
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11f030f7-8270-4083-befb-b911423f6a22.roa
File: 11f030f7-8270-4083-befb-b911423f6a22.roa (raw, json)
Hash identifier: N79Wp4XRniBow3tnoTqubfHjFzgrNs68HjOlhwy0lE4=
Subject key identifier: E6:29:28:C1:0F:68:2C:D9:66:7B:EA:BD:A8:7E:A1:40:AA:58:1B:28
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 3A4850CAABD8F75003F6174621EDC18845FCEDC0
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11f030f7-8270-4083-befb-b911423f6a22.roa
Signing time: Thu 15 Oct 2026 02:40:54 +0000
ROA not before: Thu 15 Oct 2026 02:40:54 +0000
ROA not after: Wed 13 Jan 2027 23:59:59 +0000
asID: 16509
IP address blocks: 52.79.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:48:50:ca:ab:d8:f7:50:03:f6:17:46:21:ed:c1:88:45:fc:ed:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Oct 15 02:40:54 2026 GMT
Not After : Jan 13 23:59:59 2027 GMT
Subject: serialNumber=66a9e00760056f52ac03a5164842685dfa7bf252cb187c3db8e78aaaffd44ca9, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e7:a2:b9:aa:77:6e:3f:0f:93:78:29:06:fe:
18:e4:43:37:ca:f8:2e:46:3a:22:1d:46:9c:2f:fc:
8b:54:bb:de:94:84:84:56:58:01:99:90:9c:bb:92:
bf:53:95:bf:b6:63:79:dd:28:63:22:20:f8:84:ed:
7f:51:34:5c:9c:a3:e3:90:15:24:73:01:4c:d1:bb:
be:eb:ca:68:8a:8e:5f:78:27:45:4c:ea:38:85:b9:
3e:e9:28:21:d9:e5:3f:25:7a:d8:ef:42:23:b1:95:
a2:7f:86:8a:1e:45:ea:2b:41:86:d5:65:ea:51:fd:
a7:5e:43:a6:38:50:1a:b1:cd:12:e6:97:55:c2:82:
ad:90:46:b7:34:80:c1:eb:82:8d:6a:f2:08:69:e2:
97:38:cf:fa:1a:70:ac:55:35:c5:bc:76:00:8a:54:
96:5f:8e:c4:f3:19:29:0b:01:fb:61:b3:08:9a:19:
29:7e:b3:4c:5f:6a:9e:f1:bd:ef:69:ba:9f:c2:4c:
45:e2:a4:0f:5a:08:13:cd:ed:73:99:1d:cb:0d:2d:
74:d9:b0:5e:7f:4f:d5:39:10:a2:32:64:8f:07:52:
e0:18:d5:6e:a2:b0:e0:80:48:e5:2e:f2:43:27:4a:
d8:cb:84:38:5d:38:53:7c:3b:6a:d1:9f:7c:bb:75:
fc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:29:28:C1:0F:68:2C:D9:66:7B:EA:BD:A8:7E:A1:40:AA:58:1B:28
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/11f030f7-8270-4083-befb-b911423f6a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.79.0.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:63:0e:66:b9:93:0b:52:dd:b7:ee:ad:f2:ad:88:c6:e7:86:
97:d3:a6:5f:ab:ea:fa:59:89:1f:e7:b9:3b:c4:dc:43:6c:bb:
d9:ea:24:a4:09:33:69:ee:ae:ef:e6:d7:ea:e9:fd:cb:58:ce:
5d:30:78:94:3d:77:1e:aa:f4:81:95:3a:28:a7:38:e9:31:66:
19:fa:28:2f:0e:fd:96:be:e9:e8:f6:25:df:fd:b7:bf:73:84:
a2:bb:21:69:1e:44:0e:56:1d:86:3a:ac:bf:cd:6b:a5:85:53:
21:d7:19:5c:a5:62:a0:1b:f5:d1:7b:29:7e:ad:2f:dc:aa:02:
f8:42:93:ec:fd:c8:07:a4:dd:07:72:b4:fc:9b:84:8d:6d:df:
34:90:e0:b2:c8:84:6f:99:9f:5a:0c:c1:f1:bf:8b:3e:48:0c:
3e:35:bd:54:c1:2e:8f:71:c8:bf:8c:56:2c:cc:46:2d:6b:e9:
35:f0:96:82:45:10:f5:6a:88:99:0e:9d:8f:1d:ee:5f:88:90:
c1:99:79:fd:d0:f3:70:c1:54:af:68:97:58:37:8a:fd:8c:19:
80:5a:0b:91:ca:6b:76:f0:7c:97:99:6c:95:49:e8:d2:f8:15:
b6:16:fd:94:ca:88:c9:00:fc:ac:af:ba:29:51:e5:f1:aa:74:
a8:11:35:e7
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOkhQyqvY91AD9hdGIe3BiEX87cAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz
MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjYxMDE1MDI0MDU0WhcNMjcwMTEzMjM1OTU5
WjB6MUkwRwYDVQQFE0A2NmE5ZTAwNzYwMDU2ZjUyYWMwM2E1MTY0ODQyNjg1ZGZh
N2JmMjUyY2IxODdjM2RiOGU3OGFhYWZmZDQ0Y2E5MS0wKwYDVQQDEyQ1ZjI3NjA0
NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQC956K5qnduPw+TeCkG/hjkQzfK+C5GOiIdRpwv/ItUu96U
hIRWWAGZkJy7kr9Tlb+2Y3ndKGMiIPiE7X9RNFyco+OQFSRzAUzRu77rymiKjl94
J0VM6jiFuT7pKCHZ5T8letjvQiOxlaJ/hooeReorQYbVZepR/adeQ6Y4UBqxzRLm
l1XCgq2QRrc0gMHrgo1q8ghp4pc4z/oacKxVNcW8dgCKVJZfjsTzGSkLAfthswia
GSl+s0xfap7xve9pup/CTEXipA9aCBPN7XOZHcsNLXTZsF5/T9U5EKIyZI8HUuAY
1W6isOCASOUu8kMnStjLhDhdOFN8O2rRn3y7dfxLAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQU5ikowQ9oLNlme+q9qH6hQKpYGygwHwYDVR0jBBgwFoAUJa3TQrAet6WO
rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x
MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk
OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4
MDkwNGU0MmQyLzExZjAzMGY3LTgyNzAtNDA4My1iZWZiLWI5MTE0MjNmNmEyMi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz
LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAU0TwAwDQYJKoZIhvcNAQELBQADggEBAKdjDma5kwtS3bfurfKtiMbnhpfT
pl+r6vpZiR/nuTvE3ENsu9nqJKQJM2nuru/m1+rp/ctYzl0weJQ9dx6q9IGVOiin
OOkxZhn6KC8O/Za+6ej2Jd/9t79zhKK7IWkeRA5WHYY6rL/Na6WFUyHXGVylYqAb
9dF7KX6tL9yqAvhCk+z9yAek3QdytPybhI1t3zSQ4LLIhG+Zn1oMwfG/iz5IDD41
vVTBLo9xyL+MVizMRi1r6TXwloJFEPVqiJkOnY8d7l+IkMGZef3Q83DBVK9ol1g3
iv2MGYBaC5HKa3bwfJeZbJVJ6NL4FbYW/ZTKiMkA/KyvuilR5fGqdKgRNec=
-----END CERTIFICATE-----
Generated at Sun Oct 18 17:52:14 2026 by rpki-client