
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa
File: e7a6fe73-e83b-497f-9236-892dd595ac34.roa (raw, json)
Hash identifier: H+eL6LdXWsEhVrfagrhr0qfyzN1NE0pojBKdUc4Oojk=
Subject key identifier: 67:40:32:A1:44:F8:80:AE:30:34:81:1F:3F:02:BD:C1:B4:AF:4D:2C
Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Certificate serial: 5EF2A139404F76F3F8F605EB91AD5C2E6D065D0A
Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa
Signing time: Wed 05 Aug 2026 02:00:08 +0000
ROA not before: Wed 05 Aug 2026 02:00:08 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 801
IP address blocks: 35.96.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:f2:a1:39:40:4f:76:f3:f8:f6:05:eb:91:ad:5c:2e:6d:06:5d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c
Validity
Not Before: Aug 5 02:00:08 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=8a62dfe0f1f31bdc5e8497373fcc91461aa1e9db8435f4d8d619f165536d1606, CN=8cd8442f-235f-4171-84e6-8e1007a64c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:d0:8b:5f:80:b0:9c:0f:b5:ed:18:12:ef:
a6:b7:bf:f5:46:0c:6c:fc:4b:a7:c5:85:d2:aa:d7:
7d:cb:69:f2:f0:2c:08:82:db:00:2f:27:b1:e5:06:
b0:1c:5b:ae:f5:f0:c8:d8:2a:ef:09:92:8e:08:5b:
e7:36:ce:6d:c3:b6:a0:49:1f:d5:0d:2f:e8:b8:a2:
cb:3d:09:ee:a4:ac:e7:17:39:8c:84:93:8c:fa:a7:
68:fc:7b:9c:82:14:e1:71:9d:44:15:d6:56:51:7d:
4a:96:d4:7d:69:0a:9b:f8:cb:d8:c4:ce:c7:1e:c8:
24:4d:54:7f:d9:f4:b4:a8:37:96:77:79:7b:99:44:
c4:04:54:aa:81:8a:2d:75:61:cf:80:12:fb:c3:c6:
56:f7:78:a1:6e:d0:0b:5c:93:7d:ac:07:0c:8d:4c:
d0:7c:95:08:b4:ab:14:98:bb:68:2b:8c:3d:20:1d:
14:a1:19:2e:d2:8f:ee:40:13:c9:94:3a:01:65:1d:
12:64:37:80:dd:60:b8:96:5b:d2:3b:b1:b9:10:51:
58:17:8c:ed:08:bd:f3:09:98:f4:c9:e2:be:bb:cc:
27:e1:7b:47:cf:81:5b:c4:06:c6:00:32:4b:d4:f4:
f7:d5:ac:20:66:9b:2b:92:58:16:4d:e2:69:12:eb:
1d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:40:32:A1:44:F8:80:AE:30:34:81:1F:3F:02:BD:C1:B4:AF:4D:2C
X509v3 Authority Key Identifier:
keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/e7a6fe73-e83b-497f-9236-892dd595ac34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
35.96.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0c:ab:e3:61:6f:03:6a:22:14:44:08:86:95:cb:a8:16:6a:
53:eb:56:eb:ea:0a:42:7f:5c:85:21:45:6d:4e:a4:f2:b0:b9:
7b:b5:68:df:49:e0:ed:8e:3b:7d:a0:6a:fa:3d:f8:a6:c4:cb:
f9:66:97:3b:67:2e:0b:a2:44:ae:40:a1:be:88:a9:33:bd:40:
dd:3b:dc:3f:3a:76:ab:5d:15:30:8e:ff:fb:cb:91:6c:b5:76:
fd:9a:1a:6e:e7:31:1d:24:8a:e9:20:46:1a:64:ee:aa:4f:0a:
5f:86:3d:75:41:d7:e7:e7:8a:60:3a:52:1d:bd:5f:a3:49:32:
30:62:37:7a:24:af:5e:8e:85:1f:c6:c9:99:95:d2:15:bb:50:
c7:ac:16:77:cb:51:a4:32:95:6e:3e:d7:61:91:91:da:99:73:
46:a6:fd:69:c8:d7:c1:56:13:64:4f:d4:71:02:20:38:3a:50:
5f:e5:4a:72:f0:d8:60:82:4f:17:b2:9f:b1:25:02:d4:6b:65:
ba:dc:bd:7b:a7:66:4f:23:c5:de:b2:7d:14:ef:7b:4d:ea:7b:
02:09:cb:ec:f0:83:05:48:0c:81:5c:a3:12:9d:b0:bd:fb:bb:
1c:e2:83:00:d6:83:3d:6c:e6:59:af:8a:ac:de:1b:3d:c6:75:
81:a3:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 00:14:30 2026 by rpki-client