
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa
File: 70571ce4-58f3-4cc6-b162-737a20af972d.roa (raw, json)
Hash identifier: GcZKjDOIi9CV8DDpEeIDEISLWqq2o7TC4qQwwJ3Fx5k=
Subject key identifier: 91:CA:C7:D0:A1:52:43:5D:21:28:AB:E9:05:9B:75:ED:8D:55:10:0C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 3AE8F3F6CFC7EF835A40E0A60DF0A41ADA1D61F1
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa
Signing time: Sat 18 Jul 2026 00:10:39 +0000
ROA not before: Sat 18 Jul 2026 00:10:39 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 70.251.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:e8:f3:f6:cf:c7:ef:83:5a:40:e0:a6:0d:f0:a4:1a:da:1d:61:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:10:39 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=9b893ca00749d569c563df5ef57f63b85e2894f3f66e51f97c725a9cb4013667, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:31:2c:32:5f:6e:31:c4:42:2f:72:c0:6a:19:
75:cf:eb:a0:b9:5a:70:c3:02:3b:39:c4:bb:09:ed:
8b:c7:f0:9d:6c:ba:ac:66:ca:ce:78:b6:dd:b8:90:
28:75:14:db:2b:03:8b:5b:87:d9:e7:3a:71:ae:91:
2b:74:4f:c3:ff:fc:11:aa:cb:b8:94:03:c9:63:b9:
8b:3c:aa:46:12:5d:ad:3e:2f:20:55:65:3d:74:38:
9b:cb:b1:bd:0e:64:ce:9b:40:c4:08:a3:63:8e:c5:
dc:c2:a4:71:be:86:71:3b:1c:25:2b:9b:58:20:3c:
ec:1f:9b:b2:18:14:7e:17:9a:57:75:5a:28:f5:28:
30:46:97:6d:e9:d6:e8:de:d9:85:59:bf:41:e8:2d:
ef:80:b7:56:ea:2e:2c:01:ee:51:ad:e5:74:e3:eb:
33:b3:11:2b:65:b3:e3:a0:ac:a8:85:e9:75:83:e3:
5e:17:5d:5c:c1:12:7f:20:70:f3:27:41:f4:7e:a3:
2c:8f:a2:a0:f0:96:7c:12:c7:97:a1:2a:a6:38:71:
04:ef:c7:71:28:37:53:9c:62:18:02:b7:b2:5a:b4:
18:91:da:51:25:36:bc:c3:1a:df:0e:a4:da:1e:bc:
43:93:b1:2e:1c:75:2f:ad:ab:6e:66:ef:27:51:45:
e2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CA:C7:D0:A1:52:43:5D:21:28:AB:E9:05:9B:75:ED:8D:55:10:0C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/70571ce4-58f3-4cc6-b162-737a20af972d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
70.251.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:1f:55:4f:e3:4c:53:ca:1d:9b:87:ea:a3:d8:2f:c6:79:09:
ec:c3:38:d4:c5:4d:8d:e2:21:6f:f1:71:a7:15:97:e0:55:3c:
c4:16:76:46:2f:43:ac:58:0d:e9:6a:63:ca:ee:94:46:54:54:
95:7b:27:9c:bf:2c:53:32:2e:7a:62:b7:5f:14:89:96:f9:4c:
6a:88:a5:de:62:c0:0a:99:8c:9e:d2:75:20:d6:f1:ca:32:8b:
9b:45:9d:ea:b4:a7:c4:08:66:5d:da:c3:00:18:7e:3e:20:c7:
67:2b:e8:bc:70:b2:cd:d7:f7:3b:49:4f:3b:e7:e5:a4:b0:3e:
60:e6:0d:6d:2b:76:28:f1:fb:6d:4b:2d:67:28:08:d8:2a:94:
33:83:f5:c8:d7:ae:a2:c1:42:52:3f:b9:ef:b8:2f:e1:a3:9d:
e1:29:ca:aa:52:35:51:c7:66:63:b0:cb:fa:e0:65:e0:25:1e:
3c:f2:0e:23:d6:e8:7b:93:58:b6:c6:e6:9e:af:dd:0e:0c:c3:
fc:4f:1b:3c:9f:3b:71:2f:4c:19:35:b6:72:63:01:5f:d5:7f:
07:30:7a:da:f3:2f:66:16:4e:67:2b:b9:75:0f:a6:3a:5c:03:
09:d7:c7:0c:06:6c:a1:99:fd:93:f0:60:a7:9e:0a:02:a3:f5:
82:d7:5c:74
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUOujz9s/H74NaQOCmDfCkGtodYfEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAxMDM5WhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0A5Yjg5M2NhMDA3NDlkNTY5YzU2M2RmNWVmNTdmNjNiODVl
Mjg5NGYzZjY2ZTUxZjk3YzcyNWE5Y2I0MDEzNjY3MS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCmMSwyX24xxEIvcsBqGXXP66C5WnDDAjs5xLsJ7YvH8J1s
uqxmys54tt24kCh1FNsrA4tbh9nnOnGukSt0T8P//BGqy7iUA8ljuYs8qkYSXa0+
LyBVZT10OJvLsb0OZM6bQMQIo2OOxdzCpHG+hnE7HCUrm1ggPOwfm7IYFH4Xmld1
Wij1KDBGl23p1uje2YVZv0HoLe+At1bqLiwB7lGt5XTj6zOzEStls+OgrKiF6XWD
414XXVzBEn8gcPMnQfR+oyyPoqDwlnwSx5ehKqY4cQTvx3EoN1OcYhgCt7JatBiR
2lElNrzDGt8OpNoevEOTsS4cdS+tq25m7ydRReKHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUkcrH0KFSQ10hKKvpBZt17Y1VEAwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyLzcwNTcxY2U0LTU4ZjMtNGNjNi1iMTYyLTczN2EyMGFmOTcyZC5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZG+0AwDQYJKoZIhvcNAQELBQADggEBACEfVU/jTFPKHZuH6qPYL8Z5CezD
ONTFTY3iIW/xcacVl+BVPMQWdkYvQ6xYDelqY8rulEZUVJV7J5y/LFMyLnpit18U
iZb5TGqIpd5iwAqZjJ7SdSDW8coyi5tFneq0p8QIZl3awwAYfj4gx2cr6Lxwss3X
9ztJTzvn5aSwPmDmDW0rdijx+21LLWcoCNgqlDOD9cjXrqLBQlI/ue+4L+GjneEp
yqpSNVHHZmOwy/rgZeAlHjzyDiPW6HuTWLbG5p6v3Q4Mw/xPGzyfO3EvTBk1tnJj
AV/VfwcwetrzL2YWTmcruXUPpjpcAwnXxwwGbKGZ/ZPwYKeeCgKj9YLXXHQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:25:34 2026 by rpki-client