
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
File: 8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json)
Hash identifier: 31iuYSkVHy0AuY2TXQRerGgysShJiC6uai+IJ+MK6K0=
Subject key identifier: D4:9B:4F:59:55:26:F0:8A:00:B2:B8:FE:16:3B:08:47:6D:64:60:61
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5904CC81F98B5A7059CE35C9B8E64BDD702CF4F0
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
Signing time: Sun 17 May 2026 02:00:07 +0000
ROA not before: Sun 17 May 2026 02:00:07 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:04:cc:81:f9:8b:5a:70:59:ce:35:c9:b8:e6:4b:dd:70:2c:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: May 17 02:00:07 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=dff78823a9507c40df1b71827f19a5245154c6911a7f152dc624599c929924ee, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:96:a8:4b:a5:ef:66:9b:84:f1:52:d4:a8:66:
c3:b1:e5:d1:f9:b1:0c:3b:dc:0d:43:61:8b:16:ef:
b9:f6:7a:f9:a8:db:2b:5b:9c:e7:4b:62:f3:01:c6:
bc:19:89:b3:8b:7a:f0:ad:75:dc:84:cb:6a:8c:df:
74:2c:04:8c:e2:a2:b8:71:cc:3b:14:3d:c2:e8:a1:
51:bd:6f:c7:3d:3d:b0:94:5d:82:28:02:d9:2b:a7:
b7:ae:00:2a:e8:8a:36:30:a9:cb:bc:79:b7:cc:15:
0b:26:6d:de:f9:cc:8b:fc:41:7e:4b:7d:6a:d0:7a:
dc:b9:2f:ec:7c:1c:26:08:fb:f0:44:90:6f:29:a1:
b5:79:02:3d:0b:d6:47:65:e6:89:ff:8c:2c:1b:a4:
65:0f:2f:7a:9f:da:06:77:7f:27:0a:23:25:89:b2:
fd:e8:89:c1:24:e2:b4:70:a0:b6:60:86:d2:11:42:
fd:f0:0f:6c:1e:66:56:17:57:4e:2a:15:5f:44:da:
d8:11:62:3e:fa:38:d1:00:be:76:c7:0b:bf:cb:96:
b4:38:f8:9c:0c:66:96:10:71:69:7d:09:2d:bd:be:
05:72:26:96:65:2f:47:f3:5a:41:51:55:f3:6d:56:
1b:02:66:d9:70:ee:cf:57:fc:31:e0:2e:c0:a4:4a:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:9B:4F:59:55:26:F0:8A:00:B2:B8:FE:16:3B:08:47:6D:64:60:61
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6b:bd:05:a9:05:6b:d1:2f:06:b6:ce:ef:6d:2f:1c:df:bd:
6a:93:4e:fa:18:f4:76:bb:0a:36:90:02:8e:d2:ca:1a:f3:12:
9a:c8:e0:7f:7b:70:53:9a:26:96:37:3b:94:35:33:89:c2:78:
c6:4b:9d:e6:c0:a4:59:0a:e1:85:b9:fe:96:a3:7b:57:f8:51:
0e:53:19:8b:45:ff:a3:23:7e:10:e9:dd:6d:9d:91:e4:12:48:
73:68:eb:80:2b:cb:33:63:13:8c:9e:6d:01:58:17:2f:9d:8c:
45:13:e5:66:90:8b:34:75:54:43:85:82:74:fd:90:d2:db:a1:
ce:06:14:99:14:cb:ae:60:8e:fa:e3:53:08:3c:13:35:4d:ba:
69:56:2d:11:88:2c:94:4b:db:76:c9:8a:f3:01:6c:da:87:f7:
3f:d2:65:8a:f0:1b:99:ab:69:84:16:59:b3:b8:05:fb:72:97:
b7:9d:ca:c7:c0:84:f6:30:59:4d:44:2b:4c:37:91:2e:ee:a7:
da:b7:84:63:d8:f2:a6:ac:de:4a:8c:6f:41:1b:f6:5a:0d:12:
0d:70:ea:0e:ef:22:c4:f6:14:7c:18:85:26:1c:14:87:c8:8a:
68:fa:a1:36:18:ab:ce:bf:d6:70:0e:17:69:31:cb:74:37:20:
cb:e7:4a:21
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUWQTMgfmLWnBZzjXJuOZL3XAs9PAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNTE3MDIwMDA3WhcNMjYwODE1MjM1OTU5
WjB6MUkwRwYDVQQFE0BkZmY3ODgyM2E5NTA3YzQwZGYxYjcxODI3ZjE5YTUyNDUx
NTRjNjkxMWE3ZjE1MmRjNjI0NTk5YzkyOTkyNGVlMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDOlqhLpe9mm4TxUtSoZsOx5dH5sQw73A1DYYsW77n2evmo
2ytbnOdLYvMBxrwZibOLevCtddyEy2qM33QsBIziorhxzDsUPcLooVG9b8c9PbCU
XYIoAtkrp7euACroijYwqcu8ebfMFQsmbd75zIv8QX5LfWrQety5L+x8HCYI+/BE
kG8pobV5Aj0L1kdl5on/jCwbpGUPL3qf2gZ3fycKIyWJsv3oicEk4rRwoLZghtIR
Qv3wD2weZlYXV04qFV9E2tgRYj76ONEAvnbHC7/LlrQ4+JwMZpYQcWl9CS29vgVy
JpZlL0fzWkFRVfNtVhsCZtlw7s9X/DHgLsCkSsejAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU1JtPWVUm8IoAsrj+FjsIR21kYGEwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzhhYzhkMjMwLTJjNTAtNDcyYi1hYWFjLTM4NDgzNDM1MmZlZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYCQwDQYJKoZIhvcNAQELBQADggEBAE1rvQWpBWvRLwa2zu9tLxzfvWqT
TvoY9Ha7CjaQAo7SyhrzEprI4H97cFOaJpY3O5Q1M4nCeMZLnebApFkK4YW5/paj
e1f4UQ5TGYtF/6MjfhDp3W2dkeQSSHNo64AryzNjE4yebQFYFy+djEUT5WaQizR1
VEOFgnT9kNLboc4GFJkUy65gjvrjUwg8EzVNumlWLRGILJRL23bJivMBbNqH9z/S
ZYrwG5mraYQWWbO4Bftyl7edysfAhPYwWU1EK0w3kS7up9q3hGPY8qas3kqMb0Eb
9loNEg1w6g7vIsT2FHwYhSYcFIfIimj6oTYYq86/1nAOF2kxy3Q3IMvnSiE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:44:33 2026 by rpki-client