$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a9db74d-2685-478a-8752-9a852c0bc6fc.roa File: 9a9db74d-2685-478a-8752-9a852c0bc6fc.roa (raw, json) Hash identifier: rF7cCNK9geSh1u2L1If5EXfdZvn+GmRKLfXQ6rcqpHI= Subject key identifier: 18:57:CE:21:2A:35:E6:A9:E0:A9:B8:4C:55:46:9E:95:87:84:61:2F Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 03A0331C8DD3CA7A7C997CA7C1396111FA51707B Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a9db74d-2685-478a-8752-9a852c0bc6fc.roa Signing time: Mon 04 May 2026 00:11:16 +0000 ROA not before: Mon 04 May 2026 00:11:16 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 50.16.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:a0:33:1c:8d:d3:ca:7a:7c:99:7c:a7:c1:39:61:11:fa:51:70:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:11:16 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=547f113c081e3f8bc8d7fc3e8a3de229a9de920a57ea2780658831f7f07b8d58, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:7a:8a:22:3e:f9:2e:b1:59:31:a0:0c:cc:dd: 3a:dc:7d:ea:55:a3:28:ed:19:a9:98:8c:dc:65:4b: b2:53:01:29:cf:27:e8:84:9f:bb:f6:d0:7b:f6:30: 2d:4d:ba:fd:4d:25:7b:8f:fe:ec:21:82:a5:82:25: b7:6a:aa:ea:e6:60:85:f2:53:d1:5c:4c:c1:8d:c1: 8f:02:47:36:74:e0:55:93:f1:a4:6c:84:fb:fd:b1: 4e:f9:51:3f:48:14:b8:c4:56:b4:a9:88:c4:be:34: cb:04:7f:fd:86:94:e5:56:f3:52:73:b7:52:19:e0: 03:7e:c7:52:e6:64:16:7a:b9:61:7a:fa:5c:eb:5f: cc:9e:4d:d6:9a:72:99:0b:cd:c0:ec:95:ae:2a:29: d1:04:f5:03:22:b2:e8:64:7b:67:cd:f2:16:04:d3: 9d:67:e0:04:d9:03:b3:0b:54:68:d7:d6:95:e3:63: cf:74:4a:60:80:49:30:3b:55:05:0a:1a:21:5c:92: 43:36:2d:eb:07:e7:3b:4a:7a:3b:62:68:54:a7:39: 4c:d7:e7:b6:77:10:e4:8a:fa:7b:4f:2e:9a:d5:80: cd:85:b0:75:25:ed:d9:30:4d:cb:53:fc:59:b2:96: 6a:80:72:96:16:fa:6c:82:a1:a9:57:66:84:21:26: 4e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:57:CE:21:2A:35:E6:A9:E0:A9:B8:4C:55:46:9E:95:87:84:61:2F X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/9a9db74d-2685-478a-8752-9a852c0bc6fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.160.0/20 Signature Algorithm: sha256WithRSAEncryption bd:e2:16:32:21:6a:3a:2f:be:51:11:b8:33:f9:39:43:c5:8a: 80:60:d7:1c:64:81:87:cd:c6:9a:43:0d:57:87:6b:6a:ce:e0: 4f:31:ed:f5:82:14:b6:61:64:5c:f9:4f:2c:49:b9:3d:d7:00: 20:4d:09:76:4e:8f:6c:59:8d:bb:48:14:f7:82:d6:bb:76:9b: 9d:b4:bb:f2:95:3e:27:43:18:23:20:da:2f:66:cc:8a:78:f5: a3:02:f4:3f:9a:1a:40:81:5a:e5:d0:29:97:98:98:2d:b1:7c: 9b:cb:1e:68:73:77:03:28:51:33:e1:24:18:27:83:4b:20:c8: 70:e5:7b:57:0a:42:5c:d1:26:c1:7b:5f:24:62:89:09:11:0e: 5c:cf:57:51:f3:d3:be:17:ab:c2:fa:3c:29:11:e2:46:e7:bf: fe:f9:e1:3a:1c:42:c7:46:01:f7:2c:3a:9b:07:7d:0b:d0:78: 69:38:fc:a1:d0:3a:2c:38:78:5d:a7:d8:8d:a5:b7:cd:63:77: 4a:ec:46:58:81:e5:a3:87:8d:dc:0b:ef:fe:4d:61:3d:c5:84: c2:8f:ba:28:d0:2e:66:2d:25:4a:ed:17:54:d5:e1:69:04:d0: de:60:32:96:ab:83:1c:6b:8f:c4:80:7e:30:e7:bd:68:46:4d: 4c:58:90:ea -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUA6AzHI3Tynp8mXynwTlhEfpRcHswDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAxMTE2WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0A1NDdmMTEzYzA4MWUzZjhiYzhkN2ZjM2U4YTNkZTIyOWE5 ZGU5MjBhNTdlYTI3ODA2NTg4MzFmN2YwN2I4ZDU4MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKeooiPvkusVkxoAzM3TrcfepVoyjtGamYjNxlS7JTASnP J+iEn7v20Hv2MC1Nuv1NJXuP/uwhgqWCJbdqqurmYIXyU9FcTMGNwY8CRzZ04FWT 8aRshPv9sU75UT9IFLjEVrSpiMS+NMsEf/2GlOVW81Jzt1IZ4AN+x1LmZBZ6uWF6 +lzrX8yeTdaacpkLzcDsla4qKdEE9QMisuhke2fN8hYE051n4ATZA7MLVGjX1pXj Y890SmCASTA7VQUKGiFckkM2LesH5ztKejtiaFSnOUzX57Z3EOSK+ntPLprVgM2F sHUl7dkwTctT/FmylmqAcpYW+myCoalXZoQhJk6BAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUGFfOISo15qngqbhMVUaelYeEYS8wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzlhOWRiNzRkLTI2ODUtNDc4YS04NzUyLTlhODUyYzBiYzZmYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAQyEKAwDQYJKoZIhvcNAQELBQADggEBAL3iFjIhajovvlERuDP5OUPFioBg 1xxkgYfNxppDDVeHa2rO4E8x7fWCFLZhZFz5TyxJuT3XACBNCXZOj2xZjbtIFPeC 1rt2m520u/KVPidDGCMg2i9mzIp49aMC9D+aGkCBWuXQKZeYmC2xfJvLHmhzdwMo UTPhJBgng0sgyHDle1cKQlzRJsF7XyRiiQkRDlzPV1Hz074Xq8L6PCkR4kbnv/75 4TocQsdGAfcsOpsHfQvQeGk4/KHQOiw4eF2n2I2lt81jd0rsRliB5aOHjdwL7/5N YT3FhMKPuijQLmYtJUrtF1TV4WkE0N5gMpargxxrj8SAfjDnvWhGTUxYkOo= -----END CERTIFICATE-----Generated at Mon May 4 21:38:42 2026 by rpki-client