
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa
File: 619deba8-10a4-4570-992e-49cf451e8d80.roa (raw, json)
Hash identifier: q2/ji4XmIRHIC7EXddh7YSNYECU2X0aK4/vieFRQKbw=
Subject key identifier: 2B:F9:B4:D5:02:3A:11:D9:26:8B:5F:AC:79:9E:D6:FC:11:AE:AB:1E
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 30F348FC0F6B267848CB61BF9D3118E02EE33A3D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa
Signing time: Thu 26 Feb 2026 01:50:03 +0000
ROA not before: Thu 26 Feb 2026 01:50:03 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:f3:48:fc:0f:6b:26:78:48:cb:61:bf:9d:31:18:e0:2e:e3:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 26 01:50:03 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=e37b890ffb37caac1c109dbcad2355ae0cfab93904e6f6c52e4fb0f106458f99, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:29:2a:fb:a8:3c:83:1c:70:e2:2e:21:65:d4:
3f:f1:6f:a6:ef:c3:53:b7:21:fa:28:89:da:20:df:
ca:65:7a:66:0b:52:11:c2:d3:14:02:43:1c:09:49:
02:7a:9b:bc:c5:97:4c:74:36:66:b5:05:be:e9:eb:
e6:f7:bc:2f:80:91:66:15:9a:13:b1:87:d4:c1:11:
0c:f2:cb:6f:2a:68:9f:df:d2:8b:c6:9b:2b:ba:26:
31:a9:db:78:89:e1:36:75:70:9f:70:85:16:a2:c3:
ec:c7:54:4f:04:c8:f5:8d:83:d6:70:ba:98:e5:1b:
7b:b1:48:a2:89:e2:f0:5f:f7:42:08:07:ca:6d:52:
96:94:39:52:ca:b6:5c:99:a7:31:f3:17:5d:d1:6a:
98:b2:8e:7a:07:9c:d5:46:07:b3:95:f2:5e:41:9f:
f0:de:f0:c9:94:c5:73:b6:c4:4b:e9:20:ca:d2:3f:
ab:9f:23:cf:7d:1b:af:c9:03:47:7b:25:1e:e6:00:
16:ab:14:5f:b7:10:91:09:f5:a8:21:a9:02:09:7d:
66:53:66:c1:de:09:dd:90:eb:6b:f3:e3:a3:dd:e4:
10:b2:38:76:b3:9d:89:1e:fd:b0:c7:e7:95:a0:f4:
18:16:ac:f2:06:8a:99:51:87:26:91:b0:c1:43:4a:
ef:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:F9:B4:D5:02:3A:11:D9:26:8B:5F:AC:79:9E:D6:FC:11:AE:AB:1E
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/619deba8-10a4-4570-992e-49cf451e8d80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:a7:76:bb:f8:d5:9a:59:b5:ad:3b:64:c5:5c:76:36:8a:75:
26:2d:f4:95:1a:e1:56:7b:5b:74:55:6c:ee:9b:91:39:e4:de:
cb:d5:b2:aa:c3:de:a7:d0:2d:b6:3a:0c:ad:ed:c5:ee:f0:32:
4b:d0:b9:d8:fa:d3:13:ed:74:b1:89:c6:00:f2:45:28:b6:d8:
48:23:28:e9:92:54:86:84:3b:d2:fc:d5:4d:9a:8c:c4:42:cd:
94:33:0a:47:6f:5a:ab:01:69:5b:38:4d:a6:4e:6d:4d:c5:ee:
41:b5:2e:0e:fe:df:e2:b3:e6:01:ac:d9:2b:3c:50:1c:de:61:
1b:ab:bc:ee:a3:47:c8:7f:b9:bb:67:19:e9:ea:38:bb:95:bd:
c4:e9:63:28:7d:5a:2d:dc:51:30:e2:3b:d7:49:52:67:1f:a7:
1d:74:68:d6:4e:fb:82:89:6f:28:7f:df:89:3a:48:bd:72:f6:
e6:4f:25:24:22:86:bd:a1:2c:c8:98:f2:e8:3f:c4:60:02:48:
42:52:b2:87:d4:7e:4b:40:7b:00:bb:4c:d8:dc:57:1a:48:47:
2d:a6:17:43:17:e8:cc:86:0a:01:83:1f:05:e2:f1:e3:46:b0:
2f:37:92:19:d9:a3:56:48:5c:e0:56:cb:f6:ee:5b:46:54:15:
a5:a8:18:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:48:30 2026 by rpki-client