
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa
File: 2b15c9d1-408d-403d-9973-829e5c92c101.roa (raw, json)
Hash identifier: 4PAGHNcC2LOfQr+lyJoLyBPm7Q5uRfw11WT9+hqC3O8=
Subject key identifier: 12:04:71:7D:CF:76:CE:F7:91:29:80:62:F9:0F:3D:AA:9F:BC:B5:B8
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5B0F6D890DA03967CA7B956C984406D740766BEF
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa
Signing time: Fri 13 Feb 2026 15:00:09 +0000
ROA not before: Fri 13 Feb 2026 15:00:09 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:0f:6d:89:0d:a0:39:67:ca:7b:95:6c:98:44:06:d7:40:76:6b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 13 15:00:09 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=293635438baa3cb5be596c419c683e13903d1628f5f325274afd89428c8fe146, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:1d:3f:3b:00:5b:ed:22:4a:04:a5:ab:ad:
e9:19:84:12:35:60:41:d1:bc:49:a6:17:6e:60:0d:
73:c8:70:5a:80:dd:94:09:5f:01:1a:2a:f2:66:d4:
73:c5:be:34:8c:e8:98:bb:e3:1b:dc:a9:94:a6:7c:
1b:f7:b4:f9:50:80:52:1f:88:09:48:fd:06:07:6e:
0b:ec:67:7c:91:fc:96:e1:15:9e:de:58:ff:4d:70:
89:3a:53:10:03:5e:89:ba:41:e7:b2:07:44:82:c1:
bb:27:1d:58:46:68:b8:cd:53:02:1f:d2:06:41:1e:
0c:46:ab:a0:c9:c4:cd:ec:3d:ba:01:6c:2c:aa:97:
54:2a:bf:3e:ce:5a:fe:b1:34:4d:4d:0d:ea:8d:3e:
63:fb:b6:94:1a:d3:e7:fa:20:76:56:05:fd:2f:2a:
9c:9e:0d:ef:61:f0:b4:94:6e:75:02:6e:25:e0:7d:
7d:65:ea:95:48:41:35:7d:63:a1:de:49:0d:58:9f:
f8:45:d8:ce:29:f7:21:3c:0b:38:c5:05:5f:0f:e2:
b8:e1:4d:fd:24:26:ad:3c:c6:34:7b:e1:a1:ad:95:
32:0d:1c:ca:18:68:62:10:e2:3f:c9:a9:79:84:1e:
ca:ff:0b:dc:18:01:54:a1:fd:c0:65:6a:06:ef:54:
10:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:71:7D:CF:76:CE:F7:91:29:80:62:F9:0F:3D:AA:9F:BC:B5:B8
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2b15c9d1-408d-403d-9973-829e5c92c101.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.26.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:4d:f5:e0:ad:b1:5a:e0:a7:0f:e6:8f:43:df:1d:a1:3f:2c:
03:bb:cb:6a:bb:b1:77:b2:17:07:5b:6d:1a:87:a7:eb:1b:54:
d8:c6:7d:a2:2b:92:17:46:fa:40:d1:c9:c1:64:ce:35:2d:b9:
5e:65:14:14:52:d8:a9:02:a4:7d:28:4e:62:00:46:ac:aa:2d:
ac:9a:1c:af:63:ca:e1:66:90:17:93:4e:01:86:38:98:c1:e8:
89:18:c9:3d:08:c4:56:88:b9:da:b6:2e:42:91:10:b3:26:24:
02:cc:de:2a:4d:e4:15:a4:68:ec:d9:7e:72:28:59:af:45:8f:
73:e6:d6:08:7c:d1:a8:bd:93:f3:2c:d2:4f:d2:34:e4:7c:74:
e3:07:e2:6c:10:ab:77:5a:3b:79:aa:2e:99:47:90:07:8b:63:
23:e5:01:41:0c:53:f1:fa:56:a9:5e:5b:da:28:c1:69:a5:d7:
df:f1:b7:7c:dd:cd:8b:70:f4:4d:25:ba:45:e3:2f:1f:bf:06:
3c:96:86:9c:89:0b:a6:99:34:49:2a:33:df:aa:cc:92:61:31:
e8:30:4b:92:75:4b:b0:97:fe:eb:dd:36:fd:99:ad:94:0e:da:
09:66:6c:73:0e:7c:5e:3a:e5:63:b1:a5:e7:ad:7a:16:fa:a6:
72:ff:30:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:47:30 2026 by rpki-client