$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa File: 19dbb176-711e-430f-a492-7e57ed06c8f2.roa (raw, json) Hash identifier: nZxATpdDX9wSdG3P0FR1EEo1Uu2rjrFGVTPTDvdDOog= Subject key identifier: 57:B8:F6:AC:53:46:4A:6F:7A:1F:B2:93:A8:20:3C:CE:4B:74:8B:A6 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6F72399ADD418933CE8E5BB36CB44CBCAC574C40 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa Signing time: Mon 03 Aug 2026 01:00:10 +0000 ROA not before: Mon 03 Aug 2026 01:00:10 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:72:39:9a:dd:41:89:33:ce:8e:5b:b3:6c:b4:4c:bc:ac:57:4c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:00:10 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=a52a695b2873fa141dcfdfcc02cb7af8b5249bd7258b0757c93c0c96b39cf444, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4b:d6:b0:1c:ca:c6:fe:79:7c:17:03:9a:f6: b8:6b:8b:2e:14:07:1c:ab:73:38:45:1e:ea:f5:fc: 6d:e1:c6:c5:b9:e9:79:d3:de:9d:36:5f:5c:2e:05: 1e:f7:8c:12:a0:7a:08:f2:35:ba:3d:91:f2:82:f3: b0:c4:5b:0f:22:71:30:2b:22:1a:81:89:bf:85:fa: bd:08:e6:f6:e4:c2:60:84:82:b5:23:83:e1:a9:78: 13:92:f8:5b:eb:31:55:df:b0:93:78:f6:58:ee:cb: dd:6a:70:79:a1:34:87:08:d3:6c:c8:6c:0e:a5:bb: 68:ef:58:f2:ba:d9:67:ff:9a:d9:7d:07:1a:f0:8b: e9:36:e9:d0:1e:5a:d5:e7:f8:b8:1a:37:38:e7:b9: 02:7a:48:9c:b8:be:dd:ff:38:d0:f7:3f:5e:ff:c2: 0d:15:21:f2:7b:df:1e:1f:20:4d:95:d6:b4:2c:60: fe:86:a0:4b:ea:f7:d9:6a:64:ba:7b:f7:e7:2a:47: a3:a9:f7:93:ab:41:1b:2f:47:27:f0:04:d4:3f:54: 84:29:f1:bd:5a:79:64:67:37:dc:c4:6f:97:1a:32: ee:73:01:21:28:c5:cf:10:35:38:88:1f:9e:c5:4a: 8e:a1:53:26:5f:83:db:1b:32:e3:33:1b:15:ff:9f: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:B8:F6:AC:53:46:4A:6F:7A:1F:B2:93:A8:20:3C:CE:4B:74:8B:A6 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/19dbb176-711e-430f-a492-7e57ed06c8f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.64.0/18 Signature Algorithm: sha256WithRSAEncryption 41:59:ee:8f:01:d2:d2:d4:bf:a9:e6:aa:3b:e5:a8:40:6a:11: 87:9a:e2:d6:d1:36:7f:f8:15:63:4c:40:16:46:6c:80:a0:f5: f6:3f:58:ba:44:44:32:85:03:80:d7:12:89:ae:ce:d3:1b:a8: 36:ac:c4:1b:10:bd:fd:ad:ac:fc:76:1b:ed:1d:d0:d1:e8:f7: 86:a7:23:e7:07:81:20:30:d4:85:d0:3d:ee:f6:96:dc:61:7f: 84:36:40:98:12:db:34:ea:70:e1:51:70:f8:6a:b4:64:f6:29: 9f:87:5c:b4:e4:d3:37:52:10:cf:bc:9a:24:91:b9:25:7a:25: 09:45:68:ad:52:97:ec:af:fb:a5:28:ca:63:c0:c0:67:bb:8a: 68:0b:c7:de:91:9b:b9:17:e6:31:db:4e:63:80:26:5b:df:c5: 99:88:36:f0:c3:b6:1f:87:a4:76:c8:8a:13:7f:9d:b8:99:1a: e5:f4:9b:86:ad:07:d3:64:2b:d0:84:9b:0b:1d:f0:09:fc:9c: 04:4b:7c:67:10:8d:c7:1d:ed:28:ee:3c:d3:fa:79:a1:f1:1d: ca:3c:ee:48:96:ba:2e:6a:3c:d9:59:bb:c2:37:4a:f9:37:4b: 85:eb:04:a4:ff:cc:7a:4e:79:d8:9a:15:1c:73:9b:c7:72:d6: e4:b7:6a:30 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUb3I5mt1BiTPOjluzbLRMvKxXTEAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEwMDEwWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BhNTJhNjk1YjI4NzNmYTE0MWRjZmRmY2MwMmNiN2FmOGI1 MjQ5YmQ3MjU4YjA3NTdjOTNjMGM5NmIzOWNmNDQ0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCjS9awHMrG/nl8FwOa9rhriy4UBxyrczhFHur1/G3hxsW5 6XnT3p02X1wuBR73jBKgegjyNbo9kfKC87DEWw8icTArIhqBib+F+r0I5vbkwmCE grUjg+GpeBOS+FvrMVXfsJN49ljuy91qcHmhNIcI02zIbA6lu2jvWPK62Wf/mtl9 Bxrwi+k26dAeWtXn+LgaNzjnuQJ6SJy4vt3/OND3P17/wg0VIfJ73x4fIE2V1rQs YP6GoEvq99lqZLp79+cqR6Op95OrQRsvRyfwBNQ/VIQp8b1aeWRnN9zEb5caMu5z ASEoxc8QNTiIH57FSo6hUyZfg9sbMuMzGxX/n1MdAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUV7j2rFNGSm96H7KTqCA8zkt0i6YwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzE5ZGJiMTc2LTcxMWUtNDMwZi1hNDkyLTdlNTdlZDA2YzhmMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFUAwDQYJKoZIhvcNAQELBQADggEBAEFZ7o8B0tLUv6nmqjvlqEBqEYea 4tbRNn/4FWNMQBZGbICg9fY/WLpERDKFA4DXEomuztMbqDasxBsQvf2trPx2G+0d 0NHo94anI+cHgSAw1IXQPe72ltxhf4Q2QJgS2zTqcOFRcPhqtGT2KZ+HXLTk0zdS EM+8miSRuSV6JQlFaK1Sl+yv+6UoymPAwGe7imgLx96Rm7kX5jHbTmOAJlvfxZmI NvDDth+HpHbIihN/nbiZGuX0m4atB9NkK9CEmwsd8An8nARLfGcQjccd7SjuPNP6 eaHxHco87kiWui5qPNlZu8I3Svk3S4XrBKT/zHpOediaFRxzm8dy1uS3ajA= -----END CERTIFICATE-----Generated at Mon Aug 3 06:52:17 2026 by rpki-client