
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa
File: 5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa (raw, json)
Hash identifier: FV9i/rEzdIPAlYJAcUhreQ6GiB9beU9ZPLhioJEMEmk=
Subject key identifier: 5D:27:81:74:70:92:5D:7E:20:3A:A2:2E:CC:11:BC:ED:67:4F:2F:A7
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 6F9361DB402E8456AFC11C84FEECC048DFE62521
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa
Signing time: Wed 05 Aug 2026 00:31:30 +0000
ROA not before: Wed 05 Aug 2026 00:31:30 +0000
ROA not after: Tue 03 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 70.224.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:93:61:db:40:2e:84:56:af:c1:1c:84:fe:ec:c0:48:df:e6:25:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Aug 5 00:31:30 2026 GMT
Not After : Nov 3 23:59:59 2026 GMT
Subject: serialNumber=49574c8af8a5203235f87af6304269af00abbe62093237d84d8c8aa612f9e322, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4e:a3:36:32:b1:cc:95:5a:ff:c4:73:6a:88:
b7:67:80:4d:14:d0:b2:b6:86:88:54:9b:a7:dd:da:
9e:6e:01:8d:87:6d:8a:a2:f5:b3:bf:9a:29:d9:a8:
2c:36:ce:88:08:ad:8c:84:f7:87:f2:ea:d5:72:af:
0b:0d:b2:54:42:ac:a0:cb:e0:c7:22:b8:67:c0:6a:
b4:b3:de:9c:f9:44:2b:8f:c3:7c:09:e7:92:cb:10:
ca:f1:82:15:e2:66:d7:11:15:d3:aa:5a:38:2e:5a:
78:10:0b:ca:3e:5e:67:cb:9a:12:e2:f9:59:2f:4a:
0a:fc:56:78:9b:93:64:6e:eb:da:0e:a6:23:82:d4:
8d:55:af:78:61:3b:38:c8:7a:36:d2:6b:b1:35:68:
a5:a7:de:9e:9c:62:6e:de:bd:5b:31:44:3d:85:78:
ec:be:4f:68:cd:1a:66:b6:6f:33:30:aa:12:97:27:
68:cc:7a:17:17:57:59:05:8b:85:97:db:af:2d:da:
db:c2:61:e1:56:6b:54:91:13:c8:b9:49:9a:11:15:
88:f4:6d:8d:a6:61:5e:19:72:61:88:d3:e2:17:1a:
5a:fc:1d:79:d5:5b:f1:ae:e4:b4:b5:4f:c4:fa:be:
23:d9:a2:7f:82:9b:4f:06:29:d8:ea:c7:67:70:a8:
0b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:27:81:74:70:92:5D:7E:20:3A:A2:2E:CC:11:BC:ED:67:4F:2F:A7
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/5b33ff6d-c3d3-4428-a1c4-0aa591470179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.224.192.0/19
Signature Algorithm: sha256WithRSAEncryption
b4:c6:bb:72:85:67:bd:bb:23:f2:80:c2:e0:ce:f9:6c:df:6e:
5d:f7:c1:5b:c3:2c:5f:1e:97:cc:3c:c6:ba:ec:51:b7:5a:71:
2c:30:31:ce:52:c4:51:db:8e:c1:94:36:ad:ef:c6:23:d9:41:
06:5e:16:d0:56:37:3e:16:34:2e:76:c2:c5:5b:d2:1c:4e:cf:
00:9c:d0:7c:b4:ca:3d:ac:7e:7e:9c:91:58:c9:8f:b2:61:f4:
6c:c2:77:e7:5c:57:10:de:cf:27:98:f2:4e:2f:74:3a:44:a4:
17:86:b7:4d:40:1a:25:b6:18:8b:ac:ca:e7:65:9f:73:8c:8d:
ab:fd:44:a8:b6:fe:58:16:fa:8d:d2:96:d3:a9:ec:31:53:f2:
28:be:a0:6f:1d:c5:af:9c:97:77:7f:69:4c:63:d6:a3:d5:3d:
53:da:d3:49:5b:71:ae:cb:49:58:ed:56:1a:ed:6a:5d:f5:88:
20:e0:9c:02:33:4f:74:85:0d:4d:a6:d7:b3:a5:91:f6:91:59:
c1:cf:42:85:18:49:4d:79:c2:b9:16:a9:fc:ad:f0:bc:c1:e9:
1c:0e:d3:e1:db:a7:48:6c:67:58:f0:2c:cf:40:6f:01:0d:04:
3d:b8:60:6e:91:fc:07:4b:4f:5a:81:f9:29:42:7b:af:aa:0d:
b1:90:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:09:47 2026 by rpki-client