
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6756ff03-1300-491a-b204-016d1da5ca59.roa
File: 6756ff03-1300-491a-b204-016d1da5ca59.roa (raw, json)
Hash identifier: TQGlKqHZN71TqTzUe5EJh88Wxt6++soC7jVYxvToRGs=
Subject key identifier: 94:F8:D6:D6:36:5B:94:22:C5:EB:B1:85:06:2A:9E:4C:6B:21:55:34
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 0ED1F5FE126C20C077DE84EF03D2F1BCD6D2FB73
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6756ff03-1300-491a-b204-016d1da5ca59.roa
Signing time: Fri 07 Aug 2026 01:21:01 +0000
ROA not before: Fri 07 Aug 2026 01:21:01 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 7224
IP address blocks: 3.33.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d1:f5:fe:12:6c:20:c0:77:de:84:ef:03:d2:f1:bc:d6:d2:fb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 01:21:01 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=11e265d883cf2b782154378db8641bbe80e8b39c082f3bc791b29a6d2bb495b0, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:53:a6:b5:46:2d:a6:4d:d1:a9:75:c0:19:5f:
7f:58:18:36:f5:7f:f5:f2:c9:60:22:de:9e:b7:7c:
f4:45:8b:5e:7b:33:41:68:f8:bc:b7:d3:f7:58:82:
a4:41:3c:a9:5b:4d:2e:61:cc:a4:4c:f0:67:fe:0e:
97:b9:03:fa:5f:b8:a3:ea:b0:d1:41:17:70:41:29:
7c:74:27:66:dd:fc:47:69:38:18:c6:35:07:ba:c8:
9d:d2:af:ed:74:5e:b0:d8:55:ac:97:d0:b9:6b:70:
16:10:f9:72:8d:f0:7f:8e:54:d9:77:71:64:f9:d0:
02:52:b4:64:9b:8e:d8:2b:ca:bc:48:5a:e2:44:b8:
3a:d1:db:fb:57:4f:33:6e:b4:71:35:05:dd:f2:04:
4c:9c:b2:bf:39:ab:9d:07:9c:91:10:5a:f3:8a:99:
8e:a0:2d:09:64:e4:e6:0b:a8:bd:57:99:02:94:c1:
5c:69:3e:c6:d6:e8:f8:3b:a8:3a:f2:7b:27:0a:fc:
85:b1:65:c3:e3:ca:a1:b4:83:86:39:3d:0b:c8:97:
9c:7a:d4:a2:98:e5:06:56:06:6e:1e:af:1b:c7:32:
38:21:2c:e9:c7:ab:93:71:96:ba:88:78:4c:df:86:
3e:dc:32:15:fb:54:00:44:17:af:b0:e4:f2:ec:6f:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F8:D6:D6:36:5B:94:22:C5:EB:B1:85:06:2A:9E:4C:6B:21:55:34
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/6756ff03-1300-491a-b204-016d1da5ca59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
3.33.48.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:d1:1e:0d:e5:10:26:7e:a0:d3:52:c2:0a:2f:e4:bf:f7:40:
18:12:5b:c3:01:36:9c:a7:e0:6a:6c:e0:e1:8f:67:3a:a9:f4:
8f:60:ee:f0:88:6b:e5:8b:d2:48:a6:ec:fe:f6:7a:81:ce:f4:
e1:66:ce:be:7c:5b:17:2b:84:83:7e:75:aa:d2:a5:d9:99:35:
ac:70:92:87:6b:92:fd:8a:5c:3f:2a:17:78:f9:84:c3:6d:a4:
0b:6e:1a:d4:0e:bb:d0:26:f9:ae:66:6e:cd:72:a9:95:ed:5a:
9a:d9:29:b5:8f:1d:a7:5f:a8:1b:82:46:02:d5:ef:a9:b7:04:
dd:66:79:69:72:ec:da:5f:be:85:bc:0f:dd:4b:77:51:15:2f:
7d:0f:e7:e4:28:b2:7e:84:33:c4:14:be:72:80:1e:b2:7e:96:
8b:a9:5c:34:e7:2c:9a:38:53:8d:d5:de:05:e7:90:03:77:ab:
76:53:fd:d1:33:b5:63:f0:25:f0:e8:fd:54:34:06:e8:12:d3:
1d:28:1b:f3:89:e7:8a:eb:85:e0:3c:e6:03:f7:8f:73:1f:cf:
0d:1a:60:b8:1e:c6:b1:f5:df:13:8e:8e:9b:17:dc:bf:d0:6a:
e4:b9:4a:51:8e:12:45:53:45:b5:bb:d2:fd:85:11:15:a6:7a:
67:06:4d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:41:28 2026 by rpki-client