
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
File: 8ac8d230-2c50-472b-aaac-384834352fef.roa (raw, json)
Hash identifier: LbH4FLNf+lRBc7OHBS7a6W4k8VXBlfsNhC5ZXxKI28c=
Subject key identifier: DB:93:7F:66:7F:36:11:8B:3F:76:B3:5A:1B:60:A6:90:E6:DA:97:D9
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 378CBEE12BB1B0E6614FE3199A9D378788D6F561
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
Signing time: Sat 24 Oct 2026 02:03:01 +0000
ROA not before: Sat 24 Oct 2026 02:03:01 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8c:be:e1:2b:b1:b0:e6:61:4f:e3:19:9a:9d:37:87:88:d6:f5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 24 02:03:01 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=a2f06c7af18e5f0b58985a0bae49b42b6fc5a2d069d4eb3f45bb085a085f6c81, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:46:82:0a:57:cf:aa:98:79:fe:cf:da:20:0b:
46:7c:1f:0f:35:0f:df:7b:90:6a:1f:d0:ac:bd:4b:
ab:bc:49:04:70:77:da:7b:d2:df:e6:06:c8:f7:fd:
4b:9b:1c:47:3e:45:8a:b6:94:e6:f9:4b:5f:c4:b2:
de:bf:1e:58:43:b9:11:11:3e:82:a7:9c:fb:a3:fa:
1d:60:04:59:38:d4:d9:8c:8c:6e:69:d5:ab:5b:02:
c5:c0:ef:e3:b1:f8:fa:5f:2b:73:62:e0:a7:7d:41:
91:c3:ff:c8:f8:a6:e7:1f:3a:8e:e1:4c:d2:c9:b2:
02:c7:3d:f5:e9:9a:44:8b:52:3e:62:82:1b:2b:ab:
42:2a:c8:18:96:08:2b:14:23:0e:a1:26:13:db:77:
2a:9b:6c:5b:b7:a8:4e:ee:70:d2:4c:3c:d7:5e:e4:
5b:b5:d5:1e:af:4a:87:a2:b2:12:ff:08:4a:aa:02:
0e:4b:21:de:ca:c7:17:22:92:0d:1c:aa:e3:2f:90:
cb:ba:a3:8e:93:85:fb:9c:e4:83:cf:11:27:b8:b0:
6a:c8:b5:aa:7b:80:b7:95:c2:da:f5:74:6c:b8:ce:
63:ef:07:05:b0:51:52:be:4f:bf:e4:4e:4f:7e:66:
aa:b1:bc:29:24:c6:50:ba:25:44:50:ba:d8:d7:a7:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:93:7F:66:7F:36:11:8B:3F:76:B3:5A:1B:60:A6:90:E6:DA:97:D9
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/8ac8d230-2c50-472b-aaac-384834352fef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.36.0/24
Signature Algorithm: sha256WithRSAEncryption
89:1e:2f:12:e4:d6:a1:d7:bf:5f:94:29:0e:78:91:8b:5b:15:
81:ee:bb:6e:74:fc:c5:d6:f7:3a:c2:81:fd:35:4a:f2:41:f2:
6c:70:0c:0b:f5:a2:f7:43:3a:b0:1a:62:17:dc:14:e2:b7:c5:
c4:18:fe:76:67:f5:25:56:4a:26:ec:90:b3:f4:4b:38:62:77:
5b:7f:0b:7f:c3:df:6b:d9:06:33:43:bb:62:d8:31:92:8d:10:
07:05:b5:13:72:74:6b:0c:ae:69:e8:7a:c7:00:85:2c:55:4e:
5b:aa:05:f6:6a:43:05:c8:78:e2:da:fe:03:ae:85:f7:b9:e9:
19:06:b7:1e:b5:37:aa:99:bf:9e:27:c6:7d:5d:46:3b:a0:fc:
e3:6b:ed:56:3d:df:e7:61:58:dc:58:65:f0:fe:9f:f4:86:a4:
7a:34:09:43:5b:05:33:82:1c:64:48:e0:e0:ee:97:23:83:78:
65:bb:43:95:c0:90:ed:3b:83:4e:08:11:94:fa:ef:2d:cc:ac:
92:b6:09:d5:34:9f:77:67:7e:ea:41:4e:f4:b7:86:34:0e:c8:
56:c2:df:ed:b9:11:1b:5f:ef:ea:bd:b5:26:a1:45:57:ad:fd:
bd:6f:eb:cd:ac:79:82:20:6b:2c:dd:6e:e1:ac:c8:2e:f1:3c:
07:f0:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 09:02:52 2026 by rpki-client