
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa
File: 9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa (raw, json)
Hash identifier: kZgZkS6XIDVl9sHJU3jPuDYtxP3uFpI3aHap0zbClUA=
Subject key identifier: 5A:F8:CE:13:A2:93:C0:85:83:49:47:92:50:0F:CA:C0:F8:71:11:EC
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 3DA4D3F0F841D6B95179932FD4848983B9C31D77
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa
Signing time: Tue 04 Nov 2025 00:30:08 +0000
ROA not before: Tue 04 Nov 2025 00:30:08 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a4:d3:f0:f8:41:d6:b9:51:79:93:2f:d4:84:89:83:b9:c3:1d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Nov 4 00:30:08 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=0f942fd90d4b691dfeda78406a7308fd60e75c7dc8a114d49cd88dfc97096519, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:93:4e:1f:25:99:27:aa:32:59:4d:71:94:
ed:f6:11:ca:52:f0:bd:84:ed:1e:0a:49:11:c1:56:
22:ee:99:18:36:73:24:c3:d9:19:76:84:99:43:f4:
0a:84:47:f4:26:a8:db:64:11:ba:8d:e2:8c:68:b7:
d6:e2:ae:f2:a1:c8:57:4e:47:38:87:08:27:ca:0b:
46:f8:04:f1:5b:21:07:07:ef:e9:c4:58:8f:2a:ab:
a8:62:f8:eb:a4:10:fe:44:d3:fd:f5:0f:7b:29:6d:
0b:8f:d9:6f:c6:8e:44:48:e3:4e:0b:5a:41:a5:d8:
d1:29:d8:b2:52:31:6e:e7:fc:7e:6b:ca:b2:72:73:
94:d4:09:39:83:cd:f0:e7:13:80:7a:02:57:be:91:
42:9f:6d:e4:e0:95:89:0d:38:29:37:32:13:5e:d5:
c9:3a:c8:14:47:7c:fe:ce:ed:af:1e:31:a8:30:e2:
4b:b7:79:c0:f6:26:cc:ff:5e:ed:f1:4b:59:11:52:
af:b5:94:53:b7:35:9a:33:dd:a9:f5:6d:ee:43:8f:
67:b9:13:93:72:ce:9b:f5:82:da:a0:52:46:03:e6:
41:1a:fd:d5:cb:e5:95:53:26:7f:6e:0d:74:51:4b:
f2:a3:18:bb:e9:85:b8:7b:bd:39:94:7c:e2:fb:ff:
72:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F8:CE:13:A2:93:C0:85:83:49:47:92:50:0F:CA:C0:F8:71:11:EC
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9b804fa0-f727-4fab-a71a-9c5f8486ea74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.11.0/24
Signature Algorithm: sha256WithRSAEncryption
63:e9:f6:9f:70:1c:c0:f8:16:3f:26:c2:2a:e8:05:f2:3b:20:
fb:fb:4a:53:ac:1c:8d:7d:22:b5:28:58:fa:7b:ec:95:0c:c2:
08:ab:39:3f:7d:96:a1:25:ec:d7:5a:4c:da:23:d2:c5:f8:32:
4c:95:17:84:56:bb:63:a6:94:5a:9c:8d:6c:97:fd:b7:67:e9:
39:eb:5f:66:31:49:5a:56:82:09:fd:8d:15:3d:c9:7d:cd:57:
48:b6:c2:6b:27:74:19:33:fe:8e:5a:2c:37:be:47:cf:d0:0a:
bb:b3:f7:a4:89:5d:d4:75:04:11:05:d6:89:91:51:32:ad:93:
38:55:38:db:a6:d8:9e:99:85:44:44:86:7e:96:98:4e:60:d5:
92:2c:ad:b9:08:f0:50:b2:c8:f0:29:e5:65:1f:60:d4:83:0b:
0d:9f:99:9d:8b:c0:a8:ee:c4:aa:48:ef:f4:9d:c0:29:5d:a5:
3f:e7:91:4d:6c:a4:12:6a:f0:56:8a:66:25:a4:59:18:b9:08:
f2:43:02:2a:90:7d:c7:53:43:21:a4:59:bd:be:45:62:96:78:
45:83:27:f8:74:7c:6f:ca:da:45:0d:66:1f:64:23:0a:47:73:
71:fc:f3:ef:7e:c4:16:93:ae:df:07:bc:63:27:2e:51:1a:a4:
4a:47:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:50:38 2025 by rpki-client