
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa
File: 5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa (raw, json)
Hash identifier: rAZyZ/jYmNbI0G5dSgOYLwooF+OcNCTO/GYNUX2wxvs=
Subject key identifier: E0:77:FA:0D:46:10:5D:C3:BA:8D:F0:73:E5:D7:CE:12:DB:05:6F:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 019EAB13D6A358BA98A16CDFB83B0740C726E8FD
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa
Signing time: Sat 24 Oct 2026 00:40:09 +0000
ROA not before: Sat 24 Oct 2026 00:40:09 +0000
ROA not after: Fri 22 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 70.224.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Nov 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:13:d6:a3:58:ba:98:a1:6c:df:b8:3b:07:40:c7:26:e8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 24 00:40:09 2026 GMT
Not After : Jan 22 23:59:59 2027 GMT
Subject: serialNumber=d014d56923abae6da73bf9fe40001519d56c579dd05c31bba86b17c7891389b4, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:79:09:37:bb:9b:b3:90:38:85:82:af:8c:66:
28:a7:e7:fd:c4:0e:6b:5e:bb:67:70:92:0f:71:30:
c3:d2:4c:31:98:1f:9d:1e:7b:44:79:6d:3d:2d:b6:
e9:6b:9d:17:30:ae:a1:b8:b1:21:c7:8d:90:1b:fb:
99:93:2a:b1:6d:c0:12:23:6d:f7:75:bd:d1:39:75:
6b:21:fd:31:68:27:f1:25:27:de:31:15:c6:75:78:
0e:cc:30:7c:6b:45:25:37:b3:72:a8:9e:8b:72:e3:
42:95:0f:cf:9f:71:b3:91:22:4e:19:21:f3:ed:c4:
4a:f2:e5:eb:c5:60:b6:90:87:a0:6b:0b:c0:f1:fc:
9a:fc:39:e8:e6:23:23:cc:ac:a3:b6:c6:80:d1:18:
06:bc:e4:05:fd:5e:4f:4c:fe:4e:48:a3:c9:b5:01:
16:e6:96:41:7c:50:40:d8:5d:ee:ed:0a:4e:da:86:
c9:58:9a:a7:f0:4c:04:a5:c1:97:ae:24:23:84:dc:
f9:f4:e7:65:51:b2:4b:9c:e8:c5:18:89:3e:38:21:
01:b0:63:d3:92:28:14:b1:90:91:c1:c2:44:af:a9:
dc:f5:5c:45:78:b7:3f:82:80:aa:b4:df:50:ae:e2:
e2:a1:27:a7:96:41:60:f9:1d:1d:2e:cc:dc:81:81:
85:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:77:FA:0D:46:10:5D:C3:BA:8D:F0:73:E5:D7:CE:12:DB:05:6F:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.224.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:5e:8d:6d:d7:e5:63:b7:88:64:cf:2c:1f:ec:4c:0a:5a:8f:
ef:b8:72:df:ac:5b:c2:50:49:c1:d7:62:5d:a5:ad:dc:76:c4:
24:93:d3:fc:62:81:88:7a:61:6c:b9:e7:fa:a4:36:02:2c:d6:
40:a8:4e:ce:60:05:b2:b9:f1:77:fb:f5:ac:9a:f0:95:d9:fa:
33:0b:a9:61:6f:88:18:61:a6:03:b9:e0:4c:a1:13:1f:64:84:
3b:c8:93:81:87:46:f2:80:90:db:42:38:33:c5:18:5b:d6:42:
85:0b:ba:ff:0a:d7:96:90:e0:87:b2:1c:a6:0a:b8:39:12:52:
17:b2:7a:c6:80:ae:33:b4:75:f5:6b:bb:93:8b:6f:f9:a8:37:
6e:a8:86:a6:87:a4:63:f2:fd:f3:4a:7f:a4:dc:b5:89:5d:55:
a8:b6:fc:dc:81:52:2a:a8:1c:c6:ce:ef:9c:45:ed:29:7f:64:
d3:e1:1e:1f:6e:b9:7b:9b:60:5b:93:2f:48:47:c1:1a:f5:e0:
98:d4:0c:f9:78:5f:c9:4f:7e:43:15:49:19:a9:99:d4:55:3f:
45:d9:b8:06:4e:10:5e:54:a8:f0:93:e7:2c:9e:79:8a:b7:d4:
26:10:17:a3:c0:f7:ae:40:db:90:ca:19:b3:27:1c:08:6f:5d:
d6:d6:b9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 22:30:12 2026 by rpki-client