$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa File: ae8bbe60-fea7-42d1-a045-90021977a902.roa (raw, json) Hash identifier: wxvmoOaI21hbaTTgc26f98lEq8echMXqFFRMmryuNx8= Subject key identifier: EE:24:4D:10:65:F2:73:33:97:FF:33:7E:C0:F0:65:30:9A:FE:2E:B8 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 45FECE831358BA635446F472C21BA5183D1554A0 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa Signing time: Mon 03 Aug 2026 00:10:13 +0000 ROA not before: Mon 03 Aug 2026 00:10:13 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.21.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:fe:ce:83:13:58:ba:63:54:46:f4:72:c2:1b:a5:18:3d:15:54:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:10:13 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=0735fff89af83e2868eafa7fa828e3d4dcfa5ff3d02985bd1ed1cb616c556ae0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f1:df:97:09:43:24:7b:dd:78:e5:72:37:a5: 41:f5:b4:34:4c:ac:0e:78:90:06:91:57:94:ff:c9: e1:dd:ce:93:17:c7:63:fe:f6:b9:8b:bd:57:79:92: dd:4a:e5:d5:90:4c:32:0f:f9:47:e0:a9:b6:1f:af: c2:46:f6:48:c9:b4:db:c8:ea:7c:11:22:90:56:3e: f8:24:f8:7c:d2:c3:18:f9:6f:48:a7:da:aa:8a:f3: 93:22:ee:6c:eb:ca:3c:ca:61:d2:6e:eb:ae:cd:27: df:36:40:8c:c8:13:73:c9:c5:88:ee:2a:83:36:0c: 37:77:06:cf:09:61:04:36:b5:15:c7:bf:e5:3e:56: c9:f2:06:3d:3e:7c:b2:a2:73:69:c8:3c:58:77:01: d2:7c:b0:da:c8:cd:7d:0d:77:ab:c3:ca:8f:9c:87: f5:f9:00:19:c6:ee:29:6a:2c:f6:14:93:fa:9f:df: 35:e8:87:9c:f7:15:30:1e:49:ea:19:79:02:e3:f7: 19:6e:61:2b:1f:75:09:3a:9d:7a:54:da:c4:d3:cb: fb:d8:a0:d0:e9:11:9d:0b:fd:8e:e9:de:71:76:56: 50:25:6b:2a:bd:ea:db:12:55:86:d3:7e:17:19:54: 33:7e:32:fd:0a:51:70:2b:3c:e8:77:74:75:e9:9b: 88:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:24:4D:10:65:F2:73:33:97:FF:33:7E:C0:F0:65:30:9A:FE:2E:B8 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ae8bbe60-fea7-42d1-a045-90021977a902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.21.0.0/18 Signature Algorithm: sha256WithRSAEncryption b4:1a:d4:9f:a4:3d:52:2f:4f:87:01:69:84:6c:76:44:46:c4: 57:bf:40:07:f1:83:29:8d:51:86:24:7d:26:e8:74:17:d2:0d: 7d:e3:f8:56:af:8c:07:4d:10:7b:8d:83:66:b9:14:2a:08:5e: 96:93:05:9a:ad:d5:40:15:10:2e:d3:c4:ec:cf:fa:78:6e:28: e9:2a:5f:93:ba:15:40:1b:08:dd:5d:b7:e7:27:ce:ad:4e:bb: 02:65:64:8e:fd:68:39:e0:8b:d6:09:4b:af:fe:7b:f7:cb:fa: d9:f8:36:9c:d8:b4:61:38:b2:80:58:ea:e4:38:4b:d2:90:af: 6c:ee:6d:f0:05:37:da:b0:a3:63:ab:57:d7:e4:5f:88:10:79: 29:36:ed:9f:da:64:82:6f:23:0f:f4:d9:81:ee:15:6d:dd:3b: eb:fb:e4:0d:07:f3:00:5a:1c:e9:5d:d2:58:18:4f:32:22:c6: 87:dc:35:77:2c:56:25:33:5d:a8:e6:7b:68:5c:03:4d:5f:0e: 3f:86:90:1b:5a:9d:12:8a:ea:ac:d4:62:d8:66:a8:91:0e:6e: 27:8c:f0:a2:4c:8e:ee:08:67:26:07:d5:3b:d2:0b:f3:fb:d4: 2c:f9:0c:90:49:08:ca:ad:7a:7e:9e:cf:32:23:40:a0:1b:dd: bf:ed:3b:54 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIURf7OgxNYumNURvRywhulGD0VVKAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDAxMDEzWhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzM1ZmZmODlhZjgzZTI4NjhlYWZhN2ZhODI4ZTNkNGRj ZmE1ZmYzZDAyOTg1YmQxZWQxY2I2MTZjNTU2YWUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCf8d+XCUMke9145XI3pUH1tDRMrA54kAaRV5T/yeHdzpMX x2P+9rmLvVd5kt1K5dWQTDIP+UfgqbYfr8JG9kjJtNvI6nwRIpBWPvgk+HzSwxj5 b0in2qqK85Mi7mzryjzKYdJu667NJ982QIzIE3PJxYjuKoM2DDd3Bs8JYQQ2tRXH v+U+VsnyBj0+fLKic2nIPFh3AdJ8sNrIzX0Nd6vDyo+ch/X5ABnG7ilqLPYUk/qf 3zXoh5z3FTAeSeoZeQLj9xluYSsfdQk6nXpU2sTTy/vYoNDpEZ0L/Y7p3nF2VlAl ayq96tsSVYbTfhcZVDN+Mv0KUXArPOh3dHXpm4hjAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU7iRNEGXyczOX/zN+wPBlMJr+LrgwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FlOGJiZTYwLWZlYTctNDJkMS1hMDQ1LTkwMDIxOTc3YTkwMi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZrFQAwDQYJKoZIhvcNAQELBQADggEBALQa1J+kPVIvT4cBaYRsdkRGxFe/ QAfxgymNUYYkfSbodBfSDX3j+FavjAdNEHuNg2a5FCoIXpaTBZqt1UAVEC7TxOzP +nhuKOkqX5O6FUAbCN1dt+cnzq1OuwJlZI79aDngi9YJS6/+e/fL+tn4NpzYtGE4 soBY6uQ4S9KQr2zubfAFN9qwo2OrV9fkX4gQeSk27Z/aZIJvIw/02YHuFW3dO+v7 5A0H8wBaHOld0lgYTzIixofcNXcsViUzXajme2hcA01fDj+GkBtanRKK6qzUYthm qJEObieM8KJMju4IZyYH1TvSC/P71Cz5DJBJCMqten6ezzIjQKAb3b/tO1Q= -----END CERTIFICATE-----Generated at Mon Aug 3 05:41:19 2026 by rpki-client