
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa
File: 3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa (raw, json)
Hash identifier: JSHJC+SNwmXsjq+4fipa7ELIUmVvHyDo9w9If3+mmR4=
Subject key identifier: 8D:48:E7:81:C9:EA:4C:F0:7F:27:92:26:FF:3B:D0:F2:4D:C0:13:01
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 302E8C1501D1EE1F90937061BD36AEEEF578B7A6
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa
Signing time: Mon 26 Oct 2026 00:50:07 +0000
ROA not before: Mon 26 Oct 2026 00:50:07 +0000
ROA not after: Sun 24 Jan 2027 23:59:59 +0000
asID: 8987
IP address blocks: 96.127.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 07 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:2e:8c:15:01:d1:ee:1f:90:93:70:61:bd:36:ae:ee:f5:78:b7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Oct 26 00:50:07 2026 GMT
Not After : Jan 24 23:59:59 2027 GMT
Subject: serialNumber=2551c987c396af3feb90b7d5da8c155bfa3180b57e0ee650eaedecee86ad4713, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b7:21:50:4e:a8:18:67:0c:3a:0e:fb:dd:d9:
74:4a:38:fd:fe:41:95:91:26:f9:2c:cd:59:e8:27:
42:6b:5c:d0:15:3e:e5:87:44:17:fc:74:ea:03:01:
24:fd:da:a3:60:ff:bc:77:71:46:13:85:15:1f:27:
9d:0f:b1:ae:a2:d1:ba:5f:b8:be:0d:ad:4e:5f:6b:
4d:d3:4c:5d:e5:15:b5:cc:cc:bc:7b:5d:27:07:44:
7c:d4:98:64:96:55:f8:80:f6:3b:28:b4:4e:82:b4:
fd:92:1e:8b:b1:d5:7b:58:bf:66:c4:d0:00:01:c2:
7f:70:8c:6d:c7:c5:45:86:e4:8c:2e:16:e1:1b:c5:
fd:5a:a4:d8:01:2d:0e:ba:1f:f8:2d:e3:46:16:54:
f9:f3:36:4e:19:8e:13:ed:98:dc:07:fe:10:e1:ec:
54:59:5b:bf:5a:ea:c2:c4:f9:e6:a5:06:82:ac:60:
02:4f:dd:c6:ae:f2:db:88:22:42:19:8d:63:4b:be:
a1:45:08:aa:bc:9e:d7:87:16:76:e5:eb:ae:53:0f:
05:0d:68:bd:54:da:7a:a3:4a:5e:ae:53:55:73:8f:
95:46:33:0b:f7:e2:d9:3c:66:d1:b4:8b:c1:62:f9:
89:d6:c5:7a:cc:a4:fa:90:3d:3c:40:18:33:2f:65:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:48:E7:81:C9:EA:4C:F0:7F:27:92:26:FF:3B:D0:F2:4D:C0:13:01
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.32.0/19
Signature Algorithm: sha256WithRSAEncryption
39:ba:a3:6a:c6:19:2e:e0:7d:95:d4:17:d5:57:80:1a:b6:e7:
62:6f:f9:00:eb:18:20:6f:0f:46:96:0b:39:ab:b1:4c:d3:1d:
99:0a:b9:50:0c:e9:b6:b1:8d:44:3b:69:be:af:5f:4b:21:db:
a7:4f:8f:0c:e3:4c:06:08:61:8b:cf:6e:b1:d5:f7:ed:70:2c:
c4:b7:6a:bb:c0:0a:f2:71:95:71:53:27:04:20:37:74:0f:e0:
71:74:63:05:91:7f:5a:30:26:14:84:42:29:27:94:11:04:25:
71:5b:82:47:4d:0d:37:73:71:b2:be:36:72:49:4a:c9:e1:9d:
12:78:a6:2e:03:89:76:60:53:df:5b:c7:ac:47:a2:77:b8:e0:
e0:37:bd:59:b1:95:f4:ac:18:32:b2:56:d8:77:72:0a:8b:e9:
24:7f:b7:3a:b9:af:6d:fc:05:90:c7:01:2d:99:75:4a:af:c7:
e8:28:6e:69:29:aa:3f:ce:27:96:31:71:b6:33:3d:4b:6d:89:
a2:43:80:f6:47:53:71:58:8e:55:01:fb:49:a6:91:41:ec:ed:
79:33:63:86:d8:c8:78:a6:61:89:a7:c2:d1:5f:61:89:d4:74:
cc:5f:88:59:b5:96:f3:a7:3f:20:0e:06:41:6b:13:a3:b5:bf:
1e:c2:8b:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:27:57 2026 by rpki-client