
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa
File: a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa (raw, json)
Hash identifier: GSdDdzMXvzJUszvPlqjpi4BN9yiGvlYpCCbmGvAi/Y8=
Subject key identifier: D8:C1:C2:DE:0D:4B:C7:6B:D7:7B:D4:1B:40:52:2D:43:14:0D:3F:FD
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 2BBF567995079D19E4F01B0909E1A08EA23B35A6
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa
Signing time: Fri 13 Feb 2026 14:50:07 +0000
ROA not before: Fri 13 Feb 2026 14:50:07 +0000
ROA not after: Thu 14 May 2026 23:59:59 +0000
asID: 14618
IP address blocks: 35.96.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:bf:56:79:95:07:9d:19:e4:f0:1b:09:09:e1:a0:8e:a2:3b:35:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Feb 13 14:50:07 2026 GMT
Not After : May 14 23:59:59 2026 GMT
Subject: serialNumber=b68a0f0c467ac831f25505df20dd249a8d0de411802c5515000365def6f27efc, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:6e:13:e7:d8:ac:85:e0:33:13:7c:0c:3b:
50:f6:1e:b2:0d:ea:76:78:7b:ea:5e:93:42:a7:85:
3c:36:b5:dc:84:31:42:a8:4e:03:d3:93:ae:95:f5:
32:1e:27:b1:c4:54:5f:dc:d1:5b:6a:17:8a:2b:30:
54:e7:35:58:ea:32:22:97:89:37:da:c4:e1:12:bd:
8b:36:f8:da:93:1e:30:bf:3b:22:38:e3:9f:ce:b3:
04:14:92:d6:7b:03:5f:fb:4b:3d:4a:a1:a5:f5:c1:
e0:9e:73:6f:63:28:e0:4e:ff:9a:54:67:bb:20:c8:
0c:68:cf:82:13:d7:ac:0d:a1:48:ec:23:d1:6e:da:
85:a2:d7:86:6a:f3:58:67:9b:5b:4e:39:65:a3:2f:
51:e3:8b:7f:08:09:7e:64:2c:51:e9:99:69:35:ee:
4e:64:25:9f:64:42:93:9e:4e:81:67:fb:84:2a:80:
ed:98:fa:79:83:cf:09:53:6c:95:73:a9:7e:60:c6:
41:2f:c9:d9:6c:ca:40:d2:9a:59:18:5e:ea:06:bc:
18:26:79:fd:2e:e5:2f:cb:79:50:99:48:e4:6c:2a:
da:3d:e8:6f:47:d0:4f:e4:90:fb:51:39:7c:a2:15:
ba:a9:96:5d:2d:8a:d6:c7:c0:83:3a:f9:e4:2d:67:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C1:C2:DE:0D:4B:C7:6B:D7:7B:D4:1B:40:52:2D:43:14:0D:3F:FD
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/a27cd140-1d2b-4e7d-a6c0-7e3c86150c3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.22.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:9d:04:ec:9f:c7:4f:dd:48:bb:bb:c0:7b:c9:6a:25:13:85:
13:6a:b6:75:86:48:16:c1:66:e7:96:66:a1:6d:da:4c:7f:53:
22:49:bb:65:ca:0a:99:e6:39:93:a1:43:aa:e5:50:91:00:bd:
c0:52:e3:11:c8:b6:67:1e:a4:3d:0f:eb:ed:82:d7:50:4e:76:
b0:bb:fd:b4:2f:4d:1b:60:18:61:7b:29:9e:d7:2d:53:f7:5f:
84:ec:4b:a2:22:a5:46:10:47:88:76:71:c5:88:58:4f:ba:43:
84:b4:95:bb:78:58:1c:c0:bf:3c:2e:9e:48:da:22:1b:24:29:
32:e8:3a:24:02:93:99:84:58:cd:74:8e:a5:53:91:51:95:f9:
0e:5d:6d:6f:6c:54:7a:ff:1e:f9:a8:be:79:83:fd:b8:56:95:
1a:01:76:0c:01:29:97:21:a1:77:49:48:73:ec:7e:b6:10:b0:
3a:a8:9f:8e:d5:43:7c:8c:a7:3b:44:82:6e:26:b7:05:89:d9:
9d:20:e8:54:67:0e:27:4d:51:2f:0e:09:59:4d:10:b0:20:9f:
d3:b6:e8:dc:99:da:d8:fc:b5:0e:53:b9:ed:dc:de:e7:20:d3:
e1:10:1f:64:90:42:80:99:57:e4:29:e8:20:3b:f6:3d:b6:d7:
22:bf:7c:63
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUK79WeZUHnRnk8BsJCeGgjqI7NaYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh
MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYwMjEzMTQ1MDA3WhcNMjYwNTE0MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNjhhMGYwYzQ2N2FjODMxZjI1NTA1ZGYyMGRkMjQ5YThk
MGRlNDExODAyYzU1MTUwMDAzNjVkZWY2ZjI3ZWZjMS0wKwYDVQQDEyQ4Y2Q4NDQy
Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpFm4T59isheAzE3wMO1D2HrIN6nZ4e+pek0KnhTw2tdyE
MUKoTgPTk66V9TIeJ7HEVF/c0VtqF4orMFTnNVjqMiKXiTfaxOESvYs2+NqTHjC/
OyI445/OswQUktZ7A1/7Sz1KoaX1weCec29jKOBO/5pUZ7sgyAxoz4IT16wNoUjs
I9Fu2oWi14Zq81hnm1tOOWWjL1Hji38ICX5kLFHpmWk17k5kJZ9kQpOeToFn+4Qq
gO2Y+nmDzwlTbJVzqX5gxkEvydlsykDSmlkYXuoGvBgmef0u5S/LeVCZSORsKto9
6G9H0E/kkPtROXyiFbqpll0titbHwIM6+eQtZxZZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU2MHC3g1Lx2vXe9QbQFItQxQNP/0wHwYDVR0jBBgwFoAUasw+faLnbZkR
D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00
NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1
Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx
MTI5ODY2MzYyL2EyN2NkMTQwLTFkMmItNGU3ZC1hNmMwLTdlM2M4NjE1MGMzZi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4
LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAEjYBYwDQYJKoZIhvcNAQELBQADggEBAIqdBOyfx0/dSLu7wHvJaiUThRNq
tnWGSBbBZueWZqFt2kx/UyJJu2XKCpnmOZOhQ6rlUJEAvcBS4xHItmcepD0P6+2C
11BOdrC7/bQvTRtgGGF7KZ7XLVP3X4TsS6IipUYQR4h2ccWIWE+6Q4S0lbt4WBzA
vzwunkjaIhskKTLoOiQCk5mEWM10jqVTkVGV+Q5dbW9sVHr/HvmovnmD/bhWlRoB
dgwBKZchoXdJSHPsfrYQsDqon47VQ3yMpztEgm4mtwWJ2Z0g6FRnDidNUS8OCVlN
ELAgn9O26NyZ2tj8tQ5Tue3c3ucg0+EQH2SQQoCZV+Qp6CA79j221yK/fGM=
-----END CERTIFICATE-----
Generated at Mon Feb 23 05:14:06 2026 by rpki-client