$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa File: c26c0254-1071-467d-bd2c-f81f3ba6a671.roa (raw, json) Hash identifier: asU5qYY/YZVBLsiM5CLbnZ+Fc9cR0qIvhWSDxrJwRCc= Subject key identifier: 31:E5:02:86:AC:64:E9:02:93:D6:93:53:F7:40:F8:37:7E:48:93:BC Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 39A63E08CAC6461F4BAFFC59C00A9433364E7D87 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa Signing time: Tue 05 May 2026 00:21:19 +0000 ROA not before: Tue 05 May 2026 00:21:19 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 50.19.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a6:3e:08:ca:c6:46:1f:4b:af:fc:59:c0:0a:94:33:36:4e:7d:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 5 00:21:19 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=6f62f43b3f6d19fba98accfbd0a9544ca8a23a8a403a3bae785a815818a372d8, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:87:d3:b5:58:59:3b:1b:b7:38:63:98:fe:1e: 15:dc:34:15:45:33:eb:d9:61:a8:a7:3f:92:e5:89: 17:21:f6:bf:f8:2e:95:db:cc:4d:aa:ca:e5:0e:f9: a8:fe:cb:46:1a:d4:94:ad:10:c0:5d:68:f0:36:83: 21:34:bf:b6:74:fa:59:85:22:52:1b:51:7e:e8:61: 12:b1:65:65:f7:71:e0:7c:f2:ee:28:e8:12:59:02: 21:10:d4:27:ec:0f:78:9d:b5:97:e4:f0:af:6f:f5: 6e:ce:03:f1:cc:51:41:db:96:da:ba:34:ae:65:b2: df:ad:b1:27:ac:ae:1c:76:0c:96:de:1e:d8:08:2b: b3:68:fc:ce:f4:8c:bd:19:c4:e1:3d:15:34:f4:71: c9:91:4e:53:c6:ca:87:41:8f:4c:49:b7:e2:67:37: c0:96:d7:45:1e:0d:de:d5:81:a8:50:98:9a:07:e1: 56:95:fb:34:b0:41:b5:dc:d1:66:e2:c2:11:64:4a: a9:58:db:f7:00:62:17:67:30:5b:ac:3f:90:79:6c: 08:1a:a3:49:44:7d:91:63:f9:f0:0f:bf:79:c7:b6: ed:e1:c6:ad:36:99:eb:fa:97:15:5e:2d:e8:18:7e: 0f:be:c4:74:66:1a:a7:3e:71:07:9d:a8:ff:c6:7f: 48:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E5:02:86:AC:64:E9:02:93:D6:93:53:F7:40:F8:37:7E:48:93:BC X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/c26c0254-1071-467d-bd2c-f81f3ba6a671.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.19.0.0/17 Signature Algorithm: sha256WithRSAEncryption 86:a8:5d:21:80:80:dc:43:0f:9e:49:a7:dd:0e:a5:81:a6:78: 28:24:0d:d0:ff:a0:53:50:37:0a:3a:a6:62:6b:54:85:de:48: eb:18:cc:3a:ac:ba:b0:bb:5d:0e:87:f2:a3:bb:5a:2a:5f:ea: de:90:5e:43:35:69:34:16:76:08:c0:98:d8:c9:ce:96:7c:fe: ab:a8:2a:ed:b1:bf:8d:99:b4:86:4f:12:6e:16:3c:ce:70:bd: 65:4d:74:73:84:5f:51:42:10:fd:23:09:df:a3:e9:71:48:f9: 97:32:c1:f4:87:04:78:bd:05:dc:09:58:08:b8:62:c3:86:9c: da:18:2c:12:4d:4e:2a:6b:fb:62:64:c7:ff:8d:e8:d2:af:d4: 0e:17:7f:d3:05:55:dd:77:11:f0:29:60:12:1d:e7:60:80:fb: 1a:de:25:38:0b:1d:f4:46:d2:5b:29:77:9f:dd:a6:07:66:43: 78:ea:68:c1:2c:15:33:8c:1d:c4:c7:72:ba:bd:54:5d:3c:82: 02:3d:de:bb:a5:17:63:e2:78:b6:4c:81:87:ea:45:d5:17:95: 18:34:c4:e6:d8:d4:7a:65:39:bd:a0:f3:d2:fc:5d:18:84:31: b8:a9:f9:2f:5c:9a:40:26:33:fc:ca:5c:a8:78:d3:39:ce:20: 76:47:6f:d6 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUOaY+CMrGRh9Lr/xZwAqUMzZOfYcwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA1MDAyMTE5WhcNMjYwODAzMjM1OTU5 WjB6MUkwRwYDVQQFE0A2ZjYyZjQzYjNmNmQxOWZiYTk4YWNjZmJkMGE5NTQ0Y2E4 YTIzYThhNDAzYTNiYWU3ODVhODE1ODE4YTM3MmQ4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCch9O1WFk7G7c4Y5j+HhXcNBVFM+vZYainP5LliRch9r/4 LpXbzE2qyuUO+aj+y0Ya1JStEMBdaPA2gyE0v7Z0+lmFIlIbUX7oYRKxZWX3ceB8 8u4o6BJZAiEQ1CfsD3idtZfk8K9v9W7OA/HMUUHbltq6NK5lst+tsSesrhx2DJbe HtgIK7No/M70jL0ZxOE9FTT0ccmRTlPGyodBj0xJt+JnN8CW10UeDd7VgahQmJoH 4VaV+zSwQbXc0WbiwhFkSqlY2/cAYhdnMFusP5B5bAgao0lEfZFj+fAPv3nHtu3h xq02mev6lxVeLegYfg++xHRmGqc+cQedqP/Gf0ijAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUMeUChqxk6QKT1pNT90D4N35Ik7wwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2MyNmMwMjU0LTEwNzEtNDY3ZC1iZDJjLWY4MWYzYmE2YTY3MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcyEwAwDQYJKoZIhvcNAQELBQADggEBAIaoXSGAgNxDD55Jp90OpYGmeCgk DdD/oFNQNwo6pmJrVIXeSOsYzDqsurC7XQ6H8qO7Wipf6t6QXkM1aTQWdgjAmNjJ zpZ8/quoKu2xv42ZtIZPEm4WPM5wvWVNdHOEX1FCEP0jCd+j6XFI+ZcywfSHBHi9 BdwJWAi4YsOGnNoYLBJNTipr+2Jkx/+N6NKv1A4Xf9MFVd13EfApYBId52CA+xre JTgLHfRG0lspd5/dpgdmQ3jqaMEsFTOMHcTHcrq9VF08ggI93rulF2PieLZMgYfq RdUXlRg0xObY1HplOb2g89L8XRiEMbip+S9cmkAmM/zKXKh40znOIHZHb9Y= -----END CERTIFICATE-----Generated at Wed May 13 04:01:02 2026 by rpki-client