
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa
File: f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa (raw, json)
Hash identifier: 16Y2+JbpxvVh5wPREJerQvOi80lpnyrOcw7Iyrt4qO8=
Subject key identifier: BE:8E:D8:55:60:94:3F:E5:8C:4D:A9:F3:97:D1:B3:4F:24:62:2F:86
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 392D318D3D9A37F0FACB0968BFE12455897D8284
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa
Signing time: Thu 23 Jul 2026 15:00:22 +0000
ROA not before: Thu 23 Jul 2026 15:00:22 +0000
ROA not after: Wed 21 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:2d:31:8d:3d:9a:37:f0:fa:cb:09:68:bf:e1:24:55:89:7d:82:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jul 23 15:00:22 2026 GMT
Not After : Oct 21 23:59:59 2026 GMT
Subject: serialNumber=a07eaca572ed5af01f28029c5cee5a525c98edc01fa6a49c0b565241f3dd8b0f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:da:8d:7c:96:16:19:44:48:01:c0:8e:00:
81:e4:00:cc:14:79:00:04:b2:97:b6:7e:b5:49:bf:
ba:24:64:74:da:f7:9c:5e:81:9c:ef:9b:c9:df:ca:
9e:f3:45:5d:a0:77:a9:ba:a6:b8:0c:b1:45:7a:32:
5c:4b:07:17:6f:ed:9d:69:ec:64:13:b0:45:fd:08:
8e:8e:e8:fb:a9:5b:ad:1a:17:14:ca:69:7f:84:07:
ac:fc:d6:21:ab:af:33:73:bc:9d:d2:5e:b9:91:45:
c8:55:08:43:bd:14:1d:fd:75:e1:7f:d9:35:4d:ac:
7d:c1:ef:0e:e2:11:72:b3:bf:36:78:c1:d3:bc:ec:
c8:f0:47:ac:e4:aa:75:15:22:1f:a6:90:a8:ae:10:
4e:7a:c7:94:b7:89:8a:a8:a7:12:74:fb:06:58:3c:
75:d8:cc:ad:24:79:67:d8:c4:86:04:59:51:c7:5d:
c4:0b:e5:0d:aa:fe:7b:e0:1e:ba:b2:67:56:0e:44:
15:1d:2d:85:84:2e:41:b5:a1:8f:b6:cc:ec:73:b9:
de:9a:66:5f:1a:bd:16:d4:bf:7d:a9:b0:0a:56:01:
e7:59:c8:2d:0a:27:96:dd:e6:0b:35:87:85:a8:0b:
bc:4c:96:f0:93:8f:9e:e0:bc:d1:3e:ee:3f:fe:f9:
45:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:D8:55:60:94:3F:E5:8C:4D:A9:F3:97:D1:B3:4F:24:62:2F:86
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/f7236df1-d6ad-4fc7-b61c-5b70fcdd9020.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.28.0/23
Signature Algorithm: sha256WithRSAEncryption
33:ed:87:56:11:c0:55:1b:52:9f:1f:53:07:b8:e7:68:31:1b:
28:da:c4:68:fc:48:cb:41:2e:ce:cf:e5:e7:28:34:f7:04:d9:
78:06:f1:8c:52:79:9a:e0:7d:43:c3:bd:59:1b:f8:b5:35:18:
12:61:f5:26:29:8f:78:2d:f6:b3:c0:75:96:6c:10:8f:29:e3:
8d:d2:eb:ec:a5:bb:5a:c5:ec:98:f3:30:93:99:8c:e3:bf:fe:
99:4a:81:81:32:83:25:bd:9b:f9:cf:02:ec:5c:17:54:1b:3c:
85:30:29:92:34:94:b3:94:69:d2:3c:da:38:3c:a8:e9:a6:06:
a3:aa:10:c4:8f:32:18:47:92:64:7a:4d:eb:e6:e6:e4:a4:97:
10:11:b4:d9:e1:d2:72:cb:e3:52:1e:0f:19:86:71:11:21:73:
00:bb:c6:78:30:11:ca:27:ef:1e:59:eb:9c:c0:22:06:fd:f1:
e8:da:f1:bc:67:b2:18:dc:09:d8:ed:99:f1:67:c2:8e:53:ae:
a4:9c:2f:83:39:e4:a7:66:dc:03:75:ac:da:f6:39:48:63:75:
55:7c:d3:db:7f:07:8f:39:a3:64:63:5b:fe:27:e1:46:d8:d9:
98:41:94:1f:82:36:9e:f3:a6:24:7a:0a:a6:17:97:5a:ba:be:
3e:10:4e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:43:11 2026 by rpki-client