$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa File: ee7e467f-8bfe-4d54-afbe-25646042edbf.roa (raw, json) Hash identifier: DfPAg57Lfhk2tHDHKLL1AA+gH9SgKYrA9RdY0q9szWc= Subject key identifier: 20:15:23:87:CA:20:83:3D:48:46:14:E4:0F:E0:D8:32:0B:10:74:94 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 7FAEFDCD9FD8D6010C7F8429E323943C9CCAC905 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa Signing time: Mon 03 Aug 2026 00:40:59 +0000 ROA not before: Mon 03 Aug 2026 00:40:59 +0000 ROA not after: Sun 01 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 107.22.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ae:fd:cd:9f:d8:d6:01:0c:7f:84:29:e3:23:94:3c:9c:ca:c9:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 3 00:40:59 2026 GMT Not After : Nov 1 23:59:59 2026 GMT Subject: serialNumber=877d78e4e24de2d2ddf652e0a18d70d2eea189a1dec25f11fb6fef85d4ea0c62, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:d2:f8:82:3f:a0:57:00:d5:22:b4:77:26: 2c:18:61:a9:f0:06:32:7f:e4:0f:72:f5:fb:2b:1c: e7:42:1b:81:b6:f1:21:41:b0:8e:5b:22:3e:54:13: cf:2e:88:77:5d:c6:85:ee:73:2b:63:06:88:89:f3: e6:12:cb:c4:5a:48:20:69:76:dd:52:c5:cb:ac:fc: 4c:27:5c:e5:e3:db:42:f7:b1:68:a1:20:80:06:89: 56:e7:41:74:31:99:2b:95:5b:8a:0f:67:fc:e0:10: 63:13:6b:24:eb:89:74:1d:d1:3f:7a:57:70:8c:50: a4:6c:c9:3a:2b:61:ca:97:7f:3f:84:bf:e5:15:82: bf:42:9d:71:12:2b:e8:77:b8:03:42:f0:72:cc:0e: ac:17:e8:89:b9:fd:77:85:4b:07:db:b6:c6:c3:12: 22:d4:ad:e3:3e:29:3f:2b:2c:c3:4e:7c:d5:92:fe: e6:ad:f2:3b:ac:56:e5:cf:88:d8:56:8d:81:91:0f: 77:7b:25:33:13:49:df:37:22:1c:f2:cb:97:26:fb: c7:9f:56:d2:34:d5:e5:f6:27:60:e6:a0:35:e9:ee: 53:6f:6f:89:04:5f:70:ec:53:62:c0:f1:e9:b5:37: 10:97:26:ce:d9:67:76:2a:23:d1:04:a4:64:31:7f: 1b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:15:23:87:CA:20:83:3D:48:46:14:E4:0F:E0:D8:32:0B:10:74:94 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/ee7e467f-8bfe-4d54-afbe-25646042edbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.22.128.0/20 Signature Algorithm: sha256WithRSAEncryption c0:7b:d1:1e:93:1a:fd:e1:7a:a0:f4:b5:c2:a1:25:22:b4:fa: 15:a4:17:a8:a7:0a:0b:9d:ad:9e:8d:68:d6:3e:79:fe:89:c7: 12:85:61:b0:ae:4c:cd:2e:ea:4a:2e:00:7a:7b:9a:d4:27:d6: fe:e8:02:23:46:c6:77:d2:5e:3a:2d:74:c9:20:b8:97:00:f5: 4d:c1:d2:6e:dd:97:8a:e4:d6:5f:3e:ba:81:8f:8b:6f:54:2f: 7f:29:5a:3e:e6:4d:d9:a7:61:e4:50:c5:88:77:4c:f8:9e:35: e2:e4:03:a7:86:41:4c:cf:60:db:d1:b3:64:f7:ac:3a:47:6a: 8d:d3:e1:f0:3e:a9:19:3a:b5:9a:31:b0:20:4b:07:8b:91:da: 1e:7e:b6:cc:a9:34:9b:5d:ed:c6:f2:74:5f:6b:65:0d:b1:7d: 9b:e0:cd:16:d9:3a:42:1d:9a:02:78:aa:24:42:ea:c6:0f:68: a1:22:67:37:63:0e:6b:9a:ab:69:c1:c0:9b:13:0a:52:89:29: c0:25:16:81:eb:cc:bf:22:dc:25:0e:2e:e4:13:3c:e0:90:62: a9:56:43:eb:82:b7:4c:88:86:f5:5d:cc:69:02:9f:64:bd:c7: 05:6a:fd:73:22:2a:af:86:f9:c8:89:09:c3:4e:fe:db:19:d5: fd:86:63:cc -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUf679zZ/Y1gEMf4Qp4yOUPJzKyQUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODAzMDA0MDU5WhcNMjYxMTAxMjM1OTU5 WjB6MUkwRwYDVQQFE0A4NzdkNzhlNGUyNGRlMmQyZGRmNjUyZTBhMThkNzBkMmVl YTE4OWExZGVjMjVmMTFmYjZmZWY4NWQ0ZWEwYzYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxu9L4gj+gVwDVIrR3JiwYYanwBjJ/5A9y9fsrHOdCG4G2 8SFBsI5bIj5UE88uiHddxoXucytjBoiJ8+YSy8RaSCBpdt1Sxcus/EwnXOXj20L3 sWihIIAGiVbnQXQxmSuVW4oPZ/zgEGMTayTriXQd0T96V3CMUKRsyTorYcqXfz+E v+UVgr9CnXESK+h3uANC8HLMDqwX6Im5/XeFSwfbtsbDEiLUreM+KT8rLMNOfNWS /uat8jusVuXPiNhWjYGRD3d7JTMTSd83Ihzyy5cm+8efVtI01eX2J2DmoDXp7lNv b4kEX3DsU2LA8em1NxCXJs7ZZ3YqI9EEpGQxfxuzAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUIBUjh8oggz1IRhTkD+DYMgsQdJQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2VlN2U0NjdmLThiZmUtNGQ1NC1hZmJlLTI1NjQ2MDQyZWRiZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBARrFoAwDQYJKoZIhvcNAQELBQADggEBAMB70R6TGv3heqD0tcKhJSK0+hWk F6inCgudrZ6NaNY+ef6JxxKFYbCuTM0u6kouAHp7mtQn1v7oAiNGxnfSXjotdMkg uJcA9U3B0m7dl4rk1l8+uoGPi29UL38pWj7mTdmnYeRQxYh3TPieNeLkA6eGQUzP YNvRs2T3rDpHao3T4fA+qRk6tZoxsCBLB4uR2h5+tsypNJtd7cbydF9rZQ2xfZvg zRbZOkIdmgJ4qiRC6sYPaKEiZzdjDmuaq2nBwJsTClKJKcAlFoHrzL8i3CUOLuQT POCQYqlWQ+uCt0yIhvVdzGkCn2S9xwVq/XMiKq+G+ciJCcNO/tsZ1f2GY8w= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:33 2026 by rpki-client