$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e20983f-78cd-411a-8209-cb234b78525f.roa File: 0e20983f-78cd-411a-8209-cb234b78525f.roa (raw, json) Hash identifier: C+Zf6qfN/P6nFg7YuIWNcW64jSju08+PclEDvctOTpY= Subject key identifier: 26:B2:74:DF:27:0D:B5:31:CB:B3:1A:2C:1D:0A:04:61:E6:58:2E:25 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 2285BC59A93331EAF220FE5720FA2969BB6312A8 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e20983f-78cd-411a-8209-cb234b78525f.roa Signing time: Tue 05 May 2026 00:31:22 +0000 ROA not before: Tue 05 May 2026 00:31:22 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 50.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:85:bc:59:a9:33:31:ea:f2:20:fe:57:20:fa:29:69:bb:63:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:31:22 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=76b09d3996c110a11cd925f37213ca6abcc8a25353cd8b552a32b7b935412b6b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:94:56:ea:13:e2:44:0c:6c:22:31:d2:13: 58:fe:51:15:0a:28:39:d4:b6:6d:fe:95:eb:6c:df: d4:40:b3:e1:6c:a9:51:c0:70:a3:b8:26:27:cf:91: c1:3c:3e:c1:6a:2c:bd:29:cd:c5:3a:c8:9b:2b:30: e3:98:17:6d:31:03:fc:14:64:17:5b:5a:71:58:93: d5:22:2b:ff:1d:4c:3a:ca:ad:74:d4:c6:37:64:51: 4b:a1:75:49:b0:64:2a:d6:e9:58:5f:5a:4c:f4:6e: 96:29:1e:0b:4c:c5:76:9b:ab:f6:7b:8c:7b:04:22: 7f:e8:62:5b:15:99:99:be:69:49:81:c6:a7:7c:f8: 16:95:45:d2:a7:63:14:8e:1c:1d:94:d0:ed:8e:ca: f5:f2:1f:2a:1d:96:de:03:a4:ec:1d:1d:14:ca:48: 06:a1:3e:0f:da:0d:71:b6:ff:6b:31:62:2f:1f:93: c6:5a:8e:cd:84:22:68:3d:8e:91:7e:63:ba:f1:25: 55:ca:cc:6c:09:42:90:2d:7a:5a:cd:9e:9b:2d:6b: 17:97:a5:24:60:69:3d:c8:25:5a:d2:36:bb:f2:eb: f8:fc:47:4b:09:07:6c:aa:34:94:b7:cd:35:2f:3e: e4:96:10:92:42:75:bf:c4:61:6e:12:51:74:69:ce: de:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B2:74:DF:27:0D:B5:31:CB:B3:1A:2C:1D:0A:04:61:E6:58:2E:25 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/0e20983f-78cd-411a-8209-cb234b78525f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.0.0/16 Signature Algorithm: sha256WithRSAEncryption 0a:c6:31:86:48:9c:21:13:04:df:20:3e:a4:f5:24:42:5b:be: f7:3d:9c:bb:cf:5e:17:b3:d2:d8:90:9c:0b:d8:8c:4e:a8:34: 76:ea:84:a5:84:34:6a:f9:89:60:29:2e:3c:00:d2:24:24:4b: 95:1c:61:ac:fd:5c:31:92:6e:c0:77:b4:40:df:08:d1:25:18: 6c:22:9a:b3:92:6b:9d:a9:31:73:3d:31:e6:7b:11:0e:26:14: b2:4c:79:f2:3e:a3:4b:11:c5:05:61:08:33:b8:b7:ea:c1:3d: 1a:38:4d:2c:37:f5:e4:1e:b4:8a:6e:e3:68:72:e8:95:54:e3: d1:3c:98:5c:58:2d:57:b4:38:85:89:a1:a4:0b:37:38:06:25: 72:c2:8b:8f:a6:07:93:7f:be:4f:5e:bf:1e:8d:39:9a:6f:d8: 74:b6:65:70:9a:a0:f6:b9:cd:a9:a7:37:71:af:a0:20:43:14: 8b:0c:9f:e7:e3:b7:a5:da:21:e1:d7:6a:57:1d:4e:44:73:8c: f4:25:1d:b0:71:86:6e:32:98:93:f5:d5:67:a0:e9:11:ef:e6: 46:a2:2d:15:5f:83:25:2e:95:7c:3b:08:7a:95:7d:4b:e6:d1: 2f:e4:07:64:23:98:16:21:e5:22:61:a0:9b:6b:9a:73:23:6a: 56:3b:c9:eb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUIoW8WakzMeryIP5XIPopabtjEqgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAzMTIyWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A3NmIwOWQzOTk2YzExMGExMWNkOTI1ZjM3MjEzY2E2YWJj YzhhMjUzNTNjZDhiNTUyYTMyYjdiOTM1NDEyYjZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC5qJRW6hPiRAxsIjHSE1j+URUKKDnUtm3+lets39RAs+Fs qVHAcKO4JifPkcE8PsFqLL0pzcU6yJsrMOOYF20xA/wUZBdbWnFYk9UiK/8dTDrK rXTUxjdkUUuhdUmwZCrW6VhfWkz0bpYpHgtMxXabq/Z7jHsEIn/oYlsVmZm+aUmB xqd8+BaVRdKnYxSOHB2U0O2OyvXyHyodlt4DpOwdHRTKSAahPg/aDXG2/2sxYi8f k8Zajs2EImg9jpF+Y7rxJVXKzGwJQpAtelrNnpstaxeXpSRgaT3IJVrSNrvy6/j8 R0sJB2yqNJS3zTUvPuSWEJJCdb/EYW4SUXRpzt71AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJrJ03ycNtTHLsxosHQoEYeZYLiUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzBlMjA5ODNmLTc4Y2QtNDExYS04MjA5LWNiMjM0Yjc4NTI1Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwAyEDANBgkqhkiG9w0BAQsFAAOCAQEACsYxhkicIRME3yA+pPUkQlu+9z2c u89eF7PS2JCcC9iMTqg0duqEpYQ0avmJYCkuPADSJCRLlRxhrP1cMZJuwHe0QN8I 0SUYbCKas5Jrnakxcz0x5nsRDiYUskx58j6jSxHFBWEIM7i36sE9GjhNLDf15B60 im7jaHLolVTj0TyYXFgtV7Q4hYmhpAs3OAYlcsKLj6YHk3++T16/Ho05mm/YdLZl cJqg9rnNqac3ca+gIEMUiwyf5+O3pdoh4ddqVx1ORHOM9CUdsHGGbjKYk/XVZ6Dp Ee/mRqItFV+DJS6VfDsIepV9S+bRL+QHZCOYFiHlImGgm2uacyNqVjvJ6w== -----END CERTIFICATE-----Generated at Wed May 13 01:33:49 2026 by rpki-client