$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af93383-1fd7-4ca1-b61f-5e6110aeec58.roa File: 1af93383-1fd7-4ca1-b61f-5e6110aeec58.roa (raw, json) Hash identifier: lQSpZMZttdukEZ0lzmxNxchDatyOImG81mkXame95HY= Subject key identifier: 7C:73:46:BB:45:47:78:ED:4B:00:4A:3B:96:59:55:0F:74:AB:A5:FD Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 64D44F6630CE81A5C5F92DA4EF45718CE25F4E12 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af93383-1fd7-4ca1-b61f-5e6110aeec58.roa Signing time: Mon 03 Aug 2026 02:21:41 +0000 ROA not before: Mon 03 Aug 2026 02:21:41 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d4:4f:66:30:ce:81:a5:c5:f9:2d:a4:ef:45:71:8c:e2:5f:4e:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:21:41 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=18451c70e653acaf92a4de06b860015da8c5923121010036ce0b24ecb018b9f8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:ff:7b:ea:df:81:43:97:6c:2e:74:97:e9: 61:3f:3e:d1:16:be:a6:e0:72:ee:7b:11:0c:e8:e4: b9:05:df:fa:ae:f3:cb:ec:a4:d4:29:19:17:08:35: 4d:2e:d2:27:58:8e:5b:99:f5:0c:3b:0b:dc:ea:44: a4:e8:55:8f:89:d4:c7:b5:b9:e5:32:48:21:71:13: 45:d3:f8:a4:d0:30:ae:e5:4e:c5:5d:48:80:e2:98: 72:ec:08:ca:30:62:9c:98:64:36:5d:0c:e7:12:95: 2f:5a:8f:af:c7:45:ce:7c:9f:2a:a6:c5:05:e4:42: 48:80:ec:65:ae:95:a6:79:8a:16:f9:1d:39:c1:26: 9d:5b:da:cf:03:2a:e5:73:77:58:da:49:25:6d:3e: a6:12:24:5d:c9:08:9a:ff:81:08:ef:68:16:b6:4d: ea:eb:db:ad:6d:1e:87:94:14:19:ec:60:69:ed:ae: e4:d0:1f:cf:b1:15:e7:47:a0:25:23:ed:43:33:14: c4:d4:43:7e:00:f6:41:b7:5b:c1:dd:c1:60:8b:c9: e9:db:cd:c5:6a:85:51:99:ab:1a:3e:73:83:07:d9: 84:63:d1:76:61:04:43:02:20:cb:62:57:c2:f9:76: 5f:e5:e1:3a:67:47:c6:c1:13:84:3f:48:0c:c9:39: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:73:46:BB:45:47:78:ED:4B:00:4A:3B:96:59:55:0F:74:AB:A5:FD X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1af93383-1fd7-4ca1-b61f-5e6110aeec58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.88.0/22 Signature Algorithm: sha256WithRSAEncryption 67:b6:b3:6c:a8:ef:d5:f6:32:45:03:49:9d:dc:57:ad:31:7c: bf:62:10:6b:f1:c1:c3:b1:fc:c9:04:70:43:6a:db:41:b1:88: 5e:78:b4:ec:c1:57:0d:00:2b:9a:e4:16:4d:ab:4a:85:42:13: 1a:03:f4:16:7b:e1:1a:5a:55:a9:44:d7:12:68:12:cc:22:85: ca:e8:05:df:25:c9:b7:f9:fa:cb:b1:3c:a3:e5:25:86:54:c3: 94:46:0e:29:b5:7a:c1:5e:a6:75:9d:10:b4:2f:9d:41:74:4f: 97:4e:bf:d3:d4:f0:bb:3c:3a:48:3d:ce:9d:e8:e5:43:96:29: 22:96:d4:8e:26:7d:e9:31:d4:09:7b:fd:6b:d4:55:c8:5d:d4: 76:4b:99:14:cf:d1:0e:55:97:de:51:a0:a5:5b:63:61:40:d6: 70:61:59:52:eb:fb:f2:f8:60:30:99:5d:55:64:8a:fb:61:80: 6d:51:f0:af:ae:b8:dd:75:c4:dd:50:36:40:94:39:c0:27:43: 9f:95:56:83:1b:8a:09:b7:77:8c:2d:25:a6:35:73:c9:7a:ad: e4:7a:f4:11:24:31:e3:33:e7:79:c6:e0:41:b4:e0:4c:00:f0: f8:43:9b:84:bb:56:de:98:d0:ac:22:e6:a5:91:58:e0:79:4e: 14:85:31:31 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZNRPZjDOgaXF+S2k70VxjOJfThIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIyMTQxWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AxODQ1MWM3MGU2NTNhY2FmOTJhNGRlMDZiODYwMDE1ZGE4 YzU5MjMxMjEwMTAwMzZjZTBiMjRlY2IwMThiOWY4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL8/976t+BQ5dsLnSX6WE/PtEWvqbgcu57EQzo5LkF3/qu 88vspNQpGRcINU0u0idYjluZ9Qw7C9zqRKToVY+J1Me1ueUySCFxE0XT+KTQMK7l TsVdSIDimHLsCMowYpyYZDZdDOcSlS9aj6/HRc58nyqmxQXkQkiA7GWulaZ5ihb5 HTnBJp1b2s8DKuVzd1jaSSVtPqYSJF3JCJr/gQjvaBa2Terr261tHoeUFBnsYGnt ruTQH8+xFedHoCUj7UMzFMTUQ34A9kG3W8HdwWCLyenbzcVqhVGZqxo+c4MH2YRj 0XZhBEMCIMtiV8L5dl/l4TpnR8bBE4Q/SAzJOaydAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUfHNGu0VHeO1LAEo7lllVD3Srpf0wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFhZjkzMzgzLTFmZDctNGNhMS1iNjFmLTVlNjExMGFlZWM1OC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFVgwDQYJKoZIhvcNAQELBQADggEBAGe2s2yo79X2MkUDSZ3cV60xfL9i EGvxwcOx/MkEcENq20GxiF54tOzBVw0AK5rkFk2rSoVCExoD9BZ74RpaValE1xJo EswihcroBd8lybf5+suxPKPlJYZUw5RGDim1esFepnWdELQvnUF0T5dOv9PU8Ls8 Okg9zp3o5UOWKSKW1I4mfekx1Al7/WvUVchd1HZLmRTP0Q5Vl95RoKVbY2FA1nBh WVLr+/L4YDCZXVVkivthgG1R8K+uuN11xN1QNkCUOcAnQ5+VVoMbigm3d4wtJaY1 c8l6reR69BEkMeMz53nG4EG04EwA8PhDm4S7Vt6Y0Kwi5qWRWOB5ThSFMTE= -----END CERTIFICATE-----Generated at Mon Aug 3 06:56:57 2026 by rpki-client