
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
File: 9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa (raw, json)
Hash identifier: 7WFtwMDnnYKpV5GPObWKHk4yF8h2yHbdV9WepTrAGOA=
Subject key identifier: DF:06:C4:5F:9F:AC:5E:DA:CD:B4:8D:20:A7:2D:EF:B8:3D:ED:CC:F6
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 23E9DE654CD6C0E9917AA22CB9F1A9558CF74C74
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
Signing time: Thu 15 Oct 2026 03:10:07 +0000
ROA not before: Thu 15 Oct 2026 03:10:07 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:e9:de:65:4c:d6:c0:e9:91:7a:a2:2c:b9:f1:a9:55:8c:f7:4c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 15 03:10:07 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=ce8e5437e644c617d5601fcd0a42339d296deeff991ca3a9f69db9ec64a367a2, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:de:87:3d:36:5e:b2:aa:92:cd:00:39:44:
d9:65:3a:3d:7e:7c:db:00:67:d9:71:8a:63:5f:9e:
90:eb:d0:77:23:40:0e:7d:6a:12:62:e9:d5:ad:63:
a8:6e:a6:58:e3:71:53:f1:b7:13:8f:d2:70:03:39:
89:32:32:5b:1f:52:0b:40:99:92:59:bf:36:30:48:
ed:ea:62:dc:b6:fe:b4:9a:5a:7f:1c:f8:b7:25:eb:
14:13:75:cc:00:67:a3:a4:47:c3:9d:ee:a8:9c:db:
bc:df:6e:fc:b3:7d:d8:af:5f:ec:1f:4f:4b:4d:09:
8b:69:6e:ad:95:4c:6f:01:ed:6b:f4:d2:f7:b2:d3:
aa:ff:11:69:b3:26:50:d1:10:40:a2:2d:5c:bc:e1:
f6:c7:3e:9e:d7:82:a8:56:22:a7:3e:bd:af:3a:21:
bb:e5:63:97:35:e2:92:47:1b:52:ed:85:13:5a:6a:
8e:af:a5:d0:51:37:ba:57:a5:05:08:74:72:c0:aa:
19:5a:0e:7d:76:40:50:b3:8d:5f:4e:a0:38:b7:4f:
6d:7a:05:f5:ce:1f:fc:80:14:9c:f3:07:63:f6:ca:
00:e7:06:a4:75:ff:e4:9e:d7:27:38:5e:d2:34:1a:
36:fa:a7:0b:9f:0a:23:08:a0:11:d3:07:03:05:c8:
37:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:06:C4:5F:9F:AC:5E:DA:CD:B4:8D:20:A7:2D:EF:B8:3D:ED:CC:F6
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3e:d5:a9:b7:56:38:fc:68:8f:a0:c3:47:41:6a:da:6a:4a:
fb:79:40:ce:59:29:79:b1:49:69:64:16:1e:e0:81:ee:9a:06:
6a:0a:22:de:c0:e6:df:71:69:af:34:8b:8d:ea:3a:00:50:0f:
26:1e:30:84:d1:39:f6:b3:c0:e7:bc:bf:7e:0f:78:20:ea:da:
05:d2:bb:52:9d:9b:90:19:eb:1f:27:96:06:50:54:23:1f:38:
59:51:51:09:10:27:58:24:3e:73:18:01:9a:6a:f5:4a:6e:50:
87:fa:22:ec:1b:70:a5:db:48:d5:57:c4:1b:fe:e4:a4:50:54:
f1:4b:ce:1c:9e:19:aa:31:b9:ce:3c:7f:b7:93:a2:e3:e0:04:
9f:c1:23:b5:e9:7c:74:0d:1a:01:6c:0d:f4:38:3a:0f:ea:b0:
77:39:bb:30:5a:ae:af:81:da:5c:4b:04:7d:5d:1c:48:35:61:
59:77:3f:45:7c:4d:4f:03:3b:8d:c3:b0:c6:c0:46:d5:8e:9f:
3c:dc:96:eb:ea:ee:ac:a4:74:e2:6a:82:23:8c:f0:9a:2b:35:
5e:26:44:1a:3b:cb:25:a5:c3:65:01:f0:cd:f9:76:22:96:63:
cc:57:7a:2b:9b:b9:31:14:63:37:2a:86:73:05:21:80:b8:7e:
d2:c2:23:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:42:11 2026 by rpki-client