$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa File: e73183cc-2907-425e-bd2b-10fd1986e4bd.roa (raw, json) Hash identifier: gSzx+ds1hYhpmK/xtuKe8L73mS4jd4DD2avuyw3pJWo= Subject key identifier: F4:A8:61:AA:DF:D2:D3:4D:7B:6E:E5:45:E7:96:34:FC:EE:D8:51:95 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5879075569442EA359CC1786062010E144F01AA3 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa Signing time: Sat 14 Feb 2026 00:30:54 +0000 ROA not before: Sat 14 Feb 2026 00:30:54 +0000 ROA not after: Fri 15 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 50.16.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:79:07:55:69:44:2e:a3:59:cc:17:86:06:20:10:e1:44:f0:1a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 14 00:30:54 2026 GMT Not After : May 15 23:59:59 2026 GMT Subject: serialNumber=91402d5345f3f88069e9cfb29a4344047381c8eb137a4edc9fa7225d6dd8f1a0, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d6:0f:e0:06:aa:7a:2d:19:c2:d3:d9:bf:51: 6b:b7:cb:1b:8a:2c:dd:59:ef:4c:c8:6a:15:73:c3: dd:76:8d:37:2d:0c:e4:95:0e:d0:08:7f:a2:27:7e: b4:f1:38:7b:7b:a1:28:7e:a1:22:5a:41:bc:51:2c: bb:8f:86:4b:4a:55:5e:a9:a5:df:79:91:5a:10:58: 16:dc:d6:a7:68:8b:5a:67:06:ba:1d:b4:aa:ce:40: 22:33:d2:27:ba:be:b8:62:0e:d6:6b:6a:04:08:59: 80:e2:56:69:94:0e:ed:f1:61:ee:59:74:74:a4:31: 89:4e:88:9f:a0:2a:0f:4d:e6:e2:2a:17:e8:73:aa: ae:d7:fb:59:92:13:51:16:53:8c:fb:71:f7:6e:68: b8:9e:66:ba:49:d3:1d:6d:19:43:84:cb:64:af:c5: 34:75:e5:e6:34:9b:dc:b4:5a:8e:e4:57:41:cd:6d: 0d:d6:8d:84:3c:3d:4c:40:ac:66:9c:42:1f:3f:16: 33:b0:b0:d1:b7:e0:71:e3:86:05:58:67:14:27:6f: c5:ac:be:bc:d7:7c:47:3f:cd:9f:a8:eb:e4:04:e1: 71:a9:a4:b4:86:a9:16:70:29:be:e0:c7:ec:93:1b: 2d:b6:cf:6c:28:e6:a5:a3:35:1b:5f:c1:7b:ac:94: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A8:61:AA:DF:D2:D3:4D:7B:6E:E5:45:E7:96:34:FC:EE:D8:51:95 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/e73183cc-2907-425e-bd2b-10fd1986e4bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 50.16.0.0/17 Signature Algorithm: sha256WithRSAEncryption 32:4f:ee:41:d7:cc:87:08:58:8b:4a:d9:d4:5e:74:a2:a5:b4: 48:4e:1c:17:81:64:a7:ad:4d:12:7c:5c:ac:f8:c9:da:5b:20: 09:35:b2:4a:35:83:25:62:1f:55:8c:67:b6:ca:a9:cd:53:ab: 0a:85:cb:a1:f9:75:ee:1c:cd:ad:74:83:97:dc:b3:d7:95:9e: 99:ec:7a:03:a4:9f:23:83:2d:98:4b:43:76:e5:d3:ec:4c:9b: bf:da:90:ed:0e:fe:40:99:aa:01:5b:94:c2:69:89:10:c5:13: 3a:30:a6:ba:51:20:b7:d8:a7:c2:c6:41:98:b5:90:60:7a:a2: 6a:04:de:12:38:e0:cb:65:aa:22:bb:aa:3a:6d:98:f1:d2:bc: d9:9b:e6:db:c7:6e:52:c5:02:a2:06:9c:5b:c1:99:2b:65:51: 8d:e6:1f:04:09:e5:d3:be:c6:c7:85:f7:bd:10:6d:94:30:81: 66:3d:8d:6a:c3:48:44:9b:51:56:b1:19:1f:bb:ad:a6:be:62: d0:56:cf:76:90:1a:39:a7:90:25:46:cd:7a:63:bb:68:b4:81: fa:51:95:9c:c6:50:f3:ff:c6:46:4e:ac:06:ca:e3:04:a1:b0: ed:ee:76:3d:28:e9:69:91:5b:b0:59:a2:f5:cd:6e:d2:64:21: 01:18:99:8c -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUWHkHVWlELqNZzBeGBiAQ4UTwGqMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjE0MDAzMDU0WhcNMjYwNTE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A5MTQwMmQ1MzQ1ZjNmODgwNjllOWNmYjI5YTQzNDQwNDcz ODFjOGViMTM3YTRlZGM5ZmE3MjI1ZDZkZDhmMWEwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDo1g/gBqp6LRnC09m/UWu3yxuKLN1Z70zIahVzw912jTct DOSVDtAIf6InfrTxOHt7oSh+oSJaQbxRLLuPhktKVV6ppd95kVoQWBbc1qdoi1pn BrodtKrOQCIz0ie6vrhiDtZragQIWYDiVmmUDu3xYe5ZdHSkMYlOiJ+gKg9N5uIq F+hzqq7X+1mSE1EWU4z7cfduaLieZrpJ0x1tGUOEy2SvxTR15eY0m9y0Wo7kV0HN bQ3WjYQ8PUxArGacQh8/FjOwsNG34HHjhgVYZxQnb8WsvrzXfEc/zZ+o6+QE4XGp pLSGqRZwKb7gx+yTGy22z2wo5qWjNRtfwXuslJHrAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU9Khhqt/S0017buVF55Y0/O7YUZUwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2U3MzE4M2NjLTI5MDctNDI1ZS1iZDJiLTEwZmQxOTg2ZTRiZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcyEAAwDQYJKoZIhvcNAQELBQADggEBADJP7kHXzIcIWItK2dRedKKltEhO HBeBZKetTRJ8XKz4ydpbIAk1sko1gyViH1WMZ7bKqc1TqwqFy6H5de4cza10g5fc s9eVnpnsegOknyODLZhLQ3bl0+xMm7/akO0O/kCZqgFblMJpiRDFEzowprpRILfY p8LGQZi1kGB6omoE3hI44MtlqiK7qjptmPHSvNmb5tvHblLFAqIGnFvBmStlUY3m HwQJ5dO+xseF970QbZQwgWY9jWrDSESbUVaxGR+7raa+YtBWz3aQGjmnkCVGzXpj u2i0gfpRlZzGUPP/xkZOrAbK4wShsO3udj0o6WmRW7BZovXNbtJkIQEYmYw= -----END CERTIFICATE-----Generated at Sun Mar 1 22:12:43 2026 by rpki-client