
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
File: 9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa (raw, json)
Hash identifier: QuFo1QiYlHJXiQk8Ri0T47GDQnxNcodinfzErBmmf+I=
Subject key identifier: 8B:E0:2B:A8:85:53:9B:B9:64:89:2F:7A:EF:99:16:AF:1D:CE:9A:2E
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 59CB4F500142F510F1B991E708E084C5C2423DAF
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
Signing time: Tue 17 Feb 2026 02:50:15 +0000
ROA not before: Tue 17 Feb 2026 02:50:15 +0000
ROA not after: Mon 18 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 35.96.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:cb:4f:50:01:42:f5:10:f1:b9:91:e7:08:e0:84:c5:c2:42:3d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 17 02:50:15 2026 GMT
Not After : May 18 23:59:59 2026 GMT
Subject: serialNumber=83b72e7b1900242c4d91903f1129760040495f110632d490f038beb10195b7a6, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e3:3b:47:ac:a7:1d:e8:9c:2a:37:93:3e:ff:
92:20:08:e9:d3:b8:ed:70:54:44:b8:6f:91:54:39:
b9:8d:3b:44:39:e3:f8:8b:7a:2a:5a:47:07:68:9c:
5e:a4:56:88:4d:6d:82:03:7b:fc:38:05:d8:ff:3e:
a9:5e:06:ea:88:ff:81:6a:c0:9c:c0:86:b0:c1:99:
6d:97:0d:cb:ab:e7:45:f6:39:00:9f:43:16:86:a3:
b8:a8:3e:86:15:2c:1f:e5:50:a3:0f:d6:45:e9:eb:
f1:57:14:02:8f:4b:a4:b8:33:9e:93:17:3f:6c:09:
81:50:99:07:91:8b:b5:73:0e:bc:44:41:62:61:39:
a1:e5:a3:1b:d2:77:5c:09:ec:91:df:0d:46:b0:84:
f6:69:7b:59:16:07:1b:17:d4:d8:62:93:32:86:0e:
d3:76:b4:cd:a2:31:06:79:15:e5:2e:8c:6f:1c:6e:
11:f9:bd:5c:d2:4b:89:35:b9:3b:60:ab:d1:6c:d8:
99:75:14:ef:17:64:cf:3a:39:ef:c5:1b:0d:33:45:
af:0a:e1:e5:e1:2b:9f:f8:ce:4c:cf:06:fd:f1:94:
b9:64:78:58:b5:84:da:77:93:1f:87:e1:99:a8:c1:
23:ea:b8:5c:7a:72:ff:20:50:6b:d3:1f:bf:77:78:
09:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E0:2B:A8:85:53:9B:B9:64:89:2F:7A:EF:99:16:AF:1D:CE:9A:2E
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9fcd9d6a-7272-4c1e-b46c-cc94e58322e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.12.0/24
Signature Algorithm: sha256WithRSAEncryption
97:30:e5:40:69:20:50:f6:01:ef:55:d5:7e:cc:67:a8:01:bf:
33:35:1b:e0:10:54:80:0c:c6:8d:42:c5:d8:e0:37:f3:33:75:
8c:47:ef:f9:3f:6d:28:e4:a1:8e:d5:25:d6:eb:e0:8f:c5:e4:
b7:25:e8:8d:96:83:cb:03:28:1c:b4:02:49:b6:a8:73:c6:c9:
08:30:7b:29:38:29:80:b2:84:a7:f7:11:d1:d6:46:5a:63:99:
d2:65:5b:1b:5c:e5:b9:45:da:7e:07:8e:2d:d0:7d:a7:80:54:
2d:0a:19:13:60:d4:d1:57:5d:bb:d0:13:9f:a4:26:f3:ba:df:
1d:5e:43:5c:1a:77:65:b6:4c:ee:4b:52:a0:4a:f5:1f:90:2b:
b3:9b:4e:bf:d2:d9:f0:77:8e:3a:c0:fe:f2:22:cd:19:0d:1d:
58:01:0c:0f:88:f6:76:43:4f:8c:67:f7:39:19:b8:61:b2:7f:
19:4e:f9:25:4a:8c:a3:da:00:93:99:b8:1b:df:18:60:7e:5b:
7f:a3:ee:36:67:46:39:2d:86:53:e5:da:10:69:49:e0:91:27:
6e:09:a9:55:ef:db:16:63:2c:4a:93:13:96:a6:d3:3b:f7:07:
15:17:d2:72:da:b3:7c:88:b6:a1:0a:f6:6e:a4:4d:f9:d9:6d:
a7:99:0b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 05:14:09 2026 by rpki-client