
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa
File: 95808009-fbc3-494a-8fba-ce3cf5711341.roa (raw, json)
Hash identifier: cGNRDQaoW5nKFl6ba+hflCvSlLst1PJjdaWyQmFZgNA=
Subject key identifier: 91:8D:A6:2A:35:6E:2A:44:41:85:3F:6A:AE:F1:BD:35:C2:D4:8D:5B
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 47E42B02C684681CB07CE76A4A13E0895AC4713D
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa
Signing time: Fri 13 Feb 2026 14:50:08 +0000
ROA not before: Fri 13 Feb 2026 14:50:08 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:e4:2b:02:c6:84:68:1c:b0:7c:e7:6a:4a:13:e0:89:5a:c4:71:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 13 14:50:08 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=00a5b07c5dfc90bce390f696d17ed0dd96c3dd47b856b98c855a3538727b0e4e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:94:09:ce:6f:eb:1c:19:a1:b5:35:85:e6:
94:13:e1:32:03:5e:12:25:80:76:8c:1e:a3:15:dc:
64:0d:63:cd:0b:43:44:97:5d:af:46:7c:3c:0a:2b:
2d:fd:23:78:60:73:13:52:da:3c:a0:3a:d8:d9:56:
93:6b:b8:a6:56:6a:dd:fb:b9:66:bd:94:41:b1:fb:
94:65:6c:ef:a0:a8:08:2b:8b:c9:4a:8b:63:97:ed:
bb:a4:32:12:46:a8:12:ac:41:c1:55:21:02:87:96:
87:c1:86:52:a9:d6:8c:bf:e5:99:ad:7a:8e:be:e9:
17:c0:5b:ff:5c:6a:e1:4f:fc:3e:ce:f3:b5:ab:45:
1a:ca:46:a8:d8:29:9b:c5:b3:c5:11:fe:25:b6:30:
ad:ce:17:0b:49:f4:f8:27:c0:37:d2:f5:ae:f3:12:
49:f9:ab:56:94:02:ea:38:9b:f3:8b:8f:d0:c2:a6:
5e:3e:22:f7:db:e0:43:fa:86:74:41:ff:80:71:ee:
b4:53:33:34:79:82:1c:71:3e:fa:9f:58:7c:aa:a3:
08:45:b2:af:80:81:0f:48:5b:5c:65:d7:2f:b6:48:
c3:2b:61:02:33:2c:56:93:2d:ff:6e:a4:63:17:23:
68:0f:78:58:1d:2c:db:5e:ea:31:31:7c:4c:66:9a:
a8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:A6:2A:35:6E:2A:44:41:85:3F:6A:AE:F1:BD:35:C2:D4:8D:5B
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/95808009-fbc3-494a-8fba-ce3cf5711341.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.22.0/23
Signature Algorithm: sha256WithRSAEncryption
96:82:86:78:07:d1:bd:0b:3e:7d:72:d8:b4:d1:9a:e7:35:e2:
9f:46:86:5a:30:8c:9b:b3:6a:6f:00:59:bd:ba:95:d4:a1:2b:
e0:55:31:16:71:59:82:a1:6d:18:5a:ed:ff:95:de:dd:7a:f9:
a4:3f:40:e4:e3:70:35:0a:b3:68:d1:b1:55:c7:a4:5e:1a:2f:
6d:7f:b6:91:98:b4:c3:39:89:bb:ea:a3:cb:be:12:71:46:63:
a0:9f:90:d5:63:65:4d:30:08:e1:6f:ab:2c:ab:e1:97:00:56:
26:50:d6:71:e6:95:57:c2:77:b0:ff:16:02:42:60:50:e5:57:
19:e0:ba:17:93:52:42:52:b0:a5:00:5c:d9:ec:82:94:c8:b3:
b0:b6:1c:37:56:6e:2b:c0:6e:ec:03:7b:19:45:33:45:e1:f3:
a6:e7:a6:0f:36:a6:bd:53:17:e9:2e:13:b8:85:4f:4d:5d:25:
f5:ce:c8:5e:a4:fe:28:5a:0f:24:23:d9:31:6a:db:79:58:c5:
26:a9:a3:4a:9a:12:bb:57:39:11:83:d6:b9:e2:39:1f:b9:51:
a7:be:07:97:0f:a9:41:5d:ff:5e:7c:5e:b3:06:31:b7:d3:5e:
c8:9f:9b:33:20:eb:00:c2:06:11:a1:9a:37:a4:08:3e:e8:ff:
a2:44:10:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:15:43 2026 by rpki-client