
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa
File: 74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa (raw, json)
Hash identifier: AK8fgLncv/8xCMegcA50cBJme8HwFFZNwqzjq2PeUFo=
Subject key identifier: 53:81:96:79:82:6E:34:42:50:89:EB:56:DC:E7:2D:31:47:FD:B9:F1
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 3FC1CDC1990815FE0B2EECF51785D6EA5C77D9DB
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa
Signing time: Tue 19 May 2026 04:00:09 +0000
ROA not before: Tue 19 May 2026 04:00:09 +0000
ROA not after: Mon 17 Aug 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c1:cd:c1:99:08:15:fe:0b:2e:ec:f5:17:85:d6:ea:5c:77:d9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 19 04:00:09 2026 GMT
Not After : Aug 17 23:59:59 2026 GMT
Subject: serialNumber=2405d51fd68460cf17676aaf51db246330f0a8a482dc32b60b25be104a217f31, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:d9:ae:85:49:87:6f:0a:1e:fb:d7:73:0e:
a1:8e:69:73:74:75:b2:92:fd:b4:c2:3c:12:0e:ac:
07:23:62:a6:ea:2d:5d:6b:84:d1:cd:49:c0:cb:55:
ee:fe:47:0d:d4:dc:55:c6:86:c1:6c:d6:1d:69:de:
14:0c:a6:3f:a0:7b:d0:0b:64:4e:37:6c:7b:97:d6:
f8:8e:e0:29:4c:e5:d8:c9:6a:08:c8:c8:5f:cc:d3:
54:78:f9:8c:00:91:66:88:f6:2f:a2:86:a9:ec:07:
2b:61:b8:c9:3b:46:7f:54:95:54:6c:f6:38:d7:46:
28:72:29:df:fb:0e:2a:8f:09:0d:9c:e6:42:77:53:
26:88:6b:3d:f3:f6:60:f7:d5:89:50:70:80:e7:c2:
9a:80:2b:87:fc:28:97:74:a7:99:01:45:bf:0a:27:
e9:df:11:a8:5c:da:0a:b7:5a:f4:61:c7:aa:56:2f:
da:35:a8:ce:d1:38:a4:e4:ea:e8:93:01:01:8d:97:
02:1e:36:43:f2:a8:3b:10:f4:35:be:56:e2:47:d7:
dc:b0:c5:01:16:5a:20:24:42:63:4a:8e:19:2b:b5:
af:55:a4:87:45:0b:04:c7:47:25:2d:28:db:4d:d2:
61:bb:d2:af:35:73:2b:93:5e:01:b5:b8:02:f7:5d:
5e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:96:79:82:6E:34:42:50:89:EB:56:DC:E7:2D:31:47:FD:B9:F1
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/74abdb75-ce74-4f18-ac4b-2432fc81d1f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.46.0/24
Signature Algorithm: sha256WithRSAEncryption
01:47:6e:83:44:a3:50:c0:51:fb:41:6a:ed:0f:cf:2d:79:d1:
27:77:7f:72:7b:1a:17:a2:33:3a:e5:46:c7:90:04:49:21:06:
bd:9c:9a:6c:b4:0e:42:66:91:2a:ba:d1:ff:b1:46:e5:f0:d4:
b9:b7:fb:6e:57:7f:5e:3f:bb:b9:30:bb:06:3d:11:8c:a7:6c:
48:ba:6c:ad:44:de:15:32:42:34:03:5d:ff:e1:6c:4d:1a:8a:
e0:2d:65:da:a1:f3:37:b5:a5:a8:23:6c:55:78:6f:8a:4d:e1:
ae:66:d3:1a:3e:54:aa:60:7e:d0:87:95:3c:4f:23:51:af:1a:
38:71:be:9c:c7:1b:28:2f:d1:a8:7d:3e:54:12:23:3f:ca:16:
2c:db:e2:62:8e:b8:38:26:64:ee:a4:f2:42:91:f7:0d:b6:29:
2d:8d:23:1c:06:29:26:73:19:b0:4f:ca:63:98:27:c2:f6:f5:
98:34:a1:39:31:48:a5:64:e0:91:e8:c6:b9:af:7e:4e:c3:64:
d3:bf:68:67:95:47:23:84:36:65:1d:8c:2c:7a:36:c2:e6:44:
73:9e:93:fa:56:2a:d3:e8:27:be:e4:f9:cd:a1:a9:34:7e:6a:
92:15:db:ed:c1:14:90:9d:98:03:e4:29:e6:4c:87:c7:3a:cc:
c8:1f:fe:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:27:34 2026 by rpki-client