
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa
File: f0a96265-a445-4e05-83b9-a3b3fd739677.roa (raw, json)
Hash identifier: C5PP9xnLykb2d98kIHM83X5KXrS5A8CR7IIlSKqaeWE=
Subject key identifier: 82:06:C5:74:12:75:BC:7A:9D:83:37:A7:63:15:A1:AD:EB:1D:6B:8D
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5E056DF4EC25E3CBE3BE678FD89BCF8882C37A44
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa
Signing time: Thu 23 Jul 2026 15:00:22 +0000
ROA not before: Thu 23 Jul 2026 15:00:22 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:05:6d:f4:ec:25:e3:cb:e3:be:67:8f:d8:9b:cf:88:82:c3:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jul 23 15:00:22 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=aad986b31b06a126c5305beefdeb56631f78ce241a160a556c8bad0ae7411123, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:40:97:07:4e:a5:d8:43:8c:60:e2:bc:45:1f:
14:1b:d6:06:20:6e:e1:03:4b:ec:c0:39:9e:c0:aa:
6e:51:11:5b:60:bd:58:5d:cf:67:ad:44:fe:cb:d3:
f9:c2:99:c7:24:ac:44:6c:cc:9f:e2:af:93:f7:eb:
f0:53:d7:02:84:00:04:a5:9d:66:dd:2b:ea:b8:2c:
8b:30:e4:80:57:5c:63:a5:3d:6a:f0:ea:96:70:7c:
4a:8d:9d:8e:c0:04:93:30:cf:91:02:6e:3f:5a:a8:
ed:2f:28:c0:b1:33:d3:f9:bf:71:77:84:21:8d:7f:
05:c5:ce:fc:f5:29:1f:01:29:71:34:06:5c:4f:29:
63:b1:50:59:ec:9b:f9:0a:7f:6a:25:f1:67:85:51:
f6:63:7b:0c:af:3f:70:d1:73:f5:a7:d2:f7:1a:83:
23:57:e3:1b:e0:14:10:62:77:42:ce:7d:cc:06:07:
10:33:7f:ca:83:2a:37:38:25:74:01:54:90:63:15:
85:ad:25:77:8f:b7:c6:2d:a9:11:fa:28:95:04:c6:
c9:bc:d8:39:66:68:22:6f:e5:94:25:20:8a:20:15:
c8:02:22:11:d9:fd:6d:c1:f0:d9:16:d9:ed:56:6b:
71:14:44:df:a5:df:d0:49:ee:f7:b3:32:96:32:69:
06:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:06:C5:74:12:75:BC:7A:9D:83:37:A7:63:15:A1:AD:EB:1D:6B:8D
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f0a96265-a445-4e05-83b9-a3b3fd739677.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.28.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:13:4c:77:31:b9:8d:ed:02:97:23:4c:a2:6f:94:a0:3c:5d:
d5:e7:1d:5d:37:9f:6a:10:6f:b6:d7:40:a0:19:d5:98:55:c7:
14:2c:f8:28:fc:ed:76:87:c2:a0:6e:15:1a:cd:d9:56:86:64:
d8:b8:e4:ab:b6:09:c8:d1:1f:a6:cf:33:95:4e:61:7f:64:ea:
df:91:38:c6:b4:59:2f:c7:03:8e:68:7e:fe:8c:2f:1e:ca:b3:
d8:73:1a:52:13:65:2d:50:f9:ba:96:64:62:7e:3f:ba:9c:35:
f3:62:97:7c:8d:00:65:5d:f8:bd:b6:5f:07:d2:80:ff:7a:b6:
ce:1e:ee:2f:14:fc:d5:90:b5:ff:0e:74:55:02:a9:e7:67:08:
3b:ba:b4:39:48:21:79:cb:c5:94:27:c1:86:11:3f:e7:52:4b:
f2:95:08:9f:91:c7:62:3e:9c:36:1e:7d:2a:f0:3a:b2:52:dc:
fa:7d:77:b7:89:98:3b:ea:bf:8c:89:e5:b8:c1:52:f8:32:a9:
2c:3b:79:89:f5:d5:00:36:0a:1a:13:86:d6:ca:5a:b5:be:94:
74:8b:8c:74:fd:9c:f7:33:3a:df:41:93:cf:fc:6c:fa:3d:05:
25:b8:94:65:a8:2c:fb:2a:5e:96:a7:c7:c0:1a:2c:4a:60:c1:
f4:6b:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:11:17 2026 by rpki-client