
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa
File: 2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa (raw, json)
Hash identifier: ApUryf/e5qf+7GJ82T7Y0f2vApgEZ835TaCaJSpTAZU=
Subject key identifier: 4D:C9:C9:4B:A9:FA:2E:AE:AB:9D:8E:44:EC:7C:4C:3C:04:09:5F:3D
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 4FFDBF0A539DB58D3FF9C0B6240001BD6C2F08FD
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa
Signing time: Tue 17 Feb 2026 02:50:06 +0000
ROA not before: Tue 17 Feb 2026 02:50:06 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:fd:bf:0a:53:9d:b5:8d:3f:f9:c0:b6:24:00:01:bd:6c:2f:08:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 17 02:50:06 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=bd38aaca56040fd737094ab538ee675a0e4be4467bbcaadae1b8e9a9be902564, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:95:96:70:45:a6:ef:09:02:c4:c3:d7:8b:a7:
f0:09:43:f4:c5:17:a2:15:c9:5c:00:ea:2d:39:47:
45:f8:de:f1:aa:5e:0c:98:da:e0:cd:4b:a1:cc:28:
96:ba:9f:bb:8f:af:56:b3:99:31:e7:9a:e9:ba:d5:
b4:9a:98:a9:8c:ac:df:73:73:35:e3:2b:c5:51:7b:
d3:f9:7b:c6:46:ff:38:86:7d:09:47:76:a1:4a:4e:
27:4b:09:81:49:e8:bd:d7:9f:ee:2d:df:bd:22:0e:
22:43:af:4d:3a:65:1f:18:2f:e3:1e:37:c7:3d:3e:
5c:9f:29:be:08:df:dc:82:98:cb:cb:c8:28:50:02:
a7:44:66:d9:b4:2d:a7:c6:cc:cc:7b:6e:fb:df:44:
5e:b4:1b:1f:e0:1f:c3:f4:03:08:0f:e5:a6:ca:53:
d8:f3:69:cb:da:be:ff:76:2f:7b:85:7e:09:0d:17:
d0:64:bd:8e:8b:11:db:e4:d9:27:d0:71:30:8a:12:
e8:ff:19:79:7e:8d:fe:b3:f7:d1:fd:9c:99:f1:a5:
a8:7c:0c:fd:c1:e1:08:24:86:bd:14:70:ee:57:54:
24:f6:b0:65:6d:52:4b:e1:9b:85:b1:5e:8d:c4:2e:
bc:56:49:93:e9:cf:40:ff:c8:a1:76:b9:22:98:e0:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:C9:4B:A9:FA:2E:AE:AB:9D:8E:44:EC:7C:4C:3C:04:09:5F:3D
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/2800c70c-6ec1-4d86-a916-4850deb2dfaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.8.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1f:ba:a3:9c:39:67:1f:06:e1:40:ee:84:ab:6d:4a:39:1e:
17:07:2d:89:e3:76:5b:7c:3d:7e:c7:93:da:d4:51:a4:4e:0e:
f2:4d:cf:c3:f7:4c:e6:c1:3b:9a:4d:bc:50:d8:ad:46:a4:ab:
59:fc:08:65:b2:a4:48:7b:bb:ac:ce:75:d7:a0:fb:5d:f7:54:
7f:78:7e:df:02:45:48:6d:71:b0:3f:16:e4:d5:97:41:b9:0c:
92:9b:c8:33:6c:49:0b:29:9a:ab:07:86:8b:4d:38:89:e5:fc:
92:9d:24:07:a0:04:fb:48:c0:76:e2:a5:08:21:a0:17:ff:36:
84:33:76:80:e5:9e:5b:fc:cf:a0:38:ff:fe:4d:bd:a8:e1:89:
ba:b5:b7:b5:bb:d8:95:e2:64:bf:a2:b0:ee:c4:70:ff:0a:19:
43:3c:a1:33:ff:fd:c5:6a:eb:d3:6e:ee:3c:5b:ef:23:af:b9:
a5:b7:76:22:b1:7d:37:e1:24:6e:11:80:af:1b:3d:a6:9f:05:
45:07:24:54:47:e1:f1:6d:0b:bf:fa:25:ee:1e:06:43:f1:86:
9a:8a:e1:f2:f3:a3:16:fd:27:ff:64:aa:87:ba:15:5f:fc:b4:
01:2a:e3:04:36:96:04:c9:bd:c4:16:6d:94:d8:91:a1:29:c2:
53:0b:ab:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:15:27 2026 by rpki-client