$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e391ffe-063f-4b2a-b745-4959f176bca3.roa File: 1e391ffe-063f-4b2a-b745-4959f176bca3.roa (raw, json) Hash identifier: 6VKw8W1R0esn0MygPzx92A8dz7ILF6nrxXpHv2xB1Qo= Subject key identifier: 2B:AC:95:2D:E3:03:40:E2:BD:E3:8C:53:33:1B:37:C2:DC:FA:52:76 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 6DEB114D826860130D5924FB7656D956F14D92D0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e391ffe-063f-4b2a-b745-4959f176bca3.roa Signing time: Mon 03 Aug 2026 02:10:44 +0000 ROA not before: Mon 03 Aug 2026 02:10:44 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:eb:11:4d:82:68:60:13:0d:59:24:fb:76:56:d9:56:f1:4d:92:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 02:10:44 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=c8972689c1978c4ef81835fb16ba71aae8de24e34c379cf59672fa8f46ad5680, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:d4:32:c4:de:43:6b:34:59:3a:e9:97:dd: f7:25:04:be:08:5f:ee:b1:f9:62:6b:2c:36:71:d2: 34:a5:34:d7:6c:63:92:c1:60:54:cd:9b:23:c5:7c: 19:c1:25:94:86:5c:f0:ea:74:68:cd:75:20:29:99: a0:9b:6b:6e:bf:84:89:b9:ba:9d:17:8a:d1:8f:33: bd:5b:55:e8:ef:7f:c4:65:af:2a:2a:c3:1f:6f:f8: 88:f0:78:32:c0:55:8e:be:54:4e:50:46:46:9e:ed: 85:f1:5f:b3:ff:f6:db:e9:01:d2:c8:66:6d:09:47: 6a:42:d3:7e:08:1b:db:45:91:2e:f6:d8:4f:54:dd: c4:03:da:ba:34:56:b7:ae:63:67:ef:ad:b2:15:f4: 4d:42:9f:f0:f6:ce:1e:51:ce:cb:55:d8:70:f4:b8: 2d:a7:18:4a:e2:55:d9:ec:54:db:99:0d:6d:02:22: 00:24:09:a9:72:04:7a:2a:e5:d0:de:02:9f:34:c7: 8a:1d:4b:55:02:35:18:37:ac:ce:3f:99:b6:4b:02: 0c:1f:9a:7f:47:29:f8:2d:47:87:1d:50:fa:e2:a7: 7c:8a:5b:2e:ac:df:e6:f4:64:2f:95:a9:3b:75:b1: a7:21:fb:c9:88:11:50:48:8e:93:91:f2:8e:aa:a6: 6a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AC:95:2D:E3:03:40:E2:BD:E3:8C:53:33:1B:37:C2:DC:FA:52:76 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/1e391ffe-063f-4b2a-b745-4959f176bca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.128.0/18 Signature Algorithm: sha256WithRSAEncryption 63:2e:ed:c0:25:cf:0c:05:98:72:dd:2f:93:01:98:41:97:59: b8:63:ae:46:94:9e:34:8a:2a:f0:07:77:67:12:e5:d8:ef:5f: ae:7a:29:aa:43:b9:68:06:18:62:6f:73:4c:6e:c3:b8:9d:b6: be:e8:88:6a:4e:98:23:0a:77:07:22:2e:3b:0c:bb:35:22:b9: b0:65:cf:2a:c0:bf:2c:42:29:c8:6b:19:32:be:a3:6f:05:40: 3f:e4:74:c2:a2:6d:ea:3f:5d:8c:c7:20:71:85:85:15:1c:49: b6:72:0f:b5:97:ae:89:38:cf:f0:14:cc:74:3f:3c:9f:c4:c8: c6:d9:6e:bf:5a:f9:94:49:6e:b1:e7:e7:b5:7f:ed:1c:a8:4e: 7c:8f:27:1c:71:b1:47:0f:27:c5:13:54:7a:3a:71:fb:e7:c6: 44:82:28:0a:be:85:35:be:55:a2:3c:e4:97:82:f4:05:14:d8: 16:ac:09:a9:fd:fc:60:3f:a6:27:06:dc:90:3f:38:68:84:50: 8b:d1:b8:2b:1c:6d:ab:ee:5c:2d:c8:3a:31:97:4a:34:3f:cc: 59:ee:89:2c:e8:24:ec:1c:78:49:3c:a6:9b:7d:08:ad:df:6b: 10:29:6a:26:7d:d2:0b:1f:7e:7d:b3:2d:b6:72:a9:18:d5:53: 36:64:87:45 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUbesRTYJoYBMNWST7dlbZVvFNktAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDIxMDQ0WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0BjODk3MjY4OWMxOTc4YzRlZjgxODM1ZmIxNmJhNzFhYWU4 ZGUyNGUzNGMzNzljZjU5NjcyZmE4ZjQ2YWQ1NjgwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCliNQyxN5DazRZOumX3fclBL4IX+6x+WJrLDZx0jSlNNds Y5LBYFTNmyPFfBnBJZSGXPDqdGjNdSApmaCba26/hIm5up0XitGPM71bVejvf8Rl ryoqwx9v+IjweDLAVY6+VE5QRkae7YXxX7P/9tvpAdLIZm0JR2pC034IG9tFkS72 2E9U3cQD2ro0VreuY2fvrbIV9E1Cn/D2zh5RzstV2HD0uC2nGEriVdnsVNuZDW0C IgAkCalyBHoq5dDeAp80x4odS1UCNRg3rM4/mbZLAgwfmn9HKfgtR4cdUPrip3yK Wy6s3+b0ZC+VqTt1sach+8mIEVBIjpOR8o6qpmqVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUK6yVLeMDQOK944xTMxs3wtz6UnYwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzFlMzkxZmZlLTA2M2YtNGIyYS1iNzQ1LTQ5NTlmMTc2YmNhMy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFYAwDQYJKoZIhvcNAQELBQADggEBAGMu7cAlzwwFmHLdL5MBmEGXWbhj rkaUnjSKKvAHd2cS5djvX656KapDuWgGGGJvc0xuw7idtr7oiGpOmCMKdwciLjsM uzUiubBlzyrAvyxCKchrGTK+o28FQD/kdMKibeo/XYzHIHGFhRUcSbZyD7WXrok4 z/AUzHQ/PJ/EyMbZbr9a+ZRJbrHn57V/7RyoTnyPJxxxsUcPJ8UTVHo6cfvnxkSC KAq+hTW+VaI85JeC9AUU2BasCan9/GA/picG3JA/OGiEUIvRuCscbavuXC3IOjGX SjQ/zFnuiSzoJOwceEk8ppt9CK3faxApaiZ90gsffn2zLbZyqRjVUzZkh0U= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:30 2026 by rpki-client