
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa
File: 816351d7-264c-4dde-b647-b477b194cfb6.roa (raw, json)
Hash identifier: yHOXKrj96tb5O9jar6/+r6cJAmzH6HM1fu03JLN289U=
Subject key identifier: BB:A2:F4:D2:D1:5D:B9:AE:F3:39:8D:AF:06:10:90:51:2D:39:34:25
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 21561C5DF73B042350C1087CEEF39BBCD580F829
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa
Signing time: Fri 06 Feb 2026 00:30:15 +0000
ROA not before: Fri 06 Feb 2026 00:30:15 +0000
ROA not after: Thu 07 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:56:1c:5d:f7:3b:04:23:50:c1:08:7c:ee:f3:9b:bc:d5:80:f8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 6 00:30:15 2026 GMT
Not After : May 7 23:59:59 2026 GMT
Subject: serialNumber=fbd1841c846a7dd7eae3eb66a0607e5d3c99eaf19ea2f19ea16f82f76450dd88, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:95:95:5e:80:42:da:94:6a:2d:b2:eb:c6:5a:
e7:2a:a3:63:f6:7b:6d:90:34:f7:b8:e0:de:3a:ad:
a5:ca:e8:fc:c0:b2:54:5b:f1:6e:9b:ab:1c:53:53:
78:21:5d:a5:e3:62:4c:a9:f3:79:4a:c4:e6:4c:96:
71:02:31:8f:25:52:f4:7e:ac:ce:9d:53:d6:e0:d9:
39:30:5f:69:58:40:38:2f:fa:a5:c0:ba:5e:97:4d:
55:ae:31:8f:07:e6:0a:a0:4a:37:c0:fd:36:d5:3f:
ba:36:b8:1c:34:ad:3e:b2:06:49:34:66:04:f9:b5:
5d:a0:57:be:0d:04:0d:8c:9a:e5:3f:7f:1f:6e:4b:
35:7e:a0:a0:49:3d:a4:6e:f6:ee:07:e7:8d:f8:ed:
5f:ea:45:c7:99:77:2f:86:a4:9f:22:3f:b2:24:e1:
ec:6b:d1:56:24:d6:bd:d7:90:21:03:c3:a1:79:81:
c4:1b:76:d6:e1:38:b0:81:8f:57:c0:80:57:f2:f3:
c4:eb:9b:cd:fa:98:8f:71:ff:f3:68:8d:5c:9b:fc:
76:31:38:04:46:e1:07:42:2d:76:dc:45:7e:cb:da:
db:8d:d2:93:ed:23:d3:7d:4e:59:4f:d0:b1:bb:d2:
b4:66:1b:3d:a8:cb:47:73:f4:62:6d:e7:31:04:42:
af:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:A2:F4:D2:D1:5D:B9:AE:F3:39:8D:AF:06:10:90:51:2D:39:34:25
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/816351d7-264c-4dde-b647-b477b194cfb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
Signature Algorithm: sha256WithRSAEncryption
8d:97:93:a5:33:02:0e:f9:11:36:c8:6c:21:2e:31:5a:5f:e8:
53:ed:0b:af:b9:eb:e1:8a:3e:ff:28:ba:4c:de:6d:6b:a2:14:
82:df:b0:9b:a9:a5:ad:38:3c:1f:f5:fe:34:72:5f:4f:a8:bd:
bd:ca:23:2a:f6:3d:6f:89:b0:8c:78:5a:79:f3:0c:3f:ec:f8:
24:d8:29:21:67:4e:b6:18:17:40:14:6e:4e:00:b6:f0:1d:6a:
9d:9a:c5:1a:66:a6:d9:6f:9a:96:87:a0:8b:0d:71:e4:2b:09:
ec:04:a6:3c:48:4f:c5:1c:f1:12:fc:49:84:91:59:54:32:ec:
46:f7:50:49:4f:6d:bb:ae:20:53:d3:53:b2:61:88:58:79:2e:
75:f8:37:d1:e3:33:4d:3c:96:34:ab:af:0d:72:c3:08:72:de:
3c:c6:f6:ba:f3:d3:8c:09:e5:64:de:f7:83:1a:57:5e:e7:65:
06:b4:43:f0:1f:f0:66:eb:70:0d:18:f4:52:b5:cf:a7:c8:e2:
44:21:f7:a6:29:a0:cf:03:9d:13:46:03:1f:18:42:aa:56:bb:
ac:23:66:33:ac:1a:ed:81:2b:a1:04:9a:85:7e:ff:17:80:88:
e1:c2:6f:6f:4b:ba:fc:db:0a:96:e4:be:33:df:37:39:59:b2:
ed:24:b0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 04:52:01 2026 by rpki-client