
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa
File: 56bfd5b7-3418-4344-a865-789d203e14b2.roa (raw, json)
Hash identifier: oh00CXUlY9etgdl0TV2rGYbPg/1bcx8bf+irDA2UM/U=
Subject key identifier: 93:C7:53:B5:88:44:0C:DC:F8:6A:0B:67:58:BB:D6:91:70:47:FD:AA
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 56877F2286AC4E8CF13EB5DB186B1B387F2102AA
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa
Signing time: Mon 19 Oct 2026 01:50:16 +0000
ROA not before: Mon 19 Oct 2026 01:50:16 +0000
ROA not after: Sun 17 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:87:7f:22:86:ac:4e:8c:f1:3e:b5:db:18:6b:1b:38:7f:21:02:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 19 01:50:16 2026 GMT
Not After : Jan 17 23:59:59 2027 GMT
Subject: serialNumber=8bebf1c102f00e6c309ce81441aac5bdf34008265a1772c7a1b382fdd5e8ee4c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:e6:ac:32:24:fe:a6:b0:fc:87:42:7e:b2:
9d:ae:03:ef:a1:5d:25:6b:3e:f1:7d:bc:11:9e:4f:
50:f8:0d:cf:6d:3d:95:2a:a4:3b:24:72:31:c8:20:
69:63:93:05:a6:97:a1:3e:85:28:5f:8f:55:b7:69:
38:bd:e0:a0:d9:90:46:51:c1:53:e6:26:6f:ae:94:
7a:fc:55:37:91:06:b9:d3:26:b4:03:26:92:0b:d6:
58:cb:3e:22:6c:16:3e:44:a0:1d:3f:fe:ff:d5:35:
7d:69:d2:b7:cc:d1:85:75:ac:1e:03:cc:77:a1:0b:
57:b1:a2:58:39:61:54:1a:cd:ac:cf:8a:73:f8:89:
5c:c9:87:4c:3e:34:0a:db:bc:04:1f:01:a0:da:93:
0b:f3:18:b7:c8:3a:22:2f:a0:a1:0c:3c:b2:03:5d:
e3:df:0f:2b:5d:6b:25:19:ac:2e:40:92:e9:4b:d2:
d4:d4:32:15:be:43:fd:4a:a7:65:fd:2d:e3:57:60:
fe:8d:61:9c:a5:5b:46:99:e1:c1:32:30:c8:41:34:
a9:ab:c0:16:6e:c5:27:41:a3:13:6c:1e:93:f4:9b:
b1:8c:24:8c:b6:e6:b4:a7:d0:f1:64:22:38:fc:d6:
71:f4:c6:5f:24:5f:47:48:67:4a:17:e3:a4:d4:ce:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C7:53:B5:88:44:0C:DC:F8:6A:0B:67:58:BB:D6:91:70:47:FD:AA
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.48.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:22:80:5a:da:bd:9a:d6:f4:96:17:43:9f:79:ba:ee:83:f0:
a7:95:68:fb:d4:1e:2e:2b:cf:7b:4b:62:65:b8:f9:96:81:5d:
95:39:50:53:eb:0e:5b:11:bb:14:94:0f:e9:6f:33:78:c0:69:
fc:db:3e:0e:8d:69:ff:0c:d7:d4:d8:98:12:15:c0:81:41:5b:
13:d7:37:e5:ff:52:1c:9f:fb:b7:0f:31:b3:b0:ed:b5:41:e6:
56:45:7b:f5:76:d2:34:de:a8:7f:00:21:ea:81:91:31:29:b4:
10:58:10:ba:65:78:82:09:fb:97:a0:8a:ef:7d:e5:8a:0a:dc:
ba:af:89:5d:ce:80:41:19:90:37:1f:28:2e:db:e8:43:20:fd:
e5:4d:99:68:9b:26:ab:e2:30:e9:fa:78:66:c8:97:dc:a2:ed:
be:2d:f5:fc:c5:ad:9c:3a:07:e9:83:b9:d4:4b:c1:58:03:02:
a8:07:bd:f5:0b:8d:a8:2c:9c:ef:ce:30:2f:e3:a7:1c:e2:ef:
66:f3:a0:aa:b5:db:9f:b0:53:e2:02:7c:a8:78:75:75:dc:c5:
ed:40:0c:2e:60:63:a3:9a:cb:7f:f9:db:1e:98:f9:50:99:e4:
4f:2c:3f:e9:45:71:9d:51:c0:bf:19:2f:aa:ad:d2:f2:80:15:
7e:ad:1c:1a
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUVod/IoasTozxPrXbGGsbOH8hAqowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDE2WhcNMjcwMTE3MjM1OTU5
WjB6MUkwRwYDVQQFE0A4YmViZjFjMTAyZjAwZTZjMzA5Y2U4MTQ0MWFhYzViZGYz
NDAwODI2NWExNzcyYzdhMWIzODJmZGQ1ZThlZTRjMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCgY+asMiT+prD8h0J+sp2uA++hXSVrPvF9vBGeT1D4Dc9t
PZUqpDskcjHIIGljkwWml6E+hShfj1W3aTi94KDZkEZRwVPmJm+ulHr8VTeRBrnT
JrQDJpIL1ljLPiJsFj5EoB0//v/VNX1p0rfM0YV1rB4DzHehC1exolg5YVQazazP
inP4iVzJh0w+NArbvAQfAaDakwvzGLfIOiIvoKEMPLIDXePfDytdayUZrC5AkulL
0tTUMhW+Q/1Kp2X9LeNXYP6NYZylW0aZ4cEyMMhBNKmrwBZuxSdBoxNsHpP0m7GM
JIy25rSn0PFkIjj81nH0xl8kX0dIZ0oX46TUzrjlAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUk8dTtYhEDNz4agtnWLvWkXBH/aowHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzU2YmZkNWI3LTM0MTgtNDM0NC1hODY1LTc4OWQyMDNlMTRiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYDAwDQYJKoZIhvcNAQELBQADggEBAD0igFravZrW9JYXQ595uu6D8KeV
aPvUHi4rz3tLYmW4+ZaBXZU5UFPrDlsRuxSUD+lvM3jAafzbPg6Naf8M19TYmBIV
wIFBWxPXN+X/Uhyf+7cPMbOw7bVB5lZFe/V20jTeqH8AIeqBkTEptBBYELpleIIJ
+5egiu995YoK3LqviV3OgEEZkDcfKC7b6EMg/eVNmWibJqviMOn6eGbIl9yi7b4t
9fzFrZw6B+mDudRLwVgDAqgHvfULjagsnO/OMC/jpxzi72bzoKq125+wU+ICfKh4
dXXcxe1ADC5gY6Oay3/52x6Y+VCZ5E8sP+lFcZ1RwL8ZL6qt0vKAFX6tHBo=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:50:34 2026 by rpki-client