
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/032f5679-c24a-4076-8fcb-bd755c81bb16.roa
File: 032f5679-c24a-4076-8fcb-bd755c81bb16.roa (raw, json)
Hash identifier: PMMJePOEcRU0HLvD0aV6XCvgpWA+24KYJu4y8rTLocE=
Subject key identifier: 0F:33:42:EF:BA:E2:F6:39:FD:93:8C:7E:E1:38:43:D9:3D:99:29:2F
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 0757D9973F6C090FB58A875A79408FA9C982CE6E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/032f5679-c24a-4076-8fcb-bd755c81bb16.roa
Signing time: Fri 07 Aug 2026 04:00:13 +0000
ROA not before: Fri 07 Aug 2026 04:00:13 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:57:d9:97:3f:6c:09:0f:b5:8a:87:5a:79:40:8f:a9:c9:82:ce:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Aug 7 04:00:13 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=38e3f08d177dddaf76cf2595067f3cc4ec6b46720e0f4bcc101eec2fbe96d90e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e0:5f:9e:bc:0f:2f:e6:be:40:38:61:21:37:
2b:ea:87:f8:04:65:02:45:e0:ed:04:d9:76:ca:a9:
16:5b:8a:a2:91:58:c7:fb:f2:26:3f:fd:ad:b0:3b:
b1:76:43:f6:2c:49:e5:b6:06:d3:f3:15:77:de:f8:
6d:a6:01:23:06:24:6d:4c:56:3f:27:c6:15:db:f8:
7e:b7:2d:4b:1b:eb:8f:b5:de:72:e0:84:e3:b3:11:
c8:77:83:75:78:f6:52:e5:03:94:34:49:21:1e:07:
01:8e:07:5e:1b:c4:d1:bd:e8:b3:84:51:8e:ca:f6:
4f:b5:12:81:00:3c:c8:fd:be:7c:9c:23:75:d2:d5:
56:1a:56:18:88:e9:ef:97:fa:b8:87:d2:46:57:b8:
b2:93:ea:e8:c1:12:40:f8:a9:af:34:62:33:9c:f1:
18:db:4a:8b:12:58:97:3a:b8:0d:de:a7:b3:f2:14:
8d:f8:4a:ea:a1:a0:35:dc:62:15:3c:e0:28:ba:28:
f0:8c:0e:dc:e8:9f:8e:5d:b9:c3:b6:d4:56:e5:13:
c2:7b:6c:e4:8d:2a:80:30:f9:60:d2:ad:f6:07:09:
2e:d0:e1:6e:2a:20:79:2e:55:e2:ab:3d:26:f1:28:
93:ad:ad:a8:95:2e:8f:b0:55:c9:31:74:37:75:03:
d2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:33:42:EF:BA:E2:F6:39:FD:93:8C:7E:E1:38:43:D9:3D:99:29:2F
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/032f5679-c24a-4076-8fcb-bd755c81bb16.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.6.0/24
Signature Algorithm: sha256WithRSAEncryption
19:30:a4:0c:98:d8:27:71:51:0b:40:a9:b3:c7:f2:0e:96:c9:
e0:d3:b4:f8:f7:a7:ca:b6:82:47:ac:9d:82:98:95:91:c5:d6:
fa:c7:6a:18:4b:24:11:1a:08:77:de:06:fb:14:f1:60:20:41:
a1:0b:e9:cc:90:55:9c:e5:00:29:87:1a:29:b3:35:78:9a:6a:
8b:d7:10:62:f4:63:4a:0a:4b:48:e4:d5:f2:f2:60:fd:3f:cb:
93:87:a9:b1:c9:67:80:b9:fe:8b:e1:85:5f:6b:8d:aa:ed:af:
47:e5:aa:5f:c7:45:ef:88:c8:92:d1:ab:d1:f7:08:34:74:c5:
28:ea:f8:0a:06:b0:b2:6c:03:c4:09:3f:0c:f7:59:20:5c:0d:
7e:14:bd:7f:0e:8c:a0:e7:c9:92:fa:c1:cb:31:53:c7:cd:78:
1f:1c:60:9b:9b:f4:cf:4c:e6:d2:13:ec:2a:12:cb:eb:47:27:
a8:b3:bd:ad:64:53:8a:b9:74:45:5c:db:26:3d:cc:92:8f:37:
7f:3a:57:80:d6:d8:73:c8:78:2a:3b:9e:c1:9c:f5:02:8e:b9:
8a:0b:99:ca:cc:cd:bb:11:d5:72:af:18:1a:cd:a3:b6:fe:29:
bc:62:5b:4a:91:af:0d:f2:08:f1:84:2a:0c:56:fe:c9:d2:6c:
96:fe:96:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:20 2026 by rpki-client