
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa
File: e7a6fe73-e83b-497f-9236-892dd595ac34.roa (raw, json)
Hash identifier: W8oHkTmg4HyoNnKrnRbxyhZTYckYbGfcUPPzCld7Jpc=
Subject key identifier: 5C:B5:A6:43:49:F1:5C:05:93:35:1D:FB:B0:61:B7:0F:07:29:FA:A7
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 6780ED42CED67DBD9ACF319CDB9C81E857697E2F
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa
Signing time: Thu 26 Feb 2026 02:00:09 +0000
ROA not before: Thu 26 Feb 2026 02:00:09 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:80:ed:42:ce:d6:7d:bd:9a:cf:31:9c:db:9c:81:e8:57:69:7e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 26 02:00:09 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=b109df44981ab01423f672d9c4256ff29e0288b7db4139b5f149da3f9a1b4fa1, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:da:fd:3b:14:69:6c:b6:93:af:00:8f:72:
95:da:5f:1a:1a:12:00:6b:26:2e:94:90:70:01:23:
0f:af:68:6a:5a:d1:52:f6:82:d8:d3:d4:57:ed:9e:
32:5d:19:46:c1:6a:44:9d:ea:c8:f6:f0:81:80:5b:
e9:21:30:97:f3:91:f6:c0:ed:46:47:a2:f2:fd:f5:
68:5e:73:9e:52:e0:e3:49:d6:a5:00:73:27:5a:ad:
c4:51:94:3b:5a:11:21:84:12:c3:ea:4b:a4:b1:cd:
f9:e9:72:66:ff:09:2b:e9:6b:bf:b6:03:fb:fb:a0:
9e:67:52:ff:74:00:7b:29:06:5c:88:18:6a:6a:6c:
ee:3c:bc:44:fc:de:8b:b9:6a:a9:cc:52:10:10:74:
8e:cc:41:1d:7f:cb:fd:ae:65:66:6b:b7:55:2d:ce:
9c:72:4d:e4:a2:45:45:62:da:d0:6c:07:99:a7:50:
20:14:1f:67:91:8a:b9:84:c0:a5:2b:2c:5e:0a:25:
b4:84:21:7e:49:98:ad:ee:e8:85:91:0e:ec:88:d0:
63:43:bd:11:9e:49:f4:86:2d:21:da:c3:b9:74:3f:
e8:e6:21:0c:61:57:11:61:2e:a9:fe:01:e6:c4:12:
dd:cf:9f:99:f1:ec:3d:f6:84:d6:f3:c0:13:e3:bc:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B5:A6:43:49:F1:5C:05:93:35:1D:FB:B0:61:B7:0F:07:29:FA:A7
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:41:a3:9b:56:18:7d:05:2e:98:19:fa:87:b9:7e:8e:7e:91:
26:df:81:d2:a3:9f:d9:d3:1e:56:f0:ad:e1:4a:6a:9c:20:d8:
c5:4a:25:c2:3f:c6:83:44:f4:00:1e:05:28:a3:2f:02:97:1a:
57:6c:40:08:40:8b:fc:95:01:25:b9:fa:59:0b:20:a6:c3:bb:
f6:b8:12:13:52:51:7e:96:c0:3c:7b:cf:a1:aa:a3:a8:19:da:
9e:03:eb:9e:33:2e:b0:6e:fd:cd:28:b7:7e:33:c8:f7:a7:a2:
fd:94:82:03:50:91:25:44:db:23:2f:e0:8f:92:f1:07:25:7b:
c9:1c:66:15:e4:11:20:37:67:65:0a:4f:54:e0:4d:73:98:2d:
f7:0f:68:a4:45:a4:98:6f:04:0f:76:2a:b9:09:31:4b:f5:c5:
fa:a3:cc:ba:f5:80:ea:c4:9e:5a:1e:5c:d9:fe:7a:ea:0f:3a:
dc:41:24:c7:55:c8:44:6f:62:55:2f:64:c7:e4:a1:76:50:81:
cf:b0:08:1c:96:c3:ec:79:9a:54:f9:b4:19:62:0e:66:9a:7f:
67:f3:0f:9a:98:d2:72:f8:a5:db:4e:06:66:07:74:1e:45:3b:
14:c2:4d:f3:5a:79:c5:49:da:67:fb:f2:af:17:ba:a3:fc:c4:
ae:51:f6:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:27:23 2026 by rpki-client