
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33db650c-726a-469c-996f-9e452d8889fb.roa
File: 33db650c-726a-469c-996f-9e452d8889fb.roa (raw, json)
Hash identifier: dBRmiQkdwhkl98J79+b1s+5PE0mUE626YtNl8Sqbnn0=
Subject key identifier: A3:09:AB:AC:A0:BF:F9:52:FC:E6:B4:FD:B3:8A:FE:64:00:A3:8D:D2
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3A2435696701B2FAEAABFE67AB6C41385E942589
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33db650c-726a-469c-996f-9e452d8889fb.roa
Signing time: Sat 16 May 2026 02:00:45 +0000
ROA not before: Sat 16 May 2026 02:00:45 +0000
ROA not after: Fri 14 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 56.12.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:24:35:69:67:01:b2:fa:ea:ab:fe:67:ab:6c:41:38:5e:94:25:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 16 02:00:45 2026 GMT
Not After : Aug 14 23:59:59 2026 GMT
Subject: serialNumber=c7b0286596495998a85d03a21ddf56b33024a54d531908d0cf010353bcae0c94, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8c:66:36:bb:fd:86:9d:80:ff:02:fd:5f:1b:
a3:48:47:dd:59:b8:80:33:79:cd:d0:23:46:2e:20:
0e:6d:fe:72:e5:83:91:3f:81:8c:20:c8:78:55:f1:
a5:0a:26:d1:91:b2:b9:8c:14:85:79:e5:6f:c5:04:
8c:56:0e:ce:7b:44:16:a5:2b:ba:ba:8b:6f:e7:74:
8d:bc:9c:2b:d2:ca:e0:54:9a:85:ec:95:fd:26:ee:
56:a9:c6:5f:d5:e5:a1:97:66:c3:98:ec:ee:6c:2b:
54:80:b6:29:20:32:03:39:da:2f:c7:2d:1c:80:0c:
c7:71:91:c5:9c:d9:ee:15:d3:23:ef:0d:2f:5d:e9:
94:85:0d:c7:83:b5:75:92:47:f4:bf:3e:55:e9:48:
93:79:4a:54:31:24:78:06:f1:35:f2:49:00:f0:f7:
45:5f:e4:6a:51:49:de:8c:92:ad:c9:9a:70:3e:97:
89:3d:88:c1:af:98:e6:93:7e:9a:7e:1b:34:f3:17:
8e:7b:53:a3:8e:bf:58:ec:73:7d:07:c5:b0:7e:78:
54:cc:30:58:22:7d:c9:63:e0:b3:2c:dd:a7:4b:b6:
ef:b2:5e:cf:90:57:5d:47:77:f5:cc:36:92:49:64:
e8:68:3a:ba:a8:d8:76:60:39:f2:11:9f:b3:7f:b6:
d4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:AB:AC:A0:BF:F9:52:FC:E6:B4:FD:B3:8A:FE:64:00:A3:8D:D2
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/33db650c-726a-469c-996f-9e452d8889fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
56.12.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:df:6c:d7:9b:af:d5:37:69:09:3e:6c:11:9b:16:a6:7e:01:
55:29:a5:3e:39:76:47:67:ba:0c:1b:22:b5:b4:a8:a2:45:b3:
04:74:21:81:e2:aa:0e:04:a5:4c:df:9e:27:ae:ad:53:28:be:
db:33:14:80:bb:37:fb:14:cf:3e:c4:c0:ff:e2:d5:76:8d:01:
03:4d:1d:c5:9b:74:3a:f8:83:d9:27:ee:29:b3:ae:96:7e:73:
34:a8:0d:53:59:d4:e2:cc:4b:ed:89:ff:c2:0f:9b:36:a8:f4:
18:be:1b:ce:56:6c:67:8f:ba:61:34:3c:ac:bb:52:7d:0f:15:
ab:78:29:79:bd:83:5c:50:b7:5a:aa:21:ad:99:cb:37:27:ba:
f6:68:6c:26:e0:a5:18:bf:28:3e:6c:31:01:a9:24:7d:2c:e4:
3c:3c:a5:aa:22:0e:83:9e:e7:28:4e:16:19:b0:dc:6c:eb:d4:
01:fb:cf:8b:d4:0c:e5:a0:78:e9:1a:53:c5:ab:db:67:04:03:
59:c2:01:e7:b1:9e:95:47:ba:ad:74:f3:e3:ec:a8:f7:14:af:
e4:06:fb:5a:72:b2:c0:28:a6:14:4c:c0:43:4f:3e:79:71:e1:
c5:28:a7:65:a1:1c:9b:ce:31:3c:30:8f:e4:1b:20:79:2a:88:
46:53:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:06:11 2026 by rpki-client