
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/470f0ebc-7616-4541-a259-72a4b56f9e69.roa
File: 470f0ebc-7616-4541-a259-72a4b56f9e69.roa (raw, json)
Hash identifier: KUC7ydvoJQQ1vj5UOwdc2WKTr4mqoqX0oPsJjA98TJg=
Subject key identifier: 75:22:39:82:05:ED:AD:D9:26:15:87:8E:73:88:DF:95:64:B9:FA:C8
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 45B2C91515A88A73AB4A200CB1846D515913225C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/470f0ebc-7616-4541-a259-72a4b56f9e69.roa
Signing time: Fri 31 Jul 2026 00:41:23 +0000
ROA not before: Fri 31 Jul 2026 00:41:23 +0000
ROA not after: Thu 29 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 04 Aug 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b2:c9:15:15:a8:8a:73:ab:4a:20:0c:b1:84:6d:51:59:13:22:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 31 00:41:23 2026 GMT
Not After : Oct 29 23:59:59 2026 GMT
Subject: serialNumber=6c8dafe6feb793c1797c2bb4f20f20dc0be0fed65a1be9536e2b83351a3e0543, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:98:f6:c2:71:9d:76:42:e7:55:30:ef:9d:b6:
fb:cd:7c:df:9b:ef:ad:b3:53:94:e9:fb:c0:5a:1e:
7a:9b:85:96:5e:7f:7b:46:bd:69:79:e0:3b:80:e7:
8b:ce:92:d4:04:9b:5c:86:03:43:69:bd:11:b7:0e:
c5:76:e9:fb:c5:62:d7:29:42:17:ec:f7:dc:5f:d1:
8a:2d:16:48:4b:ee:98:3c:07:31:80:54:69:0c:0f:
34:a4:20:66:2c:ab:47:04:bc:a6:15:a4:40:f1:76:
a6:1a:54:88:a0:27:8a:6b:49:a7:4c:30:57:22:f7:
1d:be:9e:8c:da:21:2e:ee:6e:5f:44:06:39:57:87:
a6:d8:d7:3d:8f:73:ca:36:ce:d7:b7:dc:0d:bb:32:
ed:bb:41:8c:50:57:c1:1b:2a:ee:ec:3b:c9:c8:22:
71:94:e0:f4:87:bd:fe:e3:ea:b0:f0:f9:42:68:20:
51:b7:20:b3:90:a8:e5:16:80:8c:3c:d8:cc:f8:6f:
a4:a2:03:c0:85:3d:54:96:7a:27:d4:77:b8:4c:fb:
ef:40:b0:0a:3f:85:5b:04:00:e8:78:ca:18:4c:d3:
5c:19:8a:55:f2:7f:5f:06:2c:cc:52:60:62:95:c8:
c3:6d:d1:9e:c2:53:d9:3b:e1:d9:8d:de:98:ac:a0:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:22:39:82:05:ED:AD:D9:26:15:87:8E:73:88:DF:95:64:B9:FA:C8
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/470f0ebc-7616-4541-a259-72a4b56f9e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.6.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:13:ab:1b:91:88:f9:a0:a0:e4:e2:82:46:d4:fc:2c:3e:cb:
d9:ef:5b:b5:58:6d:0c:fd:ff:dc:ee:7e:dc:25:24:74:88:44:
c8:54:fa:aa:4b:3b:05:a5:2a:09:da:93:b3:78:08:dd:3a:7c:
82:84:4e:c0:08:33:46:d6:0b:d3:4c:61:a6:cb:9e:4f:f9:4a:
46:ee:0f:9d:e0:96:74:91:8f:f4:a6:ae:c5:f7:b5:a2:b6:4c:
86:ee:ac:95:50:59:94:fe:19:13:82:a3:47:b8:2e:d0:bf:0f:
01:20:a4:ae:df:b9:1e:af:f4:53:a1:dd:38:a4:20:34:fa:1e:
20:6c:97:f4:45:e3:f9:ac:33:db:a5:f0:1e:2e:83:fa:39:d1:
e5:ab:8d:78:af:0e:26:2c:63:27:12:53:b8:f1:e7:98:10:d7:
b6:72:d4:65:3b:6d:16:8d:d6:ee:4e:34:fd:b4:2c:39:f2:5f:
c0:ac:60:f8:45:eb:07:bb:81:ee:74:02:32:34:ab:a1:21:f6:
5c:2e:fa:55:a2:51:16:cf:40:b8:d9:80:e4:7a:7c:5d:5f:48:
ba:f3:ad:bc:c6:91:2b:26:91:b3:1e:6d:f5:a2:40:76:8c:77:
20:f5:83:52:90:27:b1:bb:6a:fc:51:fe:db:0f:7a:62:1f:c9:
dc:33:45:ba
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIURbLJFRWoinOrSiAMsYRtUVkTIlwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzMxMDA0MTIzWhcNMjYxMDI5MjM1OTU5
WjB6MUkwRwYDVQQFE0A2YzhkYWZlNmZlYjc5M2MxNzk3YzJiYjRmMjBmMjBkYzBi
ZTBmZWQ2NWExYmU5NTM2ZTJiODMzNTFhM2UwNTQzMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmmPbCcZ12QudVMO+dtvvNfN+b762zU5Tp+8BaHnqbhZZe
f3tGvWl54DuA54vOktQEm1yGA0NpvRG3DsV26fvFYtcpQhfs99xf0YotFkhL7pg8
BzGAVGkMDzSkIGYsq0cEvKYVpEDxdqYaVIigJ4prSadMMFci9x2+nozaIS7ubl9E
BjlXh6bY1z2Pc8o2zte33A27Mu27QYxQV8EbKu7sO8nIInGU4PSHvf7j6rDw+UJo
IFG3ILOQqOUWgIw82Mz4b6SiA8CFPVSWeifUd7hM++9AsAo/hVsEAOh4yhhM01wZ
ilXyf18GLMxSYGKVyMNt0Z7CU9k74dmN3pisoIuZAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUdSI5ggXtrdkmFYeOc4jflWS5+sgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzQ3MGYwZWJjLTc2MTYtNDU0MS1hMjU5LTcyYTRiNTZmOWU2OS5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABHmAYwDQYJKoZIhvcNAQELBQADggEBAMETqxuRiPmgoOTigkbU/Cw+y9nv
W7VYbQz9/9zuftwlJHSIRMhU+qpLOwWlKgnak7N4CN06fIKETsAIM0bWC9NMYabL
nk/5SkbuD53glnSRj/SmrsX3taK2TIburJVQWZT+GROCo0e4LtC/DwEgpK7fuR6v
9FOh3TikIDT6HiBsl/RF4/msM9ul8B4ug/o50eWrjXivDiYsYycSU7jx55gQ17Zy
1GU7bRaN1u5ONP20LDnyX8CsYPhF6we7ge50AjI0q6Eh9lwu+lWiURbPQLjZgOR6
fF1fSLrzrbzGkSsmkbMebfWiQHaMdyD1g1KQJ7G7avxR/tsPemIfydwzRbo=
-----END CERTIFICATE-----
Generated at Mon Aug 3 05:43:52 2026 by rpki-client