
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
File: 33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa (raw, json)
Hash identifier: b2x56gLx1R6gTwhF8ndkeo4s5jn5jAJrUqsdytFnqDs=
Subject key identifier: 72:1F:33:28:1E:43:24:E6:33:D3:A0:AF:FA:54:A3:3A:E3:8E:64:40
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 7FAC318702E0BC7FA260A1BCDCAC545E590769B5
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
Signing time: Fri 07 Aug 2026 02:40:54 +0000
ROA not before: Fri 07 Aug 2026 02:40:54 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 14618
IP address blocks: 52.94.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:ac:31:87:02:e0:bc:7f:a2:60:a1:bc:dc:ac:54:5e:59:07:69:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:40:54 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=fe27d5dc89324b7952807ab452e80b1db21f6c8ef1b1bf50f16c50a204ed6514, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:57:ee:4f:d7:38:f0:5d:08:6f:62:83:52:79:
a6:40:0d:e5:90:12:6d:f2:a8:5c:34:62:9e:a9:72:
c9:c0:ae:a2:bc:f0:4a:9f:c6:4e:03:e3:07:78:92:
51:91:7f:23:0d:5e:3f:7a:3d:0f:67:63:5d:dd:8e:
53:60:31:3b:7b:c4:70:d2:68:8b:25:27:6e:b1:e0:
e5:bb:b2:73:27:22:95:74:b6:34:37:42:fb:b2:d1:
26:aa:00:e9:81:00:e9:d9:91:02:71:23:65:17:68:
12:17:c3:56:1a:33:1d:d7:46:6b:14:3d:e5:2e:6d:
02:93:ca:aa:3e:62:5d:51:ce:09:bc:be:98:04:38:
8b:91:c9:66:b5:a0:43:f4:3b:4e:f0:f2:cc:84:2c:
a8:1e:31:aa:56:e8:ca:17:13:9d:a7:15:2c:b7:97:
0d:a2:78:ef:3f:30:3a:ba:0c:05:f0:28:ec:da:cb:
e2:79:60:3c:9a:43:56:29:f6:fa:21:72:8c:07:7d:
eb:cc:e1:89:c2:fc:53:07:2a:59:2f:b9:a9:a7:b4:
35:ce:3b:c9:81:01:0a:ac:00:f7:49:1f:e5:86:35:
f9:3e:40:e2:c3:43:44:bb:5a:a0:d0:fa:4d:8c:23:
08:15:e6:0b:65:35:b3:4f:ab:43:79:35:00:71:3f:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:1F:33:28:1E:43:24:E6:33:D3:A0:AF:FA:54:A3:3A:E3:8E:64:40
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/33641b97-a7b8-4180-bd8a-bbdc733b0ec8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.0.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:ed:c1:ce:51:b6:57:00:6b:73:a8:35:fd:9e:12:7d:96:5d:
7a:e8:42:23:75:da:db:72:0b:7f:49:21:c1:84:d6:05:1b:cc:
d7:ae:c0:aa:d8:7b:c9:91:57:fd:6e:3e:c7:32:a4:52:3a:f9:
33:46:5a:49:40:ca:d3:0f:cb:bc:65:66:35:7d:cb:1b:a0:b5:
54:a9:78:6f:01:e4:c5:6b:5b:10:51:bb:c2:94:90:63:ff:b0:
44:b8:6b:78:31:de:03:72:6b:d6:87:51:74:6d:97:23:e2:fa:
46:a1:a6:1e:a5:45:b8:35:62:1b:ca:01:81:31:0b:ce:31:21:
ce:db:9d:e8:d6:69:39:a5:4c:1e:d0:1b:52:52:98:cf:7b:03:
07:0b:c9:1a:ee:5d:86:e9:ce:91:91:48:2e:3c:7d:71:a6:d4:
6f:e2:67:95:11:db:90:ef:92:d9:43:ca:bd:00:fd:28:ca:7d:
0a:2a:fa:23:1c:3e:aa:3a:22:a0:19:7d:a3:10:14:38:8a:c1:
83:ac:6c:f7:67:70:e3:31:92:32:28:22:9a:0d:b9:70:3f:0c:
0a:3d:24:30:0a:c8:87:2a:88:e8:4a:47:a1:20:1b:8c:a7:0d:
39:38:25:04:f4:bd:09:a0:34:d9:76:45:0a:ff:cd:b8:3b:4d:
16:ea:9b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 07:00:30 2026 by rpki-client