
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
File: 0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa (raw, json)
Hash identifier: KKdNuj8HmreHbu1wkGNBU/VxoGgnF8HEQPk5DCcUsYY=
Subject key identifier: B2:07:BC:8C:1E:76:53:E3:BB:E8:C5:88:D6:3C:49:C8:99:4E:32:66
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 11624DDF0AD2FC357069691D7DEAE2B612665AC2
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
Signing time: Fri 07 Aug 2026 04:00:21 +0000
ROA not before: Fri 07 Aug 2026 04:00:21 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:62:4d:df:0a:d2:fc:35:70:69:69:1d:7d:ea:e2:b6:12:66:5a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Aug 7 04:00:21 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=30db378e4a99dda84dc7c2d2de249db916c479df4947dfc344ad8c768950c565, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b3:c4:a7:84:8d:07:cc:73:3b:34:00:23:ba:
e7:db:38:01:17:aa:35:10:37:b1:65:cb:85:8c:59:
bb:81:1b:c5:75:e8:f6:49:3f:b7:04:d1:6b:ad:f6:
f7:3b:52:25:27:26:c0:ef:9c:60:d5:5b:f9:99:f5:
b3:0f:57:9b:2e:33:7c:92:b4:f4:0e:85:84:9f:22:
c3:1f:b7:97:5e:ae:37:bd:1e:51:1d:57:9d:d1:e2:
12:65:bc:43:8e:8b:e3:53:4e:ff:4a:fb:82:9a:f8:
d7:31:da:de:c5:3a:4a:ed:f5:5a:f6:13:b8:e2:d3:
f2:c4:20:18:45:15:bc:6c:ca:ee:d1:16:b9:98:f5:
53:95:1b:ea:b4:c0:a7:b1:c0:e5:3b:37:fa:72:e9:
c6:98:45:61:7f:73:90:5e:e2:b8:4b:b3:b0:75:12:
06:5b:c5:98:6a:25:e4:e3:21:f0:e5:24:02:54:ec:
33:23:31:e8:f9:14:68:e1:c1:b5:8e:8d:f4:1d:16:
46:5d:9f:fd:3b:60:41:f1:0a:0f:b5:b1:dc:9e:b8:
0b:c9:5e:ab:b0:58:6d:8e:c2:fa:61:32:50:38:f4:
21:84:98:74:57:3f:be:f8:a2:e1:e4:45:ff:0b:2a:
61:81:f5:25:74:0b:76:a9:99:71:09:6e:2d:3a:7b:
03:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:07:BC:8C:1E:76:53:E3:BB:E8:C5:88:D6:3C:49:C8:99:4E:32:66
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/0e814f2c-6100-4037-9dcc-cdaf3e20d853.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.2.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fa:ee:a6:e6:fc:0d:2b:57:b4:7e:d3:61:c1:43:4c:2e:24:
92:5c:ef:8b:98:56:9e:ae:6b:df:9c:1b:f2:91:cf:27:fa:5c:
8f:58:25:a3:72:99:b4:2a:11:45:29:cf:0c:d8:48:0e:86:69:
70:5b:a2:9d:99:65:17:76:04:58:f5:4d:c5:1e:06:4d:0c:d1:
fb:e8:75:ea:06:70:95:44:8e:3c:5b:4a:49:e5:bd:e3:ef:fe:
7f:fc:b6:2d:52:97:63:d3:b8:48:c6:d3:20:a6:74:e8:2f:0f:
3b:da:58:67:63:20:23:8b:65:4a:79:7a:bd:68:47:29:55:7c:
b4:cd:b4:4a:61:f7:24:ee:34:32:79:09:f6:a9:29:74:1c:16:
16:a2:a9:0b:a4:30:53:19:d0:8b:be:a3:ab:dd:f9:91:6e:e5:
7b:f3:3a:3e:f4:ff:42:65:4d:71:7a:1d:f1:b0:5c:a2:e3:6e:
8f:79:62:31:48:37:05:f4:04:28:9e:48:dd:a1:71:74:af:cc:
b7:91:2f:14:27:e7:b7:5e:8e:3c:25:ff:75:e9:58:e0:45:97:
08:93:7f:84:40:19:a8:14:51:88:00:11:f9:f8:67:ce:fc:2a:
15:5a:81:e9:23:39:97:8a:7c:f4:d6:f0:80:01:83:8b:b7:e8:
01:6a:fa:37
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUEWJN3wrS/DVwaWkdferithJmWsIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwODA3MDQwMDIxWhcNMjYxMTA1MjM1OTU5
WjB6MUkwRwYDVQQFE0AzMGRiMzc4ZTRhOTlkZGE4NGRjN2MyZDJkZTI0OWRiOTE2
YzQ3OWRmNDk0N2RmYzM0NGFkOGM3Njg5NTBjNTY1MS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCGs8SnhI0HzHM7NAAjuufbOAEXqjUQN7Fly4WMWbuBG8V1
6PZJP7cE0Wut9vc7UiUnJsDvnGDVW/mZ9bMPV5suM3yStPQOhYSfIsMft5derje9
HlEdV53R4hJlvEOOi+NTTv9K+4Ka+Ncx2t7FOkrt9Vr2E7ji0/LEIBhFFbxsyu7R
FrmY9VOVG+q0wKexwOU7N/py6caYRWF/c5Be4rhLs7B1EgZbxZhqJeTjIfDlJAJU
7DMjMej5FGjhwbWOjfQdFkZdn/07YEHxCg+1sdyeuAvJXquwWG2OwvphMlA49CGE
mHRXP774ouHkRf8LKmGB9SV0C3apmXEJbi06ewPBAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUsge8jB52U+O76MWI1jxJyJlOMmYwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzBlODE0ZjJjLTYxMDAtNDAzNy05ZGNjLWNkYWYzZTIwZDg1My5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYAIwDQYJKoZIhvcNAQELBQADggEBAAv67qbm/A0rV7R+02HBQ0wuJJJc
74uYVp6ua9+cG/KRzyf6XI9YJaNymbQqEUUpzwzYSA6GaXBbop2ZZRd2BFj1TcUe
Bk0M0fvodeoGcJVEjjxbSknlvePv/n/8ti1Sl2PTuEjG0yCmdOgvDzvaWGdjICOL
ZUp5er1oRylVfLTNtEph9yTuNDJ5CfapKXQcFhaiqQukMFMZ0Iu+o6vd+ZFu5Xvz
Oj70/0JlTXF6HfGwXKLjbo95YjFINwX0BCieSN2hcXSvzLeRLxQn57dejjwl/3Xp
WOBFlwiTf4RAGagUUYgAEfn4Z878KhVagekjOZeKfPTW8IABg4u36AFq+jc=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:20 2026 by rpki-client