
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04db2f61-0fda-4bc9-838b-f44c225734df.roa
File: 04db2f61-0fda-4bc9-838b-f44c225734df.roa (raw, json)
Hash identifier: YwpEfYTW2qzVUlgL/T6x2FTRSG2cOi2584zgmVzyFNs=
Subject key identifier: C5:72:DA:F2:0C:7A:FA:53:01:BD:24:B9:81:B8:08:6E:60:93:8E:4C
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 025E5E7DCC0701323D5D411AA107F0656DA02B28
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04db2f61-0fda-4bc9-838b-f44c225734df.roa
Signing time: Sun 17 May 2026 01:50:30 +0000
ROA not before: Sun 17 May 2026 01:50:30 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:5e:5e:7d:cc:07:01:32:3d:5d:41:1a:a1:07:f0:65:6d:a0:2b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 17 01:50:30 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=0432e51520074f7cd39451f4b036998b76b86a531b7201400cc0637592da42d1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f5:c0:42:74:32:f2:97:f6:4f:12:99:b3:3a:
e7:05:e8:61:50:5f:16:72:69:a9:ba:d2:97:ef:06:
9c:49:e0:69:38:4e:cc:d5:e7:cd:71:5e:6b:26:c1:
4c:d8:11:ae:05:0d:9d:87:9f:7b:e3:90:0b:83:59:
47:67:85:77:1d:b9:52:4e:d9:a1:bc:50:d1:9c:db:
12:ab:65:b6:f6:f3:51:cc:2f:00:9a:7a:2a:a5:ca:
9c:22:c3:ba:90:19:42:be:dc:e8:92:78:5d:af:ef:
47:49:3a:03:fc:dc:78:47:20:f7:86:08:3c:29:ba:
b5:a1:75:da:b3:b5:0c:5c:cd:79:5a:eb:90:ad:d7:
25:08:f1:7e:93:6e:ee:09:12:a3:36:fb:bd:8d:7a:
31:6a:27:96:15:08:51:e3:d6:d5:0a:9b:72:58:1a:
17:9c:15:6f:63:8b:96:78:ef:a2:f4:99:d6:c8:7b:
30:09:66:36:4c:83:55:ce:82:89:d3:a8:3c:4a:20:
35:57:e5:e9:b8:85:2c:ef:33:f4:bf:84:27:96:3c:
10:cd:07:6f:46:f3:e2:e5:54:bb:41:a9:82:5b:7c:
af:0a:a8:24:5d:7a:1b:d3:42:8a:b1:c8:2f:0d:9b:
d4:c3:66:e8:85:91:b8:62:64:01:2e:85:65:fa:e9:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:72:DA:F2:0C:7A:FA:53:01:BD:24:B9:81:B8:08:6E:60:93:8E:4C
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/04db2f61-0fda-4bc9-838b-f44c225734df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.43.0/24
Signature Algorithm: sha256WithRSAEncryption
09:83:e1:9d:1e:77:95:42:ad:89:5c:bb:53:dc:1f:3b:a7:bd:
24:74:fb:0e:cf:4f:37:8c:2c:26:02:9b:36:77:8e:d5:24:51:
af:45:5f:34:f7:47:10:f5:20:ef:e1:2b:2e:37:c9:5e:06:60:
ee:7e:ee:dd:cd:77:f9:36:02:e8:f6:97:d6:f3:e1:bb:f4:6a:
05:1e:32:06:92:90:79:01:f3:b8:54:1f:87:b9:03:8f:b4:d8:
eb:dd:b3:4c:2e:bc:d4:16:99:5c:64:cb:ac:76:c0:ea:5e:1f:
34:61:43:14:e0:d9:b8:de:ac:4f:61:71:96:96:5c:22:98:5e:
11:c4:4e:86:ff:40:1c:c5:29:b8:32:26:41:90:97:4e:41:5e:
e2:fc:4a:9f:c4:fd:70:1c:49:2e:d3:2f:28:8a:ae:ef:1a:f6:
20:22:7b:49:d7:90:0f:e8:d7:09:39:e4:79:2e:e5:47:cb:54:
65:d6:63:f0:c4:34:24:d7:75:45:ef:ee:b2:f0:21:39:31:28:
84:bd:f8:ae:2f:85:8e:97:8e:fa:ca:ee:b2:09:22:e0:54:53:
23:5c:2d:a2:26:da:ec:81:ec:f3:6b:af:d7:79:74:69:3b:95:
7e:1d:45:b8:d2:55:45:d7:9a:17:5e:b2:5d:56:15:24:38:5c:
8b:33:72:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:57 2026 by rpki-client