
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa
File: b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa (raw, json)
Hash identifier: wwYTVc4AnODCHJhZiMM1qs/WX258SnGp4HxOBtaIspQ=
Subject key identifier: D3:D7:75:0A:EC:1E:F2:3F:9C:20:9F:40:2C:2C:2B:87:64:BC:3D:99
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 779C2AD9E9AEF45B2566F0F27DF11EE4356172E5
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa
Signing time: Tue 21 Oct 2025 12:20:06 +0000
ROA not before: Tue 21 Oct 2025 12:20:06 +0000
ROA not after: Tue 25 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:9c:2a:d9:e9:ae:f4:5b:25:66:f0:f2:7d:f1:1e:e4:35:61:72:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Oct 21 12:20:06 2025 GMT
Not After : Nov 25 23:59:59 2025 GMT
Subject: serialNumber=93ded47e947388fb9a457937b682af1fdedd63b268dfd74ca575dded19c0af9c, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:b9:7e:a7:90:97:0a:da:95:c5:d7:ee:c0:
39:67:2b:fc:08:e4:d8:c8:bb:e2:86:16:54:e4:18:
e1:90:81:b7:58:8c:e9:1a:8d:77:a9:48:d6:f6:5a:
4b:5e:74:b1:a7:c1:ff:fc:38:79:a3:49:1a:bf:94:
fe:0b:60:01:3d:c7:00:cf:bb:7b:4a:52:07:fd:1f:
33:f1:21:53:95:5b:26:5a:6c:71:a9:e2:f4:a8:a4:
53:76:3d:42:06:db:47:05:9f:e7:e8:f7:04:83:e5:
7b:9f:d3:24:1d:75:3f:bd:7f:ad:61:37:00:4f:cc:
db:34:e3:e6:7e:59:14:23:46:4d:37:aa:17:ed:63:
74:c7:76:11:eb:07:cc:40:76:6c:75:70:98:c5:99:
9a:c5:a4:94:87:73:bb:dd:9d:65:f4:9a:1b:12:1c:
4a:7b:10:27:53:73:80:83:44:5d:0b:0c:8f:4a:b4:
8b:54:26:09:de:de:93:7d:77:ba:1a:ce:97:d3:18:
c7:2d:c2:9b:36:7b:11:6e:9f:0b:ee:db:4c:8d:77:
e1:c8:e2:4a:8e:42:31:7b:11:b2:de:a7:4b:96:56:
56:20:9c:51:b2:e8:39:72:e1:d6:3d:c4:eb:9e:4b:
3e:f6:5a:2e:4b:e2:34:79:7e:99:27:93:75:a8:27:
68:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:75:0A:EC:1E:F2:3F:9C:20:9F:40:2C:2C:2B:87:64:BC:3D:99
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/b326c7a6-462a-48ed-a5a5-2dd5652bb7dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.47.0/24
Signature Algorithm: sha256WithRSAEncryption
69:0d:b8:57:a2:aa:06:e2:52:d9:25:cb:6c:90:c1:dc:11:c2:
e0:e0:1e:0a:2c:36:91:c4:28:e4:c7:ff:6d:d7:0d:d6:47:d7:
13:c1:d8:a0:23:85:ab:2f:8d:dd:b3:e2:5e:4e:c6:b1:e2:3f:
3f:22:83:b9:ec:d6:1a:12:88:32:6d:1a:07:e5:e3:c8:d6:f7:
56:6c:e3:0d:9e:81:0d:9b:76:05:0f:70:f5:2e:20:37:42:16:
d3:64:87:28:0d:bd:b1:e4:e3:97:ef:9b:40:b2:47:86:8c:3c:
88:ee:d3:81:7a:bb:46:00:dc:22:7b:18:49:96:39:d4:e8:6c:
5b:0c:12:84:c8:bc:46:d4:01:05:7c:98:d0:82:94:ff:4b:65:
ef:f4:b3:c8:67:e3:16:8e:e6:88:bc:a9:a4:55:cb:f8:11:e2:
5a:2b:b9:b5:22:a4:e4:8b:ba:f2:c4:7d:a6:76:ae:f6:04:f8:
ff:e0:3e:51:e6:e8:86:6c:6c:7a:55:eb:c4:4a:51:e0:89:3b:
3c:47:2f:c6:d1:34:0d:73:05:c3:58:d0:60:4f:7d:a9:c3:76:
c2:31:b7:a0:b6:d9:d7:48:1f:74:6d:9b:f2:c4:57:1a:40:65:
b0:45:a1:05:78:b8:1d:7d:a5:5e:3f:d8:bc:5b:9b:d7:e7:5c:
2c:e0:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:39:03 2025 by rpki-client