$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa File: 86928c79-5b49-45a0-867b-64a68ed13bd7.roa (raw, json) Hash identifier: XXSsOLQW6T8cREnnSh8xFnMOAWyfaUjCPJHZwPYsSdE= Subject key identifier: F1:55:41:67:AF:7F:1B:46:52:52:2F:7E:59:0F:67:3E:15:5B:21:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5EB4333C7A6E214E0333D6CDEF4C37768EDDDECC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa Signing time: Mon 04 May 2026 00:00:42 +0000 ROA not before: Mon 04 May 2026 00:00:42 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 50.19.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b4:33:3c:7a:6e:21:4e:03:33:d6:cd:ef:4c:37:76:8e:dd:de:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:00:42 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=af905b02d799ffaf290f560085f49f77f734032f3fafd385de09f317156f346b, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:55:74:24:5a:53:f9:63:ac:69:63:e1:c5:97: bd:4a:40:4b:74:22:a0:a6:19:f1:74:08:16:d3:dc: 73:8b:d0:bb:8a:03:ae:9b:bf:ca:fc:6b:b3:5f:e7: ed:40:d4:7f:71:57:16:2e:42:fb:8b:a3:9b:d7:95: ce:4b:04:63:30:42:e5:f8:45:a6:3d:a1:72:71:42: eb:08:bc:f7:54:21:58:8c:82:d1:aa:bf:0e:d8:9f: 3c:de:79:6b:54:48:43:5a:12:89:f2:a6:c2:c1:4e: ee:ee:86:30:c6:e3:22:ce:ee:7e:92:af:5b:7c:de: 1e:f3:d0:65:86:76:97:63:6f:fe:26:a2:1a:c5:2b: cb:6b:0e:fd:06:c9:46:89:3f:5d:e5:c1:e0:45:e2: 8a:ce:36:e3:3a:f7:4c:b1:ac:0c:0f:0c:e3:b8:fd: 92:eb:47:6e:6c:f1:a4:63:39:6d:20:c1:3b:a2:ae: b5:1b:c0:5b:d4:67:3f:4e:f4:e5:12:a4:de:8f:5a: c2:58:43:93:64:55:17:aa:ef:3c:8b:4c:35:6d:03: d8:a8:22:f3:39:68:ae:cf:09:e7:48:ab:66:a1:97: 1d:c5:fc:3f:47:de:d1:8c:a4:f6:d9:ac:7a:fb:0e: f3:b8:17:02:16:97:5e:74:83:ab:7d:0c:2f:07:85: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:55:41:67:AF:7F:1B:46:52:52:2F:7E:59:0F:67:3E:15:5B:21:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/86928c79-5b49-45a0-867b-64a68ed13bd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.208.0/20 Signature Algorithm: sha256WithRSAEncryption 29:11:4a:78:3c:37:10:9b:57:18:62:28:a1:56:4a:11:65:a7: 2e:2d:08:94:49:ac:01:f6:f7:3b:70:7a:35:1b:9f:44:26:bc: 8d:fa:18:3c:b7:0f:fb:22:f9:01:aa:82:0d:a0:68:de:09:4a: 13:2a:68:52:98:c5:59:a0:a1:d2:2b:f2:e4:d6:19:9d:7d:95: df:3e:71:32:e7:8f:36:8f:22:c3:8a:19:f0:0c:39:90:ad:ff: 92:3a:8c:a9:3e:d5:fe:01:5b:a2:a1:b9:21:70:97:d8:e6:5c: fe:1b:cf:c9:da:86:6c:9e:82:62:bd:f3:3a:6a:96:85:ce:8a: be:87:c8:53:55:8f:bb:38:8e:7d:1a:6f:80:25:67:db:35:c1: 39:fa:3d:82:03:dc:99:7f:0a:d4:22:73:98:da:cc:61:a3:23: 51:13:50:3b:88:44:7f:eb:17:f8:04:4d:d9:0c:e8:af:21:2b: 70:39:49:7e:f3:3a:20:d9:60:4a:92:37:b4:13:57:51:6d:11: 7d:ee:1b:f4:3b:35:7b:2b:ae:3f:7f:81:50:4d:53:c8:c5:5e: 79:c7:65:5c:88:f4:e2:4a:8a:c2:86:67:01:e1:42:64:fb:53: 1c:d4:a3:00:f9:1e:77:83:dd:23:80:ff:db:f5:c9:c8:5f:8d: f6:e1:3f:02 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUXrQzPHpuIU4DM9bN70w3do7d3swwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAwMDQyWhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BhZjkwNWIwMmQ3OTlmZmFmMjkwZjU2MDA4NWY0OWY3N2Y3 MzQwMzJmM2ZhZmQzODVkZTA5ZjMxNzE1NmYzNDZiMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCaVXQkWlP5Y6xpY+HFl71KQEt0IqCmGfF0CBbT3HOL0LuK A66bv8r8a7Nf5+1A1H9xVxYuQvuLo5vXlc5LBGMwQuX4RaY9oXJxQusIvPdUIViM gtGqvw7YnzzeeWtUSENaEonypsLBTu7uhjDG4yLO7n6Sr1t83h7z0GWGdpdjb/4m ohrFK8trDv0GyUaJP13lweBF4orONuM690yxrAwPDOO4/ZLrR25s8aRjOW0gwTui rrUbwFvUZz9O9OUSpN6PWsJYQ5NkVReq7zyLTDVtA9ioIvM5aK7PCedIq2ahlx3F /D9H3tGMpPbZrHr7DvO4FwIWl150g6t9DC8Hha5lAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU8VVBZ69/G0ZSUi9+WQ9nPhVbIQwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg2OTI4Yzc5LTViNDktNDVhMC04NjdiLTY0YTY4ZWQxM2JkNy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyE9AwDQYJKoZIhvcNAQELBQADggEBACkRSng8NxCbVxhiKKFWShFlpy4t CJRJrAH29ztwejUbn0QmvI36GDy3D/si+QGqgg2gaN4JShMqaFKYxVmgodIr8uTW GZ19ld8+cTLnjzaPIsOKGfAMOZCt/5I6jKk+1f4BW6KhuSFwl9jmXP4bz8nahmye gmK98zpqloXOir6HyFNVj7s4jn0ab4AlZ9s1wTn6PYID3Jl/CtQic5jazGGjI1ET UDuIRH/rF/gETdkM6K8hK3A5SX7zOiDZYEqSN7QTV1FtEX3uG/Q7NXsrrj9/gVBN U8jFXnnHZVyI9OJKisKGZwHhQmT7UxzUowD5HneD3SOA/9v1ychfjfbhPwI= -----END CERTIFICATE-----Generated at Wed May 13 01:26:46 2026 by rpki-client