
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa
File: da29a997-0e47-4721-ba0c-ccfed50a5876.roa (raw, json)
Hash identifier: oLLBTzqHXqdzYQCqHvt0WgSBha6iRkt2dPCXjgDA1ao=
Subject key identifier: 8A:A8:29:F1:B2:D5:EE:DC:EC:D7:B7:3F:86:48:1E:15:54:F4:B5:50
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 5F060F55F35B839017A995946B6E4868196EB92C
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa
Signing time: Sun 17 May 2026 00:20:05 +0000
ROA not before: Sun 17 May 2026 00:20:05 +0000
ROA not after: Sat 15 Aug 2026 23:59:59 +0000
asID: 16509
IP address blocks: 74.233.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:06:0f:55:f3:5b:83:90:17:a9:95:94:6b:6e:48:68:19:6e:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: May 17 00:20:05 2026 GMT
Not After : Aug 15 23:59:59 2026 GMT
Subject: serialNumber=4fc4530e1eaf252947bf972f7bfc795a75ed062d52bae91320edf0bcc348d052, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:3e:bf:cb:9a:51:bb:77:7e:4b:36:f5:31:
3c:2f:c4:75:57:06:26:be:fd:20:c7:21:71:fc:72:
87:d1:74:ff:e3:ff:c1:e3:c7:5c:9c:b1:f5:5a:98:
b5:0e:6e:a2:48:87:23:d8:9a:b3:90:b1:35:8a:3a:
34:c6:6c:a2:11:1e:83:f9:d9:06:f0:0d:68:0f:ff:
cd:ab:a1:23:20:b0:18:b4:58:a0:5f:c4:63:b4:09:
41:51:cb:f4:e2:ed:1e:1f:33:0f:d2:5c:6a:27:cf:
81:36:ff:ba:92:08:ac:20:65:aa:ba:4b:92:c0:a2:
ff:e6:97:47:5e:18:a2:8c:e2:2b:5f:ef:b1:93:65:
7b:61:e3:59:1a:43:94:38:12:1c:0f:f9:ee:0f:05:
3f:d8:7b:53:28:e4:d1:d3:f6:d8:d3:8e:f8:92:6a:
33:7f:d0:24:70:fb:b7:56:78:0f:a5:94:10:e2:80:
56:be:33:f8:24:75:48:a5:24:7d:5b:61:2f:ba:86:
f5:72:41:b5:0c:41:ae:f8:b8:2d:db:43:9a:39:7f:
e9:73:56:79:04:24:f9:a3:ae:a0:dc:b7:76:0e:5c:
e7:41:1d:89:d1:27:fc:1d:0d:44:22:31:0d:23:6b:
0a:82:59:52:8c:d3:97:ff:38:64:43:27:15:7d:17:
bb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A8:29:F1:B2:D5:EE:DC:EC:D7:B7:3F:86:48:1E:15:54:F4:B5:50
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/da29a997-0e47-4721-ba0c-ccfed50a5876.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.233.0.0/16
Signature Algorithm: sha256WithRSAEncryption
18:4f:a3:0d:26:0b:be:cf:3f:a8:a1:34:69:a8:67:a2:31:a0:
f8:a8:37:3b:5e:f5:26:a9:c8:37:c0:fa:82:0d:6b:2a:85:fa:
2f:1f:88:6e:15:73:c7:f6:7d:05:9d:b8:49:5c:66:c5:7c:fd:
bd:bf:14:94:76:f1:83:40:b3:93:32:b4:46:86:23:6f:8b:80:
35:ae:7a:66:5f:d2:a3:05:67:c5:e0:43:b0:76:e8:56:d6:18:
82:3a:c0:f3:25:90:31:5a:40:c9:f4:9f:23:62:37:bb:a3:6d:
a4:e5:d9:31:31:27:98:6d:dd:e5:21:99:8b:e8:40:78:1b:b8:
82:84:ea:6f:63:5f:1e:d4:9a:b7:6c:be:81:c4:7f:70:05:7f:
ea:af:25:1c:ab:3b:64:1e:49:11:24:de:a9:00:4c:9c:2d:14:
a9:f3:9d:fa:a9:a7:3e:d0:18:76:81:21:51:7f:40:3d:77:5c:
cf:9e:bf:03:b7:ce:bf:0c:62:a8:ff:8a:e4:2d:3a:78:80:16:
ba:a6:2f:7f:2b:55:bc:04:4e:0b:e1:f2:f6:ed:16:7a:7f:da:
73:35:07:f0:81:8f:e3:bd:21:1d:4d:e0:a9:47:02:f8:2a:10:
29:a4:43:4f:74:a8:42:b5:b6:99:e3:50:5a:3a:9e:13:60:09:
dc:b6:f9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:10:27 2026 by rpki-client