
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa
File: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (raw, json)
Hash identifier: CmKH2gTvHXK6zYXH+sdflpI6pfzvw9lQH8H6HzROVTA=
Subject key identifier: 1F:9C:45:AF:9B:95:07:DA:10:F3:51:E4:50:F0:04:CA:85:00:AF:72
Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial: 620FEE277773FCCD1CFC0F970108059748957DB7
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa
Signing time: Fri 07 Aug 2026 00:50:21 +0000
ROA not before: Fri 07 Aug 2026 00:50:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 8987
IP address blocks: 96.127.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:0f:ee:27:77:73:fc:cd:1c:fc:0f:97:01:08:05:97:48:95:7d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Validity
Not Before: Aug 7 00:50:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=5f7245fc545944bdf24c1186f84194c3ff8cb1dce62b86476460c28af61806a8, CN=0099a7ea-794a-4a28-b164-49547626eb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:f5:c1:14:2a:ec:73:24:16:e6:0c:ff:2b:
e2:b6:6b:62:94:5f:8c:a4:93:e0:28:e5:0b:4b:1f:
0e:d1:ee:4c:09:25:7d:02:85:74:43:42:21:84:d7:
8f:ff:44:ae:c2:1c:fa:09:b1:35:2e:51:7f:bf:8e:
46:6b:32:77:20:0d:de:64:54:dc:ca:f0:f0:e8:5f:
e5:cd:6c:77:e0:9f:2e:18:ef:54:41:73:7c:a3:aa:
0e:93:92:b7:c9:e7:83:ea:22:f8:99:13:be:6e:cd:
be:03:03:7e:ec:c1:f0:78:cd:98:b8:a7:d9:00:47:
49:bd:1e:ea:42:5e:7d:a7:af:de:69:b4:23:e1:f7:
e2:6c:92:7d:21:56:31:58:d3:a7:04:2f:cd:ed:06:
9a:23:bb:76:64:49:7f:00:7c:36:42:17:ee:7e:11:
50:7e:8a:00:af:07:b5:59:56:d4:bb:5e:84:5f:0f:
49:90:fa:ee:68:0a:02:ee:99:e6:f9:6b:8e:f8:b6:
ff:69:05:5d:4c:18:a2:d9:01:96:81:f5:c8:2c:68:
8d:33:54:b6:6e:bc:61:dc:b7:0e:82:af:32:1d:cc:
c1:c4:96:7b:24:cd:b2:90:22:5b:82:73:bb:2d:34:
e5:5d:8b:90:c3:b0:ac:44:14:4e:4e:f3:47:d9:af:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9C:45:AF:9B:95:07:DA:10:F3:51:E4:50:F0:04:CA:85:00:AF:72
X509v3 Authority Key Identifier:
keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/01f936e1-60a2-4d7f-a949-786fa3430156.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.127.10.0/23
Signature Algorithm: sha256WithRSAEncryption
83:a7:da:5d:22:0d:38:b6:42:04:43:ff:7b:ac:92:93:2e:35:
6b:8a:e6:f2:89:b4:f6:b3:3c:4d:93:3c:18:06:98:19:c1:fb:
ff:f6:9f:a0:66:d3:7a:03:ae:01:d4:39:d6:54:92:cc:ea:62:
19:3a:f4:fe:09:98:c5:c1:9e:d8:44:1f:e4:06:3c:cc:37:e5:
4d:ca:94:2d:27:e5:8c:04:d9:77:af:20:e4:a1:3f:d2:07:c7:
03:6f:13:1f:81:a6:16:a5:10:bd:78:64:4c:59:6b:7a:5c:f9:
f3:fc:7d:76:1d:f2:b5:76:5e:24:5c:2e:79:bb:1d:a8:d2:52:
a1:ef:82:0d:64:55:97:72:41:f0:11:5f:43:a7:15:9d:26:38:
ae:7d:3f:fa:78:98:da:ae:4f:24:50:41:1e:19:25:a2:0d:83:
af:a4:03:81:a5:3c:1e:e7:cb:38:56:0c:32:e3:a2:22:58:ae:
d0:bc:81:a1:1b:c9:50:b8:a3:74:9a:de:31:5e:0e:7e:71:64:
f8:a3:8b:15:ab:24:99:0a:4b:af:fa:a3:48:23:4e:b0:a6:9e:
f2:f5:08:36:8d:84:73:ef:7f:1c:26:64:12:5c:58:7b:99:7a:
50:ad:9d:e1:b3:f5:5b:39:f5:57:5b:85:a2:0c:18:1a:e3:58:
2f:8b:9e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 12:57:58 2026 by rpki-client