
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa
File: ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa (raw, json)
Hash identifier: 0OLSFb9PoqIfMwc0nvjg+2TIHnMXWVkzTKfdcAmqkPs=
Subject key identifier: 6E:2A:F3:3D:ED:BE:72:2E:F5:68:5D:CD:4F:BC:2B:33:A2:94:9A:19
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 2C6C68292BAFF0B33F4F0B1D3314DCCEB7DD2CB5
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa
Signing time: Tue 12 May 2026 00:30:12 +0000
ROA not before: Tue 12 May 2026 00:30:12 +0000
ROA not after: Mon 10 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 71.152.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:6c:68:29:2b:af:f0:b3:3f:4f:0b:1d:33:14:dc:ce:b7:dd:2c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 12 00:30:12 2026 GMT
Not After : Aug 10 23:59:59 2026 GMT
Subject: serialNumber=f9067a2eb5d15db9bb743c2f94490cf9388a420adb36a295e1bf7d5c2b0fcc6f, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ff:a0:97:c7:ac:61:6e:db:ec:01:d0:fb:c9:
04:4e:4c:63:ef:86:88:2d:f8:7d:a1:21:29:9f:b0:
95:27:2b:0d:68:aa:52:57:cb:7c:86:4f:05:f6:28:
45:da:00:95:87:cf:53:2c:24:f4:77:e5:e2:c4:99:
ab:83:66:a8:a0:f6:c2:7e:90:b4:e7:c2:35:21:3a:
dd:69:b2:68:72:20:66:52:bd:73:71:5b:43:7e:69:
ad:4f:2e:a3:80:58:20:7d:e2:4c:14:2b:6b:06:8a:
04:cd:51:d3:fe:5a:63:c6:d0:fa:7d:cc:29:2f:69:
10:0a:ef:9d:b2:42:3e:8d:73:90:0d:44:5b:29:f8:
be:d2:c2:bc:35:6d:34:1a:8f:7f:73:d9:35:e3:e9:
b9:8b:25:3d:0d:dd:90:16:c3:44:15:39:e6:c3:14:
35:ad:cd:e0:c5:af:5f:12:5a:00:6f:0b:9e:fd:d2:
06:fb:12:2a:9d:6b:1c:3d:c4:f5:65:4e:d1:99:96:
c8:12:52:e7:2b:67:c4:4d:fd:42:0a:84:60:41:5e:
24:4e:65:b1:c8:96:99:2e:72:a7:f0:29:e7:53:cd:
0c:8a:70:e0:ff:89:d0:28:0b:6d:90:79:ae:81:f8:
9c:29:df:c5:37:1b:31:b4:af:c2:86:e7:74:16:b1:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2A:F3:3D:ED:BE:72:2E:F5:68:5D:CD:4F:BC:2B:33:A2:94:9A:19
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ad9fb4ea-22d5-4a32-99f8-ad10c34451e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
71.152.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:21:d6:0d:1c:6a:e1:5a:0f:bf:fc:61:c6:09:93:e5:4c:0a:
34:3c:b6:0d:b5:f5:9c:53:4f:22:c6:9d:6c:9e:14:a0:08:87:
bc:bf:c0:80:53:5b:dc:f1:ab:38:d2:52:db:64:e2:2d:25:c8:
58:5e:3b:5f:3b:96:5f:19:e3:d3:4e:c0:af:82:2e:f6:fa:e6:
b5:72:12:b8:ee:1c:28:e8:af:1a:2d:2e:78:7f:c8:87:6e:f3:
c4:66:bf:13:78:2f:2f:b1:22:78:82:79:1e:98:2d:1c:7d:c8:
04:1e:35:7e:da:e6:4d:b6:50:95:dc:04:87:28:94:21:39:cf:
02:f3:1d:d2:2b:a7:e6:96:b1:f4:7f:dd:78:85:7e:5e:34:1a:
e8:b7:fa:25:ea:7b:63:2c:7a:e3:6b:2c:13:20:53:76:ce:85:
65:60:ae:21:76:d1:bf:1e:c2:0c:b1:ff:ac:9c:47:06:4c:99:
6a:35:8a:63:76:a3:f2:5f:91:bf:48:01:c2:62:06:0d:85:90:
2c:3e:f0:20:20:79:6f:67:31:85:64:ca:20:c8:98:5f:8e:57:
20:a1:e3:45:ff:0a:32:da:a8:66:63:60:e2:51:34:05:9b:f2:
5a:11:56:3b:e4:07:3f:c5:23:b7:c0:d0:c2:ee:1f:55:c6:e0:
da:1b:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:36 2026 by rpki-client