$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d29c08-0966-47c8-b962-a3f76c7d8585.roa File: 53d29c08-0966-47c8-b962-a3f76c7d8585.roa (raw, json) Hash identifier: QheIB/xja2MtIxKYE4X79iENJM4EY1zjUWJY9mfXbew= Subject key identifier: 40:8D:BA:6A:59:CC:6F:34:35:06:25:4E:9A:B5:93:DF:7A:16:48:0C Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 154DD8B246CE65913CD0E066DBD8421A338C19C1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d29c08-0966-47c8-b962-a3f76c7d8585.roa Signing time: Mon 04 May 2026 00:30:14 +0000 ROA not before: Mon 04 May 2026 00:30:14 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 93.77.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4d:d8:b2:46:ce:65:91:3c:d0:e0:66:db:d8:42:1a:33:8c:19:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: May 4 00:30:14 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=0789d8e58f8267a23f8e423212b4719b15a22c68af33a2fdf85de084ba130dd2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9a:eb:7c:b0:fa:35:aa:ca:9c:18:4c:43:f5: 5f:f9:81:52:9d:ca:89:92:50:86:df:d3:6f:07:06: 03:9e:2e:a9:d2:3b:8c:a0:e8:28:34:3c:cb:48:c8: 0e:31:16:ef:2c:41:06:6a:42:4d:9c:96:31:13:b1: 36:c0:cc:11:63:38:68:f4:30:c6:63:cd:da:ca:00: e0:f7:a9:f8:38:59:36:a2:d8:79:98:02:26:99:84: 75:1d:73:ec:cb:5d:ff:09:7e:f5:a9:2c:0f:a4:01: 0e:1f:17:b9:f3:66:1e:ae:31:9e:38:cd:61:f8:a6: 9f:90:ee:d1:f7:84:e9:8f:05:e3:5d:e5:d4:10:b0: f5:94:be:d0:cf:4f:de:22:13:3e:12:c6:4c:b6:d8: 06:9c:50:38:b3:d3:9c:44:ca:db:d2:35:27:5f:09: 09:d4:74:eb:8b:bd:47:9e:55:e1:1c:6d:49:61:55: 20:d2:c4:36:57:2e:4f:f4:e1:1d:a1:98:cb:93:66: 93:d8:9a:eb:0a:2e:a9:34:c6:2c:94:76:0e:35:a4: 99:72:d0:75:72:9a:f9:2b:24:6e:72:d7:17:4d:0d: 36:66:b9:eb:b4:9f:19:a0:de:09:c9:78:5d:04:55: 4b:ef:66:84:50:db:0f:c9:57:e4:0f:68:63:76:e8: 80:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8D:BA:6A:59:CC:6F:34:35:06:25:4E:9A:B5:93:DF:7A:16:48:0C X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/53d29c08-0966-47c8-b962-a3f76c7d8585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.77.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:fc:07:7e:b8:1f:3d:f6:4d:4b:09:94:2f:13:c6:54:b9:4f: 43:53:e5:dd:43:86:48:e6:c4:68:81:ee:ed:74:2e:7a:7f:b1: ce:79:6d:68:e3:3c:61:a5:93:ae:8c:9f:ac:d7:91:b4:63:5d: a8:46:6d:14:c5:2c:a5:aa:a0:2c:6d:d1:22:ae:6e:a0:55:a2: 7a:c5:9e:65:ff:99:3b:da:04:1c:b4:1b:a0:06:58:bd:7e:c9: bb:c0:2c:7c:ad:61:51:37:3e:a6:0b:26:d0:c1:c9:9b:9a:2c: a8:e7:42:fa:f3:9c:a0:86:43:46:e7:8e:c9:cf:e9:95:ea:28: 97:cc:5b:86:cf:f8:9c:0d:fd:79:8d:30:3a:03:f0:98:4c:22: 08:2c:72:e0:56:05:e2:da:d6:95:52:a1:b6:96:8c:c1:3e:f1: 95:08:8a:c6:18:87:0b:a8:fa:4a:7e:9e:a5:90:3e:fe:66:c2: b7:81:99:ad:20:62:0d:4e:bb:67:91:fc:74:29:cd:70:c6:f8: 58:88:63:28:e0:bd:82:7f:dc:65:b4:9e:18:34:57:7e:10:b5: 63:a1:d9:18:34:9f:a6:f1:a3:d1:b7:ae:90:2d:d3:2a:73:fe: b3:7b:e4:47:54:61:a9:9a:a2:da:34:13:b8:83:dc:ab:3a:ff: 9f:75:4b:4d -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUFU3YskbOZZE80OBm29hCGjOMGcEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNTA0MDAzMDE0WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNzg5ZDhlNThmODI2N2EyM2Y4ZTQyMzIxMmI0NzE5YjE1 YTIyYzY4YWYzM2EyZmRmODVkZTA4NGJhMTMwZGQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD1mut8sPo1qsqcGExD9V/5gVKdyomSUIbf028HBgOeLqnS O4yg6Cg0PMtIyA4xFu8sQQZqQk2cljETsTbAzBFjOGj0MMZjzdrKAOD3qfg4WTai 2HmYAiaZhHUdc+zLXf8JfvWpLA+kAQ4fF7nzZh6uMZ44zWH4pp+Q7tH3hOmPBeNd 5dQQsPWUvtDPT94iEz4Sxky22AacUDiz05xEytvSNSdfCQnUdOuLvUeeVeEcbUlh VSDSxDZXLk/04R2hmMuTZpPYmusKLqk0xiyUdg41pJly0HVymvkrJG5y1xdNDTZm ueu0nxmg3gnJeF0EVUvvZoRQ2w/JV+QPaGN26IBLAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUQI26alnMbzQ1BiVOmrWT33oWSAwwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzUzZDI5YzA4LTA5NjYtNDdjOC1iOTYyLWEzZjc2YzdkODU4NS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBABdTYMwDQYJKoZIhvcNAQELBQADggEBADv8B364Hz32TUsJlC8TxlS5T0NT 5d1DhkjmxGiB7u10Lnp/sc55bWjjPGGlk66Mn6zXkbRjXahGbRTFLKWqoCxt0SKu bqBVonrFnmX/mTvaBBy0G6AGWL1+ybvALHytYVE3PqYLJtDByZuaLKjnQvrznKCG Q0bnjsnP6ZXqKJfMW4bP+JwN/XmNMDoD8JhMIggscuBWBeLa1pVSobaWjME+8ZUI isYYhwuo+kp+nqWQPv5mwreBma0gYg1Ou2eR/HQpzXDG+FiIYyjgvYJ/3GW0nhg0 V34QtWOh2Rg0n6bxo9G3rpAt0ypz/rN75EdUYamaoto0E7iD3Ks6/591S00= -----END CERTIFICATE-----Generated at Tue May 12 21:51:09 2026 by rpki-client