
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa
File: bdc4de21-9895-4d0a-8e2f-187812e1335d.roa (raw, json)
Hash identifier: J96JLQMK7ClvbXK8v5Nc7r6yq5HhikQ2l2FDtoCB09M=
Subject key identifier: 7F:15:0B:40:DE:F6:14:D3:84:1C:A5:AC:73:06:8A:E6:83:CF:75:17
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 776617A2E45D71AEA235E2AB78E8E7C253022141
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa
Signing time: Fri 13 Feb 2026 14:50:08 +0000
ROA not before: Fri 13 Feb 2026 14:50:08 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:66:17:a2:e4:5d:71:ae:a2:35:e2:ab:78:e8:e7:c2:53:02:21:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 13 14:50:08 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=444cb1d549a9764a979b1cf4af368644b391e5681710db44968d0c08b0942417, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:35:e0:14:13:91:e3:54:5f:1d:d7:23:3f:
02:76:a1:95:6a:bf:66:07:48:47:4d:8c:de:ec:52:
43:c2:11:79:ed:9a:21:b2:22:6e:6f:4d:aa:fd:4b:
22:a3:88:9d:35:01:3a:c6:c2:7c:d3:2a:62:b6:04:
0c:8a:ac:c3:a2:aa:7d:78:46:85:13:05:bc:ec:e7:
74:77:b6:5d:ea:4d:6b:bb:1c:76:ff:9d:e2:5f:d3:
6e:79:37:98:90:2d:55:3a:e3:dd:f0:a3:1f:bc:12:
fc:b2:ef:a0:e3:52:30:40:02:f7:15:d2:09:e0:ed:
25:d7:4e:0f:2f:a8:71:08:4f:a6:65:51:e7:38:77:
29:36:1c:8e:05:9b:55:c1:c2:f9:87:b8:c9:1d:e0:
29:46:52:c0:5d:ba:13:1a:83:98:0b:34:34:8c:b3:
86:86:68:6e:28:c9:d5:0a:77:87:4f:cb:cc:4f:af:
1f:5c:8b:b5:0d:ee:0e:67:45:fd:d9:7b:84:7f:46:
b8:10:80:64:f6:bd:c9:6e:6b:db:af:de:b6:ea:69:
a4:97:6a:17:b9:a3:d2:24:48:7d:de:f6:34:06:8c:
ee:59:60:28:36:24:e7:d6:45:9d:64:80:d3:8f:e4:
5b:31:3e:72:8d:69:03:0d:5c:3e:a8:68:3b:5e:45:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:0B:40:DE:F6:14:D3:84:1C:A5:AC:73:06:8A:E6:83:CF:75:17
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bdc4de21-9895-4d0a-8e2f-187812e1335d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.5.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f7:9e:c4:fc:2d:80:6e:1d:2a:12:fb:54:45:b5:a7:c6:e1:
df:ed:4c:3c:27:75:2e:4b:d9:b7:9c:23:d1:c1:cb:fa:d4:36:
cf:69:52:20:6c:c0:3f:e4:eb:14:db:5d:b0:87:be:d0:81:9e:
34:58:79:d9:a3:2f:e1:de:ed:84:ec:b0:7f:f2:96:44:29:ab:
07:79:04:74:7a:a2:ec:53:2a:de:8b:2e:c5:aa:ee:fc:80:3c:
2c:07:07:2a:91:b9:cb:75:ef:ef:3c:46:ea:a4:8d:69:c7:6f:
00:70:40:e1:38:07:28:21:cc:1d:5f:83:70:a5:9c:75:0a:36:
1f:0f:54:80:b1:92:1a:29:e8:41:2b:b1:40:d3:14:11:a4:a9:
db:63:c7:57:ac:a6:cb:d8:61:72:80:0b:d8:8f:c6:6c:2b:3e:
07:d9:0b:fe:89:7d:93:7e:05:53:b6:ae:c7:35:db:60:17:2f:
45:bf:b3:20:a5:aa:cb:cb:a0:1c:b8:ff:48:7f:04:0c:13:52:
ec:15:91:9d:98:1b:a1:95:c1:72:bc:dd:e8:a9:49:7f:d9:ff:
05:4b:7d:c7:7a:b8:ec:86:26:2e:6b:a4:3f:18:7b:67:99:eb:
50:0f:36:a6:0f:e1:71:e9:02:23:fb:f8:af:1a:14:16:b9:a6:
90:e2:25:ae
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUd2YXouRdca6iNeKreOjnwlMCIUEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjEzMTQ1MDA4WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0A0NDRjYjFkNTQ5YTk3NjRhOTc5YjFjZjRhZjM2ODY0NGIz
OTFlNTY4MTcxMGRiNDQ5NjhkMGMwOGIwOTQyNDE3MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCw6TXgFBOR41RfHdcjPwJ2oZVqv2YHSEdNjN7sUkPCEXnt
miGyIm5vTar9SyKjiJ01ATrGwnzTKmK2BAyKrMOiqn14RoUTBbzs53R3tl3qTWu7
HHb/neJf0255N5iQLVU6493wox+8Evyy76DjUjBAAvcV0gng7SXXTg8vqHEIT6Zl
Uec4dyk2HI4Fm1XBwvmHuMkd4ClGUsBduhMag5gLNDSMs4aGaG4oydUKd4dPy8xP
rx9ci7UN7g5nRf3Ze4R/RrgQgGT2vclua9uv3rbqaaSXahe5o9IkSH3e9jQGjO5Z
YCg2JOfWRZ1kgNOP5FsxPnKNaQMNXD6oaDteRXmDAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUfxULQN72FNOEHKWscwaK5oPPdRcwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2JkYzRkZTIxLTk4OTUtNGQwYS04ZTJmLTE4NzgxMmUxMzM1ZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYAUwDQYJKoZIhvcNAQELBQADggEBAGn3nsT8LYBuHSoS+1RFtafG4d/t
TDwndS5L2becI9HBy/rUNs9pUiBswD/k6xTbXbCHvtCBnjRYedmjL+He7YTssH/y
lkQpqwd5BHR6ouxTKt6LLsWq7vyAPCwHByqRuct17+88RuqkjWnHbwBwQOE4Bygh
zB1fg3ClnHUKNh8PVICxkhop6EErsUDTFBGkqdtjx1espsvYYXKAC9iPxmwrPgfZ
C/6JfZN+BVO2rsc122AXL0W/syClqsvLoBy4/0h/BAwTUuwVkZ2YG6GVwXK83eip
SX/Z/wVLfcd6uOyGJi5rpD8Ye2eZ61APNqYP4XHpAiP7+K8aFBa5ppDiJa4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:47:13 2026 by rpki-client