
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11f030f7-8270-4083-befb-b911423f6a22.roa
File: 11f030f7-8270-4083-befb-b911423f6a22.roa (raw, json)
Hash identifier: KgT67QPLu0Nx/I1GOefyXCpj6rtcnnqpzs47/E7kFbg=
Subject key identifier: C3:44:D7:7B:09:10:DA:03:E4:FE:C6:AB:6E:C9:8F:A3:E4:ED:1C:06
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 4C68C5FFEB030B027ABE29E1AB3B13571CBCCB31
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11f030f7-8270-4083-befb-b911423f6a22.roa
Signing time: Mon 27 Jul 2026 02:41:18 +0000
ROA not before: Mon 27 Jul 2026 02:41:18 +0000
ROA not after: Sun 25 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.79.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:68:c5:ff:eb:03:0b:02:7a:be:29:e1:ab:3b:13:57:1c:bc:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Jul 27 02:41:18 2026 GMT
Not After : Oct 25 23:59:59 2026 GMT
Subject: serialNumber=58ed51203cc66838f9792deeb730e27d79b9307edfac626e6e7f45c1975674e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:67:65:8b:44:a7:ce:f1:0f:dc:3c:47:db:
9b:26:fc:63:07:5a:85:9d:5b:d2:42:ba:62:ac:73:
b6:e1:c2:a0:b3:f4:84:15:fa:90:6d:0f:d0:7c:48:
b3:ca:0d:f1:3c:af:83:ca:79:8e:66:8b:af:b3:6c:
92:07:02:ef:72:9f:58:59:f6:4e:90:65:86:76:bc:
18:2f:38:48:1a:aa:f2:de:e9:66:32:4c:7e:2d:88:
be:45:5c:cd:04:7c:3a:e4:9c:d5:e5:f5:c2:10:33:
45:94:e3:e6:72:f5:89:7f:97:a8:c8:73:ff:12:71:
57:99:93:16:46:58:2d:66:3b:48:47:32:d8:c8:ab:
ed:d9:20:44:9e:4b:6a:b3:ba:09:01:f6:7e:ff:4e:
07:54:00:f2:b0:dc:da:32:2e:33:d2:a5:67:32:c5:
02:3b:d1:de:4d:20:d7:3c:6c:0d:80:02:c9:58:1e:
67:71:5c:38:01:ba:39:cc:3b:4a:03:47:74:7c:01:
a3:8a:6b:2d:ae:0a:10:39:48:44:1f:8a:cc:43:de:
3d:c7:de:ab:a3:a5:6d:0e:cf:e1:ba:e5:8e:bb:cc:
b1:f6:a1:d7:17:41:ce:b2:e8:99:c0:31:8a:61:42:
6f:00:37:3e:c3:81:d9:d3:87:ae:c1:61:3c:8d:30:
d6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:44:D7:7B:09:10:DA:03:E4:FE:C6:AB:6E:C9:8F:A3:E4:ED:1C:06
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11f030f7-8270-4083-befb-b911423f6a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.79.0.0/19
Signature Algorithm: sha256WithRSAEncryption
00:17:bb:a1:dc:e1:29:30:c5:2e:9f:0b:19:14:5b:3c:79:19:
85:2b:13:db:00:76:4c:f4:89:9d:7f:0d:fc:d8:2f:4a:d1:a7:
a0:3f:48:dc:7f:09:e3:f0:5a:b0:8b:93:53:89:55:a2:96:40:
24:e3:f7:8c:ce:61:0e:d9:d7:95:88:b4:ed:9d:a0:2a:4d:e7:
f4:6a:b4:3f:53:d1:36:31:54:ac:ea:0c:44:8a:79:12:fd:84:
6a:7c:61:35:52:e4:bb:d3:45:9c:6d:02:8d:62:74:b8:1b:76:
d8:18:a0:56:3a:64:3e:bb:8f:69:76:03:1a:68:5f:8c:5a:36:
e2:e1:44:4e:a6:8d:53:66:95:bd:09:87:36:22:e9:f4:06:eb:
01:b6:c5:df:de:ca:1e:76:2b:23:04:d7:b8:b8:df:d2:3f:7c:
2e:6f:9d:dc:5a:e8:b1:16:6d:00:b0:04:7c:88:c9:d4:aa:dd:
89:79:6e:6e:9a:a5:df:84:b9:92:39:e0:3a:36:26:98:b3:a0:
ec:a0:30:25:d3:59:1b:6b:f8:ce:63:1a:0d:98:28:f3:62:20:
7e:17:88:8b:84:f6:a4:99:e5:31:a0:ce:17:84:c4:cd:77:0e:
31:97:ba:e5:8b:1f:a8:86:fd:c7:3f:0c:dd:bb:a8:eb:b6:1e:
de:8f:b3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:19:59 2026 by rpki-client