:37:10:8e:d2:03:3b:0c:41:23:f8:a1:20:2d:a5:1e:4e:72:c6:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 8 03:10:12 2026 GMT
Not After : Aug 6 23:59:59 2026 GMT
Subject: serialNumber=282cc18f2ee6a456c8d44a4855a124f08002f00f81b9d44ac8345439a162feee, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:78:b2:93:2d:a0:40:35:27:ac:bb:6c:0e:
77:c4:ad:d4:00:37:ad:95:6a:a7:4f:ff:d0:1e:8f:
a9:f8:97:22:64:17:79:cd:d6:7f:77:2d:29:4b:3f:
42:ee:9b:11:d2:f7:1f:79:80:60:68:ee:a3:bd:1a:
7c:31:bc:3f:5b:d7:56:b3:1a:2a:a0:a6:6f:3f:0f:
dc:6f:93:77:8e:b0:69:4c:b1:af:6c:ad:14:8a:dd:
03:f9:a8:97:48:a1:58:f2:47:9c:97:ea:86:75:2d:
1f:ee:2e:fa:fe:7e:2f:ff:f9:5b:53:90:42:6d:e0:
1c:a9:87:39:66:09:2a:f3:67:81:d3:d9:51:b4:58:
05:12:80:c5:d7:4a:26:80:a6:5f:36:ee:8a:f0:62:
14:b1:29:2c:40:06:33:00:9b:23:d9:86:cd:85:ab:
c5:e3:e2:58:f8:cc:ea:2d:20:fb:e4:eb:88:70:43:
3d:3a:85:66:73:c9:f2:a7:01:a7:17:4d:64:b1:10:
12:42:19:9d:00:bd:c8:57:e8:6e:95:5b:47:1f:48:
c7:9b:93:08:2d:59:fa:58:49:c2:5a:cb:3e:4b:1e:
6b:d0:a7:2e:9f:40:8f:16:32:52:41:0b:30:dc:b4:
30:e0:13:bc:e3:c6:d5:c1:12:97:7c:3b:c8:41:fb:
93:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:48:06:6F:30:8E:A9:5E:BD:88:CE:5A:A6:7E:0F:3B:8E:7C:D4:59
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/ecc15691-9732-4fda-b2d1-5ad157c2818e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4b:92:7a:1d:39:f3:62:d0:06:4f:ad:28:77:65:2a:50:3b:
d8:ce:81:cc:46:82:f6:72:7a:d6:a7:d6:6f:9e:ba:86:96:e3:
11:01:5b:e0:a6:0a:e3:d7:59:f1:b1:99:2b:05:50:e5:05:50:
1a:e3:f6:53:da:83:2e:dc:c8:d6:8c:71:f2:01:55:af:d9:b3:
0f:84:12:c8:c5:02:d9:82:e3:a5:41:a3:70:bb:03:80:f2:38:
b7:8a:12:7f:fa:40:74:a7:16:d1:23:77:94:82:c2:13:99:30:
f6:53:df:3c:b9:40:e2:2d:d9:97:86:f5:55:b0:0c:0a:9a:5d:
9a:86:1f:f0:0d:a3:6a:72:84:da:67:1c:38:9f:fb:8e:31:2b:
a5:53:82:b1:2a:e6:26:86:40:e6:43:2c:23:b3:7f:f8:bc:0c:
4d:a1:aa:64:9d:e0:e7:39:af:5d:60:0e:a9:27:a6:9e:eb:da:
19:f2:d7:cc:18:37:50:77:28:52:35:47:81:ba:8c:4e:b5:7c:
f9:8d:10:9d:b5:84:9e:e7:10:4e:23:c6:bb:a3:e4:e9:25:25:
6e:b2:74:c4:fd:97:51:3c:01:34:0e:47:bf:85:84:d4:8b:0e:
16:1c:ab:6e:aa:0a:bd:bf:96:70:d6:9d:21:39:25:5b:da:c1:
5d:a9:dc:01
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUdzcQjtIDOwxBI/ihIC2lHk5yxrIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTA4MDMxMDEyWhcNMjYwODA2MjM1OTU5
WjB6MUkwRwYDVQQFE0AyODJjYzE4ZjJlZTZhNDU2YzhkNDRhNDg1NWExMjRmMDgw
MDJmMDBmODFiOWQ0NGFjODM0NTQzOWExNjJmZWVlMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC633iyky2gQDUnrLtsDnfErdQAN62VaqdP/9Aej6n4lyJk
F3nN1n93LSlLP0LumxHS9x95gGBo7qO9GnwxvD9b11azGiqgpm8/D9xvk3eOsGlM
sa9srRSK3QP5qJdIoVjyR5yX6oZ1LR/uLvr+fi//+VtTkEJt4ByphzlmCSrzZ4HT
2VG0WAUSgMXXSiaApl827orwYhSxKSxABjMAmyPZhs2Fq8Xj4lj4zOotIPvk64hw
Qz06hWZzyfKnAacXTWSxEBJCGZ0AvchX6G6VW0cfSMebkwgtWfpYScJayz5LHmvQ
py6fQI8WMlJBCzDctDDgE7zjxtXBEpd8O8hB+5N3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5UgGbzCOqV69iM5apn4PO4581FkwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2VjYzE1NjkxLTk3MzItNGZkYS1iMmQxLTVhZDE1N2MyODE4ZS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYAMwDQYJKoZIhvcNAQELBQADggEBAF1LknodOfNi0AZPrSh3ZSpQO9jO
gcxGgvZyetan1m+euoaW4xEBW+CmCuPXWfGxmSsFUOUFUBrj9lPagy7cyNaMcfIB
Va/Zsw+EEsjFAtmC46VBo3C7A4DyOLeKEn/6QHSnFtEjd5SCwhOZMPZT3zy5QOIt
2ZeG9VWwDAqaXZqGH/ANo2pyhNpnHDif+44xK6VTgrEq5iaGQOZDLCOzf/i8DE2h
qmSd4Oc5r11gDqknpp7r2hny18wYN1B3KFI1R4G6jE61fPmNEJ21hJ7nEE4jxruj
5OklJW6ydMT9l1E8ATQOR7+FhNSLDhYcq26qCr2/lnDWnSE5JVvawV2p3AE=
-----END CERTIFICATE-----
Generated at Wed May 13 02:41:48 2026 by rpki-client