
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
File: c017381e-018d-4bd0-9469-10e4c81d2392.roa (raw, json)
Hash identifier: supatFz+kBzr4ZkSZeoxfxNloAWV88XvfmC+Q/0RRyQ=
Subject key identifier: BA:7D:FF:BE:F7:1D:CC:B3:55:5E:09:EA:D0:5B:80:6F:A5:76:37:1C
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 215DD9D15C532169C63EAB8A4100A7A93C6EABFC
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
Signing time: Sat 18 Jul 2026 00:00:07 +0000
ROA not before: Sat 18 Jul 2026 00:00:07 +0000
ROA not after: Fri 16 Oct 2026 23:59:59 +0000
asID: 16509
IP address blocks: 99.77.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5d:d9:d1:5c:53:21:69:c6:3e:ab:8a:41:00:a7:a9:3c:6e:ab:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Jul 18 00:00:07 2026 GMT
Not After : Oct 16 23:59:59 2026 GMT
Subject: serialNumber=b521cb5beb2dcb8b08814750be83c9644d4dd18b5060ef6b59d5cb532a08603d, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1e:87:c3:a5:44:ef:7f:be:30:b7:48:1b:db:
fd:8f:e7:11:67:88:b2:c9:43:98:fb:94:b5:08:bd:
4a:17:37:63:d5:5f:59:31:84:16:5d:3f:c6:d1:36:
51:1b:cd:29:34:94:b2:4e:09:5f:93:16:1d:99:5f:
53:d6:b6:82:73:b9:e1:c3:c5:cc:27:e9:0c:be:a8:
1f:29:2a:eb:14:0e:09:9e:75:b4:1b:5b:9c:79:cd:
52:6d:cf:15:b4:c2:f4:cf:dc:40:39:1c:84:77:68:
f3:d0:12:f0:6f:4b:17:6e:8d:94:7c:23:e3:4e:90:
d1:0a:f2:90:a0:b1:db:38:6a:ab:42:d9:45:05:c0:
f2:bd:84:10:8a:47:7f:cc:5a:5a:c9:f1:19:9c:fe:
cf:87:c7:ea:1a:54:14:cf:3c:a4:49:26:6c:d3:68:
49:f2:d5:a6:dd:b8:96:fb:6a:e5:ce:8a:b9:7f:28:
b6:00:44:d5:bd:9f:01:df:23:8d:76:a3:df:99:e2:
64:e2:be:a9:e1:8a:b9:5f:48:12:c4:73:cd:a4:e8:
75:ae:85:43:8f:c6:88:8b:63:dd:ec:dc:33:99:8c:
50:81:ea:52:b1:7b:bc:88:97:30:78:d8:d9:15:ab:
1e:5f:76:bd:07:57:92:3d:01:91:ee:b2:89:1b:0c:
00:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7D:FF:BE:F7:1D:CC:B3:55:5E:09:EA:D0:5B:80:6F:A5:76:37:1C
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c017381e-018d-4bd0-9469-10e4c81d2392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
99.77.153.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:cb:d9:e7:db:db:15:af:c6:b1:2e:a5:0a:27:8c:19:2e:e2:
fd:16:2e:a2:8d:e4:92:af:0e:d3:0f:7e:02:d7:c3:1e:83:3c:
c4:b0:1d:52:fe:7a:23:31:b0:84:75:e5:39:7b:53:35:74:21:
f0:22:5b:45:c0:fe:35:f6:df:3f:bc:1b:57:89:00:eb:07:59:
43:f6:3f:c2:ed:c8:3d:14:65:af:e4:a5:fb:27:07:dd:57:25:
49:05:d0:d0:55:2f:17:f5:46:a2:0b:d0:ae:6c:56:e5:e9:82:
b1:1f:fc:11:96:3f:ed:03:54:2e:37:57:26:62:82:48:77:9a:
06:b2:c4:b6:75:9b:d2:f5:a5:0e:a7:e1:9a:95:c1:4c:42:10:
3d:5b:24:de:36:9e:64:c5:17:84:25:f0:c2:45:18:41:f5:09:
40:59:da:a8:90:54:55:05:86:76:84:0f:e1:f9:a7:63:74:44:
c3:d5:f3:40:e5:e8:1c:25:21:af:1d:13:9f:03:30:ed:57:1a:
98:c0:a8:d6:ec:2a:fc:b9:41:49:78:fd:0a:07:e9:e5:08:ac:
60:fc:cb:67:34:bd:c7:5a:6f:21:f1:92:d6:11:61:c1:71:3b:
0e:08:46:e2:27:28:d4:81:92:db:27:d1:44:b0:2d:86:35:24:
41:c8:fc:94
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUIV3Z0VxTIWnGPquKQQCnqTxuq/wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzE4MDAwMDA3WhcNMjYxMDE2MjM1OTU5
WjB6MUkwRwYDVQQFE0BiNTIxY2I1YmViMmRjYjhiMDg4MTQ3NTBiZTgzYzk2NDRk
NGRkMThiNTA2MGVmNmI1OWQ1Y2I1MzJhMDg2MDNkMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCoHofDpUTvf74wt0gb2/2P5xFniLLJQ5j7lLUIvUoXN2PV
X1kxhBZdP8bRNlEbzSk0lLJOCV+TFh2ZX1PWtoJzueHDxcwn6Qy+qB8pKusUDgme
dbQbW5x5zVJtzxW0wvTP3EA5HIR3aPPQEvBvSxdujZR8I+NOkNEK8pCgsds4aqtC
2UUFwPK9hBCKR3/MWlrJ8Rmc/s+Hx+oaVBTPPKRJJmzTaEny1abduJb7auXOirl/
KLYARNW9nwHfI412o9+Z4mTivqnhirlfSBLEc82k6HWuhUOPxoiLY93s3DOZjFCB
6lKxe7yIlzB42NkVqx5fdr0HV5I9AZHusokbDAAHAgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUun3/vvcdzLNVXgnq0FuAb6V2NxwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2MwMTczODFlLTAxOGQtNGJkMC05NDY5LTEwZTRjODFkMjM5Mi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBABjTZkwDQYJKoZIhvcNAQELBQADggEBAKPL2efb2xWvxrEupQonjBku4v0W
LqKN5JKvDtMPfgLXwx6DPMSwHVL+eiMxsIR15Tl7UzV0IfAiW0XA/jX23z+8G1eJ
AOsHWUP2P8LtyD0UZa/kpfsnB91XJUkF0NBVLxf1RqIL0K5sVuXpgrEf/BGWP+0D
VC43VyZigkh3mgayxLZ1m9L1pQ6n4ZqVwUxCED1bJN42nmTFF4Ql8MJFGEH1CUBZ
2qiQVFUFhnaED+H5p2N0RMPV80Dl6BwlIa8dE58DMO1XGpjAqNbsKvy5QUl4/QoH
6eUIrGD8y2c0vcdabyHxktYRYcFxOw4IRuInKNSBktsn0USwLYY1JEHI/JQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:52 2026 by rpki-client