$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa File: 6a28385f-c608-4722-b24d-8ffeb91ee27c.roa (raw, json) Hash identifier: RLdDPmyAswdaoP2nHxcvta2u1TiuoVI3NaodG3pmUI4= Subject key identifier: CD:C4:04:70:ED:E4:FF:85:03:AC:62:F1:AD:65:89:E1:96:27:18:EC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 609FCAA862E40BA6795373AB97B3CE1ED0BE8214 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa Signing time: Tue 05 May 2026 00:21:22 +0000 ROA not before: Tue 05 May 2026 00:21:22 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.19.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:9f:ca:a8:62:e4:0b:a6:79:53:73:ab:97:b3:ce:1e:d0:be:82:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:21:22 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=adabc9e97178f20757ecba93ffcbdba3247595e3122adadb2376fbb44e080e62, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f0:9d:75:17:b4:f1:8b:6b:73:82:75:90:4b: ad:5d:67:da:f6:e9:0e:f9:0a:81:7b:b7:36:5f:ce: ad:9f:53:c4:32:30:dd:f6:fc:96:1c:eb:e2:cd:02: 4f:93:17:e7:8a:42:87:9f:62:4c:be:c3:92:6d:ea: b3:8f:00:a9:6f:d0:b4:8e:a7:23:59:0a:29:1e:88: 06:bf:3d:d2:f5:25:28:42:11:6f:e8:90:46:0c:de: 51:44:84:4a:58:26:f1:f0:13:a1:1b:5f:1a:5e:b9: 1b:b6:80:50:3b:20:d7:d8:2e:31:a4:f4:5b:33:da: 51:ce:ed:d4:87:75:a9:f4:9e:a1:c3:05:8d:0e:9b: d0:c7:49:69:6b:b7:a6:f3:ef:aa:5a:97:26:3a:c2: 65:9e:41:71:44:91:ec:2b:99:b8:64:ad:70:79:4c: 1c:2e:c1:c3:35:64:e2:71:dd:ff:df:cf:6b:f3:4a: b4:75:53:85:28:b9:c0:90:44:5c:da:74:62:33:c9: b0:28:bb:5e:64:1a:99:38:3b:e6:a6:b0:9d:ca:3e: 95:b7:56:eb:4e:35:ba:0d:aa:b4:22:13:9b:2e:da: 5f:81:e8:39:fa:9d:15:6b:82:17:c1:80:f6:97:87: ea:01:97:70:5f:98:c7:3c:03:b8:69:b8:e2:b3:52: e3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:C4:04:70:ED:E4:FF:85:03:AC:62:F1:AD:65:89:E1:96:27:18:EC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/6a28385f-c608-4722-b24d-8ffeb91ee27c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.128.0/18 Signature Algorithm: sha256WithRSAEncryption b6:92:df:90:35:8e:99:52:3d:ba:90:67:5f:13:f9:51:1b:b6: bd:de:91:da:cd:a1:c1:f5:1b:46:3b:fd:9e:9e:6f:05:96:b8: 5e:11:b3:3b:cb:6a:97:61:24:d3:a2:d8:53:fa:ca:f0:f7:ee: 9d:fc:2d:54:5c:28:c3:2a:50:22:0a:5c:29:af:68:0e:6b:ea: 30:f9:fe:34:c8:e9:63:69:31:26:9b:4f:d5:64:b7:60:9f:31: 6c:0e:eb:8c:b7:a9:b2:f0:b5:93:d5:d0:8b:22:b4:42:d5:c6: 55:e0:c9:9b:73:12:1a:96:66:0f:88:48:8a:1b:46:e8:40:68: 21:6d:e6:10:88:82:45:5a:57:7a:75:6d:32:99:04:37:a1:ee: 9c:28:4a:27:e5:1a:9e:81:a8:cf:82:24:da:02:14:63:67:8b: b5:73:d5:7d:d2:59:60:38:f4:11:e7:1f:76:d3:15:b5:ae:69: a9:1d:5f:13:b4:d4:0e:00:3a:c4:f6:5c:5c:97:67:6c:f7:8c: ba:00:8a:6b:00:ff:0b:a2:11:97:eb:6f:98:a4:78:cb:7f:60: 4f:de:af:df:a1:ca:d7:57:5c:e2:4b:3e:e7:30:fc:2a:fb:44: 4d:63:06:2d:9f:e5:55:78:b7:cc:71:a0:59:a5:cd:77:9c:23: 9c:1a:27:f4 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYJ/KqGLkC6Z5U3Orl7POHtC+ghQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAyMTIyWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZGFiYzllOTcxNzhmMjA3NTdlY2JhOTNmZmNiZGJhMzI0 NzU5NWUzMTIyYWRhZGIyMzc2ZmJiNDRlMDgwZTYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDg8J11F7Txi2tzgnWQS61dZ9r26Q75CoF7tzZfzq2fU8Qy MN32/JYc6+LNAk+TF+eKQoefYky+w5Jt6rOPAKlv0LSOpyNZCikeiAa/PdL1JShC EW/okEYM3lFEhEpYJvHwE6EbXxpeuRu2gFA7INfYLjGk9Fsz2lHO7dSHdan0nqHD BY0Om9DHSWlrt6bz76palyY6wmWeQXFEkewrmbhkrXB5TBwuwcM1ZOJx3f/fz2vz SrR1U4UoucCQRFzadGIzybAou15kGpk4O+amsJ3KPpW3VutONboNqrQiE5su2l+B 6Dn6nRVrghfBgPaXh+oBl3BfmMc8A7hpuOKzUuPVAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUzcQEcO3k/4UDrGLxrWWJ4ZYnGOwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzZhMjgzODVmLWM2MDgtNDcyMi1iMjRkLThmZmViOTFlZTI3Yy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAYyE4AwDQYJKoZIhvcNAQELBQADggEBALaS35A1jplSPbqQZ18T+VEbtr3e kdrNocH1G0Y7/Z6ebwWWuF4RszvLapdhJNOi2FP6yvD37p38LVRcKMMqUCIKXCmv aA5r6jD5/jTI6WNpMSabT9Vkt2CfMWwO64y3qbLwtZPV0IsitELVxlXgyZtzEhqW Zg+ISIobRuhAaCFt5hCIgkVaV3p1bTKZBDeh7pwoSiflGp6BqM+CJNoCFGNni7Vz 1X3SWWA49BHnH3bTFbWuaakdXxO01A4AOsT2XFyXZ2z3jLoAimsA/wuiEZfrb5ik eMt/YE/er9+hytdXXOJLPucw/Cr7RE1jBi2f5VV4t8xxoFmlzXecI5waJ/Q= -----END CERTIFICATE-----Generated at Tue May 12 21:55:19 2026 by rpki-client