
$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa
File: 7c0db66f-b1b7-41ba-b26b-712811ca2047.roa (raw, json)
Hash identifier: zVBHzVdO6ulDO/rXQCAVeii7B7QMLcSGhUKCJZDKJf8=
Subject key identifier: 9A:26:25:0B:03:B9:3B:68:47:52:77:CB:57:9E:63:77:B0:C9:73:7B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 59F9606F77219E0B864FE61AB0D0367341E8BEA1
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa
Signing time: Fri 07 Aug 2026 02:20:12 +0000
ROA not before: Fri 07 Aug 2026 02:20:12 +0000
ROA not after: Thu 05 Nov 2026 23:59:59 +0000
asID: 16509
IP address blocks: 52.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 04 Sep 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:f9:60:6f:77:21:9e:0b:86:4f:e6:1a:b0:d0:36:73:41:e8:be:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Aug 7 02:20:12 2026 GMT
Not After : Nov 5 23:59:59 2026 GMT
Subject: serialNumber=c91d35795edd9a92d928a29d0f126032070d9ff40794060a284136b9942777e2, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:3c:05:cf:b9:83:22:a6:8a:6c:3b:77:66:bb:
39:fe:c1:a7:24:93:1f:5e:be:55:da:87:3e:20:96:
d5:d9:4e:93:31:f7:0d:26:b7:01:38:82:92:d1:db:
aa:de:4c:c7:09:54:6f:01:11:46:cb:b9:88:e2:6d:
ba:61:f0:64:79:d8:3e:5e:6e:3a:6c:1f:67:ab:77:
39:03:a8:7d:f6:a7:cd:af:b7:de:44:2c:d3:ac:14:
54:1f:d0:42:1d:ec:aa:bb:62:03:ef:28:4d:f0:b6:
ab:b9:12:00:b8:85:6f:68:c1:37:8a:ad:f9:05:0e:
86:e4:ce:df:5e:c1:13:2d:94:0f:c0:00:cf:f9:6c:
eb:3e:6d:90:55:95:ff:e4:ab:18:44:83:4c:6a:00:
63:7a:8e:47:7a:ff:f8:51:88:b9:6c:64:b9:5a:3c:
11:98:6b:33:79:84:0c:31:dd:46:b9:40:a0:b9:d9:
dd:8d:07:eb:34:b3:12:d8:98:9f:17:6b:c1:14:7d:
34:2a:50:40:a8:8b:64:1c:fe:ca:ec:53:e7:c5:19:
b1:85:20:8a:ad:4d:5e:eb:4c:2c:f6:f1:86:e2:85:
7b:ca:b3:a7:ee:7a:21:aa:d7:97:91:a9:fa:ab:37:
9b:44:08:88:04:33:17:41:8c:82:a9:e5:7c:97:84:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:26:25:0B:03:B9:3B:68:47:52:77:CB:57:9E:63:77:B0:C9:73:7B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/7c0db66f-b1b7-41ba-b26b-712811ca2047.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
52.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:62:b3:03:35:a1:5b:02:cc:fe:56:a6:36:8a:6c:c8:6a:82:
a8:77:2a:60:4a:89:a5:b7:5e:84:03:5a:8e:9d:29:cb:e2:57:
e7:5d:4c:c8:6d:9b:99:26:03:d5:44:4e:05:e5:31:54:e0:3b:
a7:be:ce:b8:f8:68:e3:42:78:12:34:e7:ea:7b:5c:53:3b:1c:
4e:23:45:5a:fa:f8:8b:93:d6:30:52:11:bc:32:40:e2:61:91:
be:18:7a:e7:59:c3:00:91:b2:f7:68:ca:ff:e4:47:d9:dd:8e:
f5:22:b2:e4:9c:67:b2:3f:20:aa:76:4b:3a:04:85:49:3e:9b:
da:1f:c4:0e:51:3d:24:fe:60:bc:d4:15:32:32:e1:93:0c:a2:
3d:86:8d:bb:db:fd:f2:62:b8:d2:d9:1a:1b:e8:53:8c:74:4d:
dc:14:18:cc:63:8f:0e:77:6a:e2:c0:ca:a8:77:82:f2:f7:4d:
15:10:0a:b7:c0:f4:22:aa:17:ee:b9:9f:65:71:ac:f9:12:6b:
f7:c6:6d:57:b4:9b:c7:46:49:05:72:65:6a:c1:5b:5b:44:de:
6e:b5:bc:5e:35:e6:96:73:c8:6e:2c:04:10:71:80:e9:8f:8f:
f1:82:ae:36:77:4d:b9:0a:f9:6b:57:25:1c:7b:83:05:06:cb:
60:35:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 21:04:50 2026 by rpki-client