
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa
File: 258e6f29-ec78-4849-a049-84a7edb4a611.roa (raw, json)
Hash identifier: nkz6JukgpQAf/fRdtL6dk3U5A212M3LASHCGHsPKNuo=
Subject key identifier: F1:FB:7E:FF:57:DF:29:CB:40:A5:ED:85:68:48:68:BC:7B:2B:67:35
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 17423C9911A86BE1CA2DD2591183F2F079DD2A43
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa
Signing time: Thu 26 Feb 2026 00:00:09 +0000
ROA not before: Thu 26 Feb 2026 00:00:09 +0000
ROA not after: Wed 27 May 2026 23:59:59 +0000
asID: 16509
IP address blocks: 74.190.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:42:3c:99:11:a8:6b:e1:ca:2d:d2:59:11:83:f2:f0:79:dd:2a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Feb 26 00:00:09 2026 GMT
Not After : May 27 23:59:59 2026 GMT
Subject: serialNumber=f0aa3712a3ae3161dc8a329e1a6da6594b9f96083b9fc501f4edb6d42d742d75, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:7d:71:3f:4f:2b:b6:57:33:de:4e:a3:d0:
f8:4d:d1:d0:f0:86:e2:07:a6:4a:47:a7:67:70:be:
e0:89:aa:fa:81:a5:99:b8:0b:20:1a:a7:57:7b:ff:
e6:13:c7:0c:ae:8a:4b:0c:ac:8a:51:fc:1b:00:2b:
87:c4:e7:bb:5c:5a:e4:67:47:08:c5:27:bd:8c:95:
8a:20:36:5d:03:73:b0:20:f0:e7:98:ff:ee:97:fc:
8e:78:e1:31:3b:55:5d:fb:15:73:a2:eb:c2:b7:f7:
9a:cf:78:ae:8d:88:56:02:15:ff:7d:3f:fa:02:4b:
72:14:1c:c7:99:12:17:e8:54:99:c0:08:76:e1:8b:
d6:4e:27:89:4f:05:8c:2a:a7:ed:41:c5:5a:e5:d4:
c9:ca:40:27:7b:93:2f:56:30:4c:25:1b:21:b7:b9:
08:8a:cf:45:23:f5:2f:86:2c:0c:4a:e2:9d:6b:de:
91:7c:a7:ce:c5:df:cc:00:a4:07:73:39:4b:6f:3a:
fe:39:69:b0:6f:c4:d9:64:7f:79:23:19:c0:18:c4:
2f:ba:37:01:72:77:e3:38:b1:4f:9e:8c:a7:be:32:
dd:ec:ff:08:c6:2a:1f:69:c7:bc:72:64:b2:6b:87:
ee:e6:3a:4a:8a:a9:66:51:1b:75:1c:44:89:99:a5:
47:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FB:7E:FF:57:DF:29:CB:40:A5:ED:85:68:48:68:BC:7B:2B:67:35
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/258e6f29-ec78-4849-a049-84a7edb4a611.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.190.0.0/16
Signature Algorithm: sha256WithRSAEncryption
d3:6b:89:45:ef:cf:e2:ff:84:18:fe:0a:16:a8:8e:cf:e6:ab:
f4:ef:9c:d6:c5:b9:70:f4:65:f0:72:0c:a8:0c:74:15:f0:a8:
d1:08:13:06:7d:98:36:4e:11:c0:dc:f9:42:2e:df:cb:29:33:
64:37:ae:2d:78:cf:7b:f0:61:75:91:59:4b:f9:2d:68:82:73:
a9:f1:48:5e:9a:41:49:ed:94:16:93:c5:b3:b9:33:6c:35:9d:
ec:a7:bc:66:cb:4d:3a:26:44:97:46:a8:f6:93:1f:23:91:d4:
8a:7d:68:8a:6e:70:2d:33:b9:b4:92:31:6c:f7:03:49:08:b8:
3c:34:e1:a3:8e:e2:94:d8:1e:ad:5a:c5:38:f0:92:f4:39:48:
be:ff:78:5e:46:0d:7f:b9:ec:d8:d8:24:7a:59:06:2b:90:16:
b6:bb:52:be:ed:3a:62:4c:cf:7e:bc:43:30:cc:67:0d:e1:f1:
e2:90:dd:5b:cd:b2:9c:56:80:d7:f4:b6:b5:f1:7d:ab:51:27:
a0:76:18:37:f9:80:62:cd:5f:b5:d7:62:44:2d:51:97:68:e7:
d3:2d:b5:0a:67:ab:79:c9:48:5f:0a:e7:05:59:06:58:c0:06:
20:95:09:a6:70:92:23:51:d8:37:06:57:b3:08:e8:0d:ac:a4:
af:6d:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:10 2026 by rpki-client