
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa
File: d45c754b-55fa-459b-9d5e-9107618580af.roa (raw, json)
Hash identifier: teLJiWNb3tOoo8GJXcySZNBh+9f56Cu8oPLP5ZgG3IM=
Subject key identifier: EB:DB:2A:C3:D7:BE:A8:51:6B:79:40:6D:E4:95:65:39:E5:CF:49:02
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5ECBE6F7425C4F7E868A8EA3C78082DF8ED69066
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa
Signing time: Thu 26 Feb 2026 01:50:31 +0000
ROA not before: Thu 26 Feb 2026 01:50:31 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:cb:e6:f7:42:5c:4f:7e:86:8a:8e:a3:c7:80:82:df:8e:d6:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 26 01:50:31 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=b76f249efd4345dfa50a19513ac126913b5d7b99adfbc07a8ab066026efcf2e8, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:05:ce:e3:ff:e5:aa:d8:45:3c:ee:1d:d4:a6:
67:f6:ef:dd:3e:60:b2:0c:1b:34:d8:bb:25:ee:53:
cf:ad:9b:09:ca:f3:88:96:46:3c:f1:35:c8:95:01:
fd:ea:57:d6:f3:16:43:48:9d:e3:7d:5b:5a:24:d8:
03:62:fb:49:bb:4c:6f:5a:7d:b8:f5:99:94:08:1f:
6b:e1:35:01:a2:b3:73:b6:58:b4:5b:72:25:4a:10:
35:28:16:85:fa:ae:38:a6:1b:54:13:3a:1d:4c:ef:
d2:60:d9:71:2b:b4:f4:15:6f:7c:3d:92:b8:9f:be:
1d:b5:ba:c5:38:9f:a8:a4:7b:b7:d9:ce:e3:9b:98:
ae:38:c8:bd:f9:8d:ef:b4:fb:2f:02:28:96:85:d1:
f4:dd:1a:a8:52:15:f1:9d:9f:3a:3d:82:92:88:7a:
27:d6:57:bd:24:d2:f6:8a:e1:20:95:6c:23:ab:d3:
ea:df:28:66:ca:00:89:61:9d:3a:99:02:6d:39:3a:
08:c1:c3:59:ba:8b:f2:3d:53:a0:85:6a:79:d4:4f:
87:86:c6:cf:63:87:54:cd:82:ed:47:35:15:ca:93:
25:e8:1d:7f:1c:a0:02:80:ee:92:30:93:7c:9b:cd:
10:e8:c2:22:c5:06:a3:f2:37:35:5a:c4:4e:fc:e3:
42:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:DB:2A:C3:D7:BE:A8:51:6B:79:40:6D:E4:95:65:39:E5:CF:49:02
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/d45c754b-55fa-459b-9d5e-9107618580af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.41.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:b7:70:83:94:28:d6:db:cf:be:06:e6:64:ed:50:8d:9a:12:
08:f5:b2:8d:32:1e:ef:e1:be:d2:3d:c4:60:61:01:e6:2b:e5:
40:22:63:85:e5:e2:3c:f3:d2:ad:a1:65:49:8b:ae:de:ad:22:
3c:ab:6d:d1:fc:82:d2:37:89:e9:7b:cd:ce:22:78:d7:ff:11:
05:db:e4:04:ab:12:5e:ce:0b:da:c9:fb:2e:ec:6a:8e:fa:1c:
16:4a:5a:0d:4e:d8:e0:e2:3f:8c:71:5a:a7:27:07:6e:0d:ac:
97:68:3a:55:f3:34:ae:71:6d:aa:94:b0:e0:bc:f1:72:db:d4:
a4:d2:61:16:ea:52:4a:0e:dc:74:34:8b:8b:bc:2c:ea:8f:42:
68:65:d7:4d:df:0e:5a:eb:74:9e:3c:e7:b2:15:30:80:d8:5e:
29:10:ed:af:27:f2:e5:ee:14:9c:ad:ab:c4:57:96:29:99:1e:
32:08:b8:bb:58:41:f7:31:15:84:54:e9:e1:c0:8b:f0:f1:b7:
32:bb:26:53:0a:7c:74:03:d5:00:8d:cd:17:27:af:6e:21:dd:
af:98:c3:08:5e:67:3c:39:09:07:fc:16:30:e1:f5:b1:a1:c5:
94:23:fd:40:93:80:49:21:55:e8:45:96:4e:44:5b:d6:51:ce:
1a:c6:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:01:56 2026 by rpki-client