
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa
File: 56bfd5b7-3418-4344-a865-789d203e14b2.roa (raw, json)
Hash identifier: sASNUiy8RULN8Awr9y9923O3I9cPfC3d4ZyhKFqIMjA=
Subject key identifier: 5B:EC:B0:33:DD:F9:71:12:CB:03:EE:C3:77:54:13:CB:26:3F:D0:65
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 2DD2B313A1AF0464A43C2A25FE75E6D2C488DC8E
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa
Signing time: Fri 31 Jul 2026 01:50:21 +0000
ROA not before: Fri 31 Jul 2026 01:50:21 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:d2:b3:13:a1:af:04:64:a4:3c:2a:25:fe:75:e6:d2:c4:88:dc:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Jul 31 01:50:21 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=3c005b5d98d83a1eababad108467bb08b457060377d5672992483e9ffd615d00, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:2d:b2:67:d1:aa:e3:98:b2:ee:b9:81:9c:
a6:62:a0:e0:57:4e:1c:7f:ad:82:37:fb:a0:62:77:
16:9b:36:85:0e:ca:14:55:08:02:84:e9:ef:0f:8e:
04:88:c9:a5:ea:bb:9c:63:df:fb:35:ab:9f:b1:74:
54:c7:80:9f:98:7c:c0:fe:02:f8:0a:30:17:97:74:
4d:17:26:38:5d:84:fd:56:04:e4:10:41:9b:44:1a:
c2:9b:ef:2c:d1:07:d4:34:3c:dc:56:28:b9:62:db:
5f:19:d2:67:ba:5c:e2:2d:06:e6:de:d0:69:40:08:
aa:20:2f:c5:54:16:a2:f5:02:ef:0e:b2:06:ef:2d:
0f:81:d2:05:50:79:b3:00:56:b5:f6:1c:66:1c:eb:
42:66:ea:fa:14:b4:0c:0d:4e:be:5a:63:14:5b:9d:
f0:14:81:04:ed:2f:ca:1c:6e:96:2f:20:5c:89:cb:
c6:25:f2:41:c4:5a:df:44:12:07:81:ad:f8:89:64:
77:6b:a9:26:30:ee:aa:24:e3:94:d8:34:3e:a2:4a:
e5:0c:13:bf:b3:5f:26:8b:4b:48:4b:e6:64:0a:a9:
6a:87:6c:46:ea:1e:c2:6a:44:18:e0:72:62:4e:ff:
94:3a:10:22:c4:7f:bc:ea:74:4d:7f:af:2e:d3:f9:
f0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EC:B0:33:DD:F9:71:12:CB:03:EE:C3:77:54:13:CB:26:3F:D0:65
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/56bfd5b7-3418-4344-a865-789d203e14b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.48.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:f3:47:fd:13:e9:55:db:74:b8:4a:09:4a:2e:0e:83:23:06:
29:a0:14:57:4a:7e:10:d0:1c:5c:1b:11:56:36:36:85:ac:0e:
be:bf:8a:ac:53:01:8a:58:14:d2:79:50:13:5d:9e:45:7d:df:
c0:ba:ca:9d:f8:22:2b:93:62:28:25:26:92:50:1a:f5:28:60:
af:c5:ee:22:7e:bf:39:40:52:95:24:d6:33:9f:67:7c:94:8f:
4c:34:9e:a5:22:09:ed:ef:b1:0b:ef:6c:42:71:b8:38:6e:cd:
fa:1b:3c:6a:17:bb:b4:69:32:6a:4d:bd:53:9a:21:85:e6:1f:
e2:08:9c:81:d2:75:71:1b:c0:b4:ee:fb:a2:b7:56:c5:bb:2d:
a4:d1:da:ca:f6:01:a6:05:fe:56:af:56:05:82:60:c2:1e:3b:
d6:eb:8e:47:bf:0f:39:91:51:d4:56:e2:22:30:5b:41:af:4f:
3c:33:ac:7c:2a:b0:c2:5d:d6:ca:cd:75:36:b1:3e:c4:f4:be:
a2:19:f8:0e:9b:8d:00:a3:65:7c:76:29:1f:f8:b9:f1:97:4a:
91:5b:73:c8:e7:fb:84:7c:f0:93:e2:b4:2a:c4:dc:ed:34:39:
16:99:ca:d8:a9:79:75:38:dd:20:50:90:eb:77:63:06:c9:33:
2e:ff:93:87
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIULdKzE6GvBGSkPCol/nXm0sSI3I4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwNzMxMDE1MDIxWhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0AzYzAwNWI1ZDk4ZDgzYTFlYWJhYmFkMTA4NDY3YmIwOGI0
NTcwNjAzNzdkNTY3Mjk5MjQ4M2U5ZmZkNjE1ZDAwMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQDAOi2yZ9Gq45iy7rmBnKZioOBXThx/rYI3+6BidxabNoUO
yhRVCAKE6e8PjgSIyaXqu5xj3/s1q5+xdFTHgJ+YfMD+AvgKMBeXdE0XJjhdhP1W
BOQQQZtEGsKb7yzRB9Q0PNxWKLli218Z0me6XOItBube0GlACKogL8VUFqL1Au8O
sgbvLQ+B0gVQebMAVrX2HGYc60Jm6voUtAwNTr5aYxRbnfAUgQTtL8ocbpYvIFyJ
y8Yl8kHEWt9EEgeBrfiJZHdrqSYw7qok45TYND6iSuUME7+zXyaLS0hL5mQKqWqH
bEbqHsJqRBjgcmJO/5Q6ECLEf7zqdE1/ry7T+fAHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUW+ywM935cRLLA+7Dd1QTyyY/0GUwHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyLzU2YmZkNWI3LTM0MTgtNDM0NC1hODY1LTc4OWQyMDNlMTRiMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAAjYDAwDQYJKoZIhvcNAQELBQADggEBAG3zR/0T6VXbdLhKCUouDoMjBimg
FFdKfhDQHFwbEVY2NoWsDr6/iqxTAYpYFNJ5UBNdnkV938C6yp34IiuTYiglJpJQ
GvUoYK/F7iJ+vzlAUpUk1jOfZ3yUj0w0nqUiCe3vsQvvbEJxuDhuzfobPGoXu7Rp
MmpNvVOaIYXmH+IInIHSdXEbwLTu+6K3VsW7LaTR2sr2AaYF/lavVgWCYMIeO9br
jke/DzmRUdRW4iIwW0GvTzwzrHwqsMJd1srNdTaxPsT0vqIZ+A6bjQCjZXx2KR/4
ufGXSpFbc8jn+4R88JPitCrE3O00ORaZytipeXU43SBQkOt3YwbJMy7/k4c=
-----END CERTIFICATE-----
Generated at Fri Aug 21 00:15:27 2026 by rpki-client