$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa File: 738b308f-965a-4ab8-a5bc-e6af6f74131b.roa (raw, json) Hash identifier: iu2NgbuMiDP4PPhBzdMzvL6wUmBSj99aouHiTvCVMZ0= Subject key identifier: BB:B3:6B:A7:3B:EE:33:32:D3:AC:FB:B7:3A:7E:51:CF:E1:CB:42:9B Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 0EB8F98A90CE1E75047F9DDB032996D3EC878C6B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa Signing time: Mon 03 Aug 2026 01:30:14 +0000 ROA not before: Mon 03 Aug 2026 01:30:14 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 16509 IP address blocks: 107.21.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b8:f9:8a:90:ce:1e:75:04:7f:9d:db:03:29:96:d3:ec:87:8c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 01:30:14 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=0880369b49ea1a97ce41131a858dbbbe3f1710b7ba6c497992aa949b32aaeedc, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:43:19:9e:5a:aa:24:0b:a2:0f:77:c3:f9:e9: 7c:e5:b6:0a:4b:7f:5e:7b:01:8b:03:64:3d:d1:f4: c7:45:9e:1e:b1:90:1b:55:a2:20:fe:18:d1:5e:45: 19:bd:94:0b:48:ec:19:e9:f1:19:34:13:ad:68:e6: 4b:6f:e6:d2:a5:72:a2:ad:bd:88:4e:d0:f7:90:df: 64:c4:a1:40:d1:3e:4a:25:90:2a:ff:12:0f:1b:ed: 43:1a:48:38:d5:2d:6f:ea:ac:89:63:af:7a:11:cc: b0:a3:75:c9:f3:1e:b3:34:f6:c2:b6:7c:15:e1:cc: 49:f2:a3:43:f1:0b:27:4f:b7:4d:bf:60:36:58:e2: 82:76:85:0f:db:47:35:b2:41:e0:59:b2:79:f3:62: fe:ed:ca:b0:e9:88:16:98:19:e7:a8:00:4e:43:8a: 9a:1c:45:20:66:9a:96:0a:2f:75:69:3d:48:36:2d: 00:8e:b1:7d:e6:ae:9f:ae:d7:4c:92:0b:cf:72:5f: 69:8f:90:b4:d1:5f:2d:15:7c:30:37:ff:3d:87:e7: f2:d9:0f:fe:cf:b9:79:77:c6:f6:34:69:63:61:04: 10:82:44:25:2e:4e:94:2b:64:da:87:85:94:12:8d: 10:6e:a3:c1:40:96:4a:fa:ef:ae:15:48:66:06:bc: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B3:6B:A7:3B:EE:33:32:D3:AC:FB:B7:3A:7E:51:CF:E1:CB:42:9B X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/738b308f-965a-4ab8-a5bc-e6af6f74131b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.92.0/22 Signature Algorithm: sha256WithRSAEncryption be:c4:17:61:8c:57:fe:d4:50:5b:dc:25:92:72:fe:6a:31:52: 2e:e1:69:b2:7c:58:52:20:7d:b9:8a:cd:41:f0:12:f9:5d:c5: dd:6b:ba:ff:f6:e3:b7:41:38:41:1f:fd:ec:c7:23:66:96:26: 0b:12:c7:36:14:96:b1:c2:52:ca:1b:1b:78:4b:86:88:cc:59: 5c:f8:af:d6:3b:fb:6b:f2:b9:4a:b5:5a:56:76:d6:9e:f1:82: 9d:d6:a4:ca:95:06:56:50:d7:45:b7:72:7e:4e:39:32:fb:84: 1e:18:25:20:06:5a:fb:a2:36:15:27:e4:a2:c7:d8:58:7c:6d: 2d:1e:81:08:b8:9a:71:50:d4:0c:32:3c:5d:e5:9e:8a:1c:61: e9:0e:a8:50:fa:0a:6c:e1:bf:54:d3:45:77:57:25:53:30:be: b6:58:b8:19:84:8e:50:2f:e3:97:03:e2:70:32:f2:ba:22:c0: 6f:c9:a7:f4:af:6c:0e:73:aa:d7:06:41:13:83:5c:ff:62:d5: d7:01:67:21:b7:3a:3e:74:42:17:fa:26:db:f4:ee:89:24:26: 99:e6:bd:97:c2:15:81:55:f0:b2:46:db:9c:7a:c2:4d:69:26: 6f:3c:43:30:f5:80:ca:c2:23:a2:02:00:a9:d2:ed:9f:41:06: d8:37:5e:ff -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUDrj5ipDOHnUEf53bAymW0+yHjGswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDEzMDE0WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwODgwMzY5YjQ5ZWExYTk3Y2U0MTEzMWE4NThkYmJiZTNm MTcxMGI3YmE2YzQ5Nzk5MmFhOTQ5YjMyYWFlZWRjMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbQxmeWqokC6IPd8P56XzltgpLf157AYsDZD3R9MdFnh6x kBtVoiD+GNFeRRm9lAtI7Bnp8Rk0E61o5ktv5tKlcqKtvYhO0PeQ32TEoUDRPkol kCr/Eg8b7UMaSDjVLW/qrIljr3oRzLCjdcnzHrM09sK2fBXhzEnyo0PxCydPt02/ YDZY4oJ2hQ/bRzWyQeBZsnnzYv7tyrDpiBaYGeeoAE5DipocRSBmmpYKL3VpPUg2 LQCOsX3mrp+u10ySC89yX2mPkLTRXy0VfDA3/z2H5/LZD/7PuXl3xvY0aWNhBBCC RCUuTpQrZNqHhZQSjRBuo8FAlkr6764VSGYGvNZHAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUu7NrpzvuMzLTrPu3On5Rz+HLQpswHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzczOGIzMDhmLTk2NWEtNGFiOC1hNWJjLWU2YWY2Zjc0MTMxYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAJrFVwwDQYJKoZIhvcNAQELBQADggEBAL7EF2GMV/7UUFvcJZJy/moxUi7h abJ8WFIgfbmKzUHwEvldxd1ruv/247dBOEEf/ezHI2aWJgsSxzYUlrHCUsobG3hL hojMWVz4r9Y7+2vyuUq1WlZ21p7xgp3WpMqVBlZQ10W3cn5OOTL7hB4YJSAGWvui NhUn5KLH2Fh8bS0egQi4mnFQ1AwyPF3lnoocYekOqFD6Cmzhv1TTRXdXJVMwvrZY uBmEjlAv45cD4nAy8roiwG/Jp/SvbA5zqtcGQRODXP9i1dcBZyG3Oj50Qhf6Jtv0 7okkJpnmvZfCFYFV8LJG25x6wk1pJm88QzD1gMrCI6ICAKnS7Z9BBtg3Xv8= -----END CERTIFICATE-----Generated at Mon Aug 3 05:38:17 2026 by rpki-client