
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa
File: 9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa (raw, json)
Hash identifier: MwBAMgvWkWmofvX6h7+6BRE+XaSu5IqebHZNTzaFRXE=
Subject key identifier: 85:18:5C:C3:DA:97:1F:09:1A:47:F2:9A:C8:CA:26:61:75:78:C7:EE
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 474302B19BD5676D92194C63062408A750819F32
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa
Signing time: Wed 05 Aug 2026 01:50:25 +0000
ROA not before: Wed 05 Aug 2026 01:50:25 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:43:02:b1:9b:d5:67:6d:92:19:4c:63:06:24:08:a7:50:81:9f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Aug 5 01:50:25 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=c1827fed10d5d687977ea8ffab07fe68edf77b4d549517d37d1f193425fdaf8e, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:06:0a:e8:b8:b8:74:9a:a6:2c:a6:4a:b3:08:
f7:8a:f7:b0:33:1d:e6:c6:67:63:f6:7d:5d:eb:e2:
7c:80:55:a1:bc:02:ed:3c:a1:1d:7e:29:03:99:32:
56:19:34:17:85:30:23:0e:9d:fe:dd:48:a4:c1:93:
e9:fd:a8:7a:8c:56:89:1a:02:3c:44:1a:78:e4:ce:
d7:31:4a:8e:29:2d:86:53:30:79:19:4d:87:59:d1:
29:b4:81:b6:29:7e:90:33:fe:09:8f:71:9c:be:88:
31:0f:90:9c:bb:4a:18:bd:93:4f:c7:49:7f:9f:36:
3c:68:59:b1:54:51:ed:ca:9c:fd:7a:70:63:99:af:
c1:7e:dc:e4:eb:5c:ca:62:c6:8e:90:ac:08:a8:a7:
58:96:47:74:55:2b:95:b2:e8:b1:33:fc:73:7e:dd:
8d:47:f9:66:2c:fd:a5:b4:6d:7e:ec:3a:65:c7:7d:
a2:ff:25:fe:51:d8:8d:a5:4f:90:f9:96:92:67:21:
b8:9b:f0:bf:7e:d1:ff:3b:b8:50:3c:38:bb:61:9f:
28:9a:9d:0d:2c:3c:1b:c0:54:60:20:d1:1e:80:63:
36:f7:fb:ee:63:78:e7:6b:ed:8a:5d:30:9f:38:93:
00:30:ba:54:28:66:f8:f0:8b:85:8a:bb:aa:09:85:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:18:5C:C3:DA:97:1F:09:1A:47:F2:9A:C8:CA:26:61:75:78:C7:EE
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9caf50d7-1511-48a7-abcf-d261ded7f7c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.45.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:30:77:80:1d:36:15:82:b7:7c:4f:a3:ad:eb:17:7d:87:ac:
39:b3:92:76:01:b7:45:f6:b3:e4:77:90:60:03:8c:63:44:45:
3c:76:99:d2:e2:1a:d5:fa:f0:5e:fb:e4:8b:fb:a6:c8:04:d6:
6f:df:bc:3d:fb:f1:fd:ec:c2:28:cd:d9:ea:d1:5a:6a:0e:8e:
ec:6e:68:f9:64:c5:d8:6c:08:63:75:bf:80:30:68:45:c3:ba:
e3:2f:cd:d4:2e:48:36:4d:36:ae:4f:6b:dc:0a:7b:03:ab:c6:
35:63:1c:12:3c:40:31:3a:c7:a2:8b:e5:3c:b4:f1:98:56:37:
a8:e5:32:e8:66:01:7a:e1:fa:0d:e5:77:ba:92:c9:bd:8d:2b:
ef:cc:3b:59:40:0c:99:f1:63:27:d3:ee:63:cb:24:bc:ad:74:
51:46:63:85:ef:f7:45:69:69:6f:da:30:a1:80:e6:8f:90:e7:
e7:7b:f6:4d:7e:e9:1f:17:bd:bf:70:5a:b0:50:02:80:33:2a:
f5:06:e1:aa:2e:eb:c7:20:0a:ae:10:77:cf:ca:19:aa:16:dd:
ae:7a:0a:e0:3c:ef:79:32:e1:5d:6e:77:aa:96:41:f2:05:d8:
04:52:32:8b:00:6f:6f:26:8c:de:ff:ec:32:22:e8:e7:bc:41:
7d:41:4a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:57 2026 by rpki-client