
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa
File: f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa (raw, json)
Hash identifier: 0RmhWK4wOPatSUDsAgN0whNwxjkSkpYa3r+9MokgV68=
Subject key identifier: 61:94:8E:23:41:AC:A2:E5:02:9B:D4:91:02:4A:1B:3D:CD:22:D3:44
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 66C7B38E58F28252DA1EA6CEBCD25DC8CA8308DD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa
Signing time: Mon 04 May 2026 15:00:30 +0000
ROA not before: Mon 04 May 2026 15:00:30 +0000
ROA not after: Sun 02 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:c7:b3:8e:58:f2:82:52:da:1e:a6:ce:bc:d2:5d:c8:ca:83:08:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 4 15:00:30 2026 GMT
Not After : Aug 2 23:59:59 2026 GMT
Subject: serialNumber=26a6e73118e4d5b08968521001c758c7e634fd983f304befae52ac6b97bf38d7, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:6e:fc:38:35:47:c7:f7:bc:ab:4f:15:87:f9:
b6:bd:01:9f:c0:dd:24:b8:40:01:06:d5:70:69:c9:
9a:a3:f4:26:85:78:1e:0e:2f:0f:41:23:5e:eb:f4:
94:c2:b0:37:54:6e:18:c7:19:ba:40:20:4b:ab:1b:
40:08:9e:28:f9:d4:d1:cb:c1:3f:d1:3f:08:7d:04:
5b:96:ae:a1:7d:ce:a8:30:e1:ac:d1:fa:5c:53:cd:
35:d0:95:69:da:d5:6c:fb:f2:1d:e2:ca:12:31:69:
e2:86:9b:be:cd:b9:50:93:96:a9:51:01:09:55:01:
74:f2:ca:35:04:d0:a6:e2:77:e8:87:57:b4:89:53:
35:54:49:88:9a:76:12:71:43:1d:24:d9:bd:25:3f:
e6:5e:7c:db:bc:a2:10:4d:71:0c:ef:eb:6f:6b:e0:
75:46:2b:2c:e3:a7:2f:5e:17:c1:90:41:52:62:42:
a1:cb:c9:27:8f:32:85:07:3d:0b:01:77:cd:ae:19:
e9:64:d0:23:9a:0a:99:c4:33:f4:44:63:fe:ec:ea:
58:72:bc:95:75:bc:7e:a0:9c:0b:be:48:c6:78:b5:
5e:2f:ad:30:b9:ec:c3:e3:2a:59:0d:32:a1:3e:aa:
6f:0c:6e:05:e3:83:6b:48:60:4b:0f:e8:93:82:3a:
e2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:8E:23:41:AC:A2:E5:02:9B:D4:91:02:4A:1B:3D:CD:22:D3:44
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.28.0/23
Signature Algorithm: sha256WithRSAEncryption
19:c8:db:93:67:48:3b:1c:21:11:e1:a3:4f:c9:7a:23:0e:06:
88:db:00:16:2b:ce:5c:f0:f1:94:0e:21:bf:bb:f3:aa:fb:00:
82:60:fc:32:63:05:51:b3:05:7e:7c:58:75:2d:ae:e9:80:87:
7c:a7:96:44:ce:6b:d3:30:8b:f4:b1:07:79:01:f4:5b:94:f2:
5b:9e:4d:ae:a1:04:83:58:18:3b:9f:e5:29:cd:7e:20:e5:0f:
c0:a6:69:03:cb:db:14:61:9f:2e:5b:3d:af:72:05:d0:e1:f4:
c1:57:86:9b:f7:71:13:ba:e2:b5:29:ec:8d:d6:d5:95:dc:5c:
20:29:33:b2:b8:1b:eb:ad:56:c6:d2:a4:a4:c1:d6:f6:e1:27:
66:55:33:b1:05:ad:06:2a:36:cc:c5:20:2a:1b:ee:13:e8:0c:
73:a4:9a:b2:86:33:65:a7:3c:08:a5:86:93:fe:5f:4b:b6:32:
d5:35:58:f3:88:d4:67:15:13:ea:09:7c:ac:86:5a:87:b3:21:
46:10:78:76:c3:38:d3:78:6b:8d:60:36:05:90:64:90:d3:01:
d1:25:42:27:c8:b6:c1:f5:fd:03:f5:72:dd:74:6b:88:44:32:
55:f7:81:74:ae:90:42:26:60:5c:3e:b2:2a:f7:f1:ea:c2:79:
73:09:58:10
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUZsezjljyglLaHqbOvNJdyMqDCN0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTA0MTUwMDMwWhcNMjYwODAyMjM1OTU5
WjB6MUkwRwYDVQQFE0AyNmE2ZTczMTE4ZTRkNWIwODk2ODUyMTAwMWM3NThjN2U2
MzRmZDk4M2YzMDRiZWZhZTUyYWM2Yjk3YmYzOGQ3MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCnbvw4NUfH97yrTxWH+ba9AZ/A3SS4QAEG1XBpyZqj9CaF
eB4OLw9BI17r9JTCsDdUbhjHGbpAIEurG0AInij51NHLwT/RPwh9BFuWrqF9zqgw
4azR+lxTzTXQlWna1Wz78h3iyhIxaeKGm77NuVCTlqlRAQlVAXTyyjUE0Kbid+iH
V7SJUzVUSYiadhJxQx0k2b0lP+ZefNu8ohBNcQzv629r4HVGKyzjpy9eF8GQQVJi
QqHLySePMoUHPQsBd82uGelk0COaCpnEM/REY/7s6lhyvJV1vH6gnAu+SMZ4tV4v
rTC57MPjKlkNMqE+qm8MbgXjg2tIYEsP6JOCOuIZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUYZSOI0GsouUCm9SRAkobPc0i00QwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2Y3MjM2ZGYxLWQ2YWQtNGZjNy1iNjFjLTViNzBmY2RkOTAyMC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEjYBwwDQYJKoZIhvcNAQELBQADggEBABnI25NnSDscIRHho0/JeiMOBojb
ABYrzlzw8ZQOIb+786r7AIJg/DJjBVGzBX58WHUtrumAh3ynlkTOa9Mwi/SxB3kB
9FuU8lueTa6hBINYGDuf5SnNfiDlD8CmaQPL2xRhny5bPa9yBdDh9MFXhpv3cRO6
4rUp7I3W1ZXcXCApM7K4G+utVsbSpKTB1vbhJ2ZVM7EFrQYqNszFICob7hPoDHOk
mrKGM2WnPAilhpP+X0u2MtU1WPOI1GcVE+oJfKyGWoezIUYQeHbDONN4a41gNgWQ
ZJDTAdElQifItsH1/QP1ct10a4hEMlX3gXSukEImYFw+sir38erCeXMJWBA=
-----END CERTIFICATE-----
Generated at Tue May 12 23:31:32 2026 by rpki-client