$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afe72fae-961b-43dd-954e-0975cb805c54.roa File: afe72fae-961b-43dd-954e-0975cb805c54.roa (raw, json) Hash identifier: Xt+yJ1KeiDECPZrKTvJ7X/3iXwhoW2zBmlR6r4PekFk= Subject key identifier: 26:22:C7:A8:53:3B:99:9A:8A:46:55:E8:47:98:2A:4F:43:F8:73:7F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 11C312022A87B236E18B229477BB1E75B3BB100B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afe72fae-961b-43dd-954e-0975cb805c54.roa Signing time: Tue 05 May 2026 00:10:43 +0000 ROA not before: Tue 05 May 2026 00:10:43 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.16.0.0/15 maxlen: 15 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:c3:12:02:2a:87:b2:36:e1:8b:22:94:77:bb:1e:75:b3:bb:10:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:10:43 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=c3f218635bb2b082f2b805eb05a7855188c7bcb6f55df1db271d01ad1e6c24ff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:89:71:fe:86:9f:45:62:50:44:9c:92:c6:21: 8e:ee:08:c8:68:a7:1b:b1:57:5a:a7:c4:fd:43:8c: ce:44:0d:5d:e7:ee:29:21:75:0a:bc:5b:1a:b7:31: 1d:9f:16:a2:59:4a:f4:4d:a3:f1:1c:e6:ba:48:a6: d3:39:43:d3:d7:ea:d5:39:02:53:44:a4:93:ab:ae: ef:ff:79:f4:a4:81:9e:c8:d5:09:48:1a:cd:56:92: ea:8b:03:cd:fe:9f:8e:f1:35:9e:a0:5e:41:6b:ac: 80:f8:b2:42:ee:83:7b:8f:70:2d:31:fe:a8:a8:c6: db:aa:19:2c:09:a3:ce:9a:42:93:b4:43:1f:25:bd: 35:d8:1d:0b:b7:07:2e:65:7e:2f:c3:37:8a:a9:89: 46:7c:33:6c:58:fc:b5:d5:1b:c7:e0:3d:51:e4:51: 3d:87:a3:a4:79:47:6d:2e:8e:a2:9d:b9:b1:f0:54: e7:50:5a:6c:ba:dc:61:e1:6b:a3:4a:8e:ac:ab:7a: a2:82:81:7f:ae:f9:b5:f1:cf:6f:e1:76:ec:d7:d0: b1:0d:6d:8c:c2:dd:86:9e:b5:4e:b0:73:49:ea:12: 94:a5:fc:0d:2e:6b:c7:b3:01:ef:fb:be:32:4b:28: 65:af:2d:90:4f:3c:a5:1b:90:3c:22:2b:91:1c:37: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:22:C7:A8:53:3B:99:9A:8A:46:55:E8:47:98:2A:4F:43:F8:73:7F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/afe72fae-961b-43dd-954e-0975cb805c54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.0.0/15 Signature Algorithm: sha256WithRSAEncryption 65:75:08:5e:51:75:d8:e8:53:f4:f1:7e:27:90:e4:aa:d5:71: 06:dd:55:53:b6:5e:92:7d:4a:56:ed:7a:d0:2b:58:11:fc:e0: 24:34:d7:10:4d:21:31:1e:90:5a:80:6c:32:1d:a4:cf:bc:35: 05:74:fe:bc:2e:35:d8:41:67:d0:21:f7:55:c0:bf:48:17:f6: 20:52:17:43:5e:ec:ec:ee:2d:ed:df:b4:57:5b:79:04:eb:31: 12:38:c2:b2:7c:77:90:a5:68:bf:70:86:c8:23:f9:b6:66:93: ee:25:30:f0:7e:44:80:62:0b:66:bb:bb:b8:8e:3e:cf:76:77: 4f:7c:87:b1:a6:09:b7:43:05:c8:ce:a0:96:63:e6:b9:a0:e1: e1:bb:b3:da:6e:4a:46:c4:60:37:d9:76:f5:8d:b9:88:da:40: eb:14:9c:e7:b6:3c:62:cb:db:fb:9d:1e:b4:58:f6:f2:a5:6c: c5:8c:76:b3:31:9a:d0:6b:72:81:8d:69:6b:5f:84:81:23:37: db:c4:de:90:4d:98:8c:a5:1d:6c:1a:64:11:60:4a:50:c2:93: 68:2c:c2:9e:de:a9:03:0e:c7:fb:69:65:77:01:f2:af:2e:8c: ae:9d:03:c1:a3:f0:f0:15:44:ec:b2:e6:8b:69:09:48:f8:49: 2f:40:ea:cb -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUEcMSAiqHsjbhiyKUd7sedbO7EAswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAxMDQzWhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BjM2YyMTg2MzViYjJiMDgyZjJiODA1ZWIwNWE3ODU1MTg4 YzdiY2I2ZjU1ZGYxZGIyNzFkMDFhZDFlNmMyNGZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDiiXH+hp9FYlBEnJLGIY7uCMhopxuxV1qnxP1DjM5EDV3n 7ikhdQq8Wxq3MR2fFqJZSvRNo/Ec5rpIptM5Q9PX6tU5AlNEpJOrru//efSkgZ7I 1QlIGs1WkuqLA83+n47xNZ6gXkFrrID4skLug3uPcC0x/qioxtuqGSwJo86aQpO0 Qx8lvTXYHQu3By5lfi/DN4qpiUZ8M2xY/LXVG8fgPVHkUT2Ho6R5R20ujqKdubHw VOdQWmy63GHha6NKjqyreqKCgX+u+bXxz2/hduzX0LENbYzC3YaetU6wc0nqEpSl /A0ua8ezAe/7vjJLKGWvLZBPPKUbkDwiK5EcNx8JAgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUJiLHqFM7mZqKRlXoR5gqT0P4c38wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2FmZTcyZmFlLTk2MWItNDNkZC05NTRlLTA5NzVjYjgwNWM1NC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwEyEDANBgkqhkiG9w0BAQsFAAOCAQEAZXUIXlF12OhT9PF+J5DkqtVxBt1V U7Zekn1KVu160CtYEfzgJDTXEE0hMR6QWoBsMh2kz7w1BXT+vC412EFn0CH3VcC/ SBf2IFIXQ17s7O4t7d+0V1t5BOsxEjjCsnx3kKVov3CGyCP5tmaT7iUw8H5EgGIL Zru7uI4+z3Z3T3yHsaYJt0MFyM6glmPmuaDh4buz2m5KRsRgN9l29Y25iNpA6xSc 57Y8Ysvb+50etFj28qVsxYx2szGa0GtygY1pa1+EgSM328TekE2YjKUdbBpkEWBK UMKTaCzCnt6pAw7H+2lldwHyry6Mrp0DwaPw8BVE7LLmi2kJSPhJL0Dqyw== -----END CERTIFICATE-----Generated at Wed May 13 01:34:59 2026 by rpki-client