
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/978d02aa-60d3-4d9d-a519-826716493d74.roa
File: 978d02aa-60d3-4d9d-a519-826716493d74.roa (raw, json)
Hash identifier: v+uepTJQqO59unRpAq75ry5GPalhzl3puj+QF0CnSLU=
Subject key identifier: E8:6F:8B:E6:22:C3:67:25:D7:BC:DC:4E:7B:43:5C:5D:53:E5:35:D4
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0831BACB22E059CD7E4D46D3B1EFF7F6FC3D57B7
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/978d02aa-60d3-4d9d-a519-826716493d74.roa
Signing time: Sun 26 Jul 2026 00:00:32 +0000
ROA not before: Sun 26 Jul 2026 00:00:32 +0000
ROA not after: Sat 24 Oct 2026 23:59:59 +0000
asID: 14618
IP address blocks: 2631::/24 maxlen: 48
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:31:ba:cb:22:e0:59:cd:7e:4d:46:d3:b1:ef:f7:f6:fc:3d:57:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jul 26 00:00:32 2026 GMT
Not After : Oct 24 23:59:59 2026 GMT
Subject: serialNumber=e4d158a16cc27ae3382019d58c3088596eb7851d9e5566d74027114dda279680, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:21:03:02:80:2a:98:f5:94:22:28:82:b3:ef:
32:cc:55:84:69:34:1f:c8:30:ce:23:aa:f2:d2:82:
93:db:6f:44:ae:94:dd:d1:9d:9e:b1:bd:3b:f7:0d:
80:b9:3b:a3:6d:24:00:d1:8c:c9:c4:3b:0d:ff:61:
2a:94:07:6e:4a:3d:87:9d:05:37:39:8d:bd:4b:48:
ad:54:b5:46:0d:3a:82:d1:ea:c8:0b:a1:de:f8:fb:
b5:15:40:87:cf:70:11:bf:85:cb:d3:2a:ee:5f:51:
4a:c1:84:29:ea:61:69:09:b4:19:ca:e4:09:99:bd:
4b:a7:1d:fd:14:97:df:86:cf:6d:d7:0c:33:7e:66:
02:2b:ad:b8:8d:3b:02:82:2f:77:8a:36:ff:74:71:
b6:57:0a:69:25:05:55:49:aa:32:77:24:71:ef:83:
41:fa:38:c2:2a:11:c8:47:54:69:ea:30:9d:eb:28:
79:59:c1:18:24:31:e6:a8:0b:aa:40:d8:68:00:7f:
9f:70:fb:88:4b:c9:1d:b7:de:53:70:a9:38:86:f0:
7f:95:7e:84:89:bb:2e:c6:63:c3:ea:06:d8:ee:0b:
7a:3b:35:91:fc:b3:a5:2e:88:2c:ab:cb:73:a4:94:
ac:0f:ed:6a:ce:91:c4:78:db:ff:dd:ad:e5:43:0d:
8f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6F:8B:E6:22:C3:67:25:D7:BC:DC:4E:7B:43:5C:5D:53:E5:35:D4
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/978d02aa-60d3-4d9d-a519-826716493d74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2631::/24
Signature Algorithm: sha256WithRSAEncryption
83:a5:74:9e:f1:05:a5:ae:ca:8b:5b:a4:50:6e:b4:34:8e:07:
c1:55:15:ba:87:3a:0f:f5:27:81:eb:b0:f3:53:62:c5:87:0b:
d3:cb:e7:7a:16:18:96:dc:0e:17:a8:ee:7f:da:ed:69:e2:bb:
87:13:f7:06:88:2e:d8:17:49:85:76:02:90:51:ea:c5:2d:2d:
cc:05:53:34:ab:15:8c:f6:74:e6:b7:05:8d:9a:c7:34:63:d8:
30:94:8b:dd:39:c1:19:52:20:0b:72:d1:f2:ed:cc:69:d6:0f:
06:cf:14:d7:8f:10:4a:36:5c:7e:e8:e6:8a:f4:af:75:b4:81:
e0:e6:18:8b:e4:a4:a1:95:45:72:af:ac:64:5c:b1:c4:45:d0:
35:80:23:85:db:f0:04:e5:ec:2c:6f:d4:68:4f:fe:19:7b:9f:
01:49:7c:ec:af:3c:59:97:3b:3c:a2:f5:d3:ac:b3:21:11:ad:
5f:79:4e:57:c2:7b:7e:69:74:19:fc:69:31:16:26:fd:6b:62:
04:98:90:70:4c:d5:7a:94:42:3d:b0:2e:3f:93:5b:62:86:e7:
b3:5c:94:b3:d3:65:a1:f3:4f:d6:ab:d4:89:68:56:6a:34:42:
66:74:af:bc:a5:01:eb:ef:72:a9:f5:64:41:dd:a4:d9:d9:27:
f7:69:9e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:21:47 2026 by rpki-client