$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa File: 53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa (raw, json) Hash identifier: Ciu8dapfDNmHLBDRT+EpTI9Cnarc/EroBd8IaedJWKw= Subject key identifier: AC:A3:60:0A:CB:3E:EB:88:CC:A8:4B:14:12:84:34:16:6E:EB:59:12 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 2C821B550D5FA32466FD7FF7A7669C80785066C4 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa Signing time: Mon 04 May 2026 15:10:19 +0000 ROA not before: Mon 04 May 2026 15:10:19 +0000 ROA not after: Sun 02 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6107::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:82:1b:55:0d:5f:a3:24:66:fd:7f:f7:a7:66:9c:80:78:50:66:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: May 4 15:10:19 2026 GMT Not After : Aug 2 23:59:59 2026 GMT Subject: serialNumber=250d4c868d4ade786de40a847226033f74a4b6c4ad069f7de79c011fa52652c2, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:e4:59:e1:9e:a3:e2:48:c3:b6:af:30:a7:9b: 43:75:dd:b1:88:63:63:95:af:56:57:2a:60:08:09: 24:19:b0:e0:96:cf:cf:c4:77:64:c1:99:e2:9f:75: c3:94:2c:8a:ab:c5:fb:3a:06:42:87:a4:ca:d3:83: 60:66:d0:bb:0f:7a:2a:3b:cf:f6:15:d9:f1:91:ed: 51:5c:92:d8:dc:c9:03:d9:13:4d:ec:1b:27:ca:55: ef:76:c5:70:8d:e7:7f:c9:81:45:69:bb:ba:23:1b: 8f:94:99:23:30:b7:5c:bb:cc:d5:98:68:63:a4:dd: a2:bc:96:4c:6d:68:f6:72:44:01:df:51:db:40:0f: 21:69:83:4e:96:aa:6a:85:8a:c2:ea:64:5f:b0:0c: ae:c2:b9:a5:6e:bc:16:c3:35:7a:cd:1b:b4:26:ba: 17:10:da:1f:a9:bb:01:30:50:6e:14:6e:b7:12:6d: c9:fd:12:da:d3:89:28:27:c9:a8:7c:6f:c6:99:bf: b2:b1:ef:6e:cd:37:16:86:a6:17:d1:5a:35:50:ab: 83:1a:ec:a0:8f:96:07:78:b6:ed:91:cb:cd:58:2c: 32:9f:e5:0c:f5:69:52:5e:24:f9:c8:8e:66:98:db: a7:a7:34:bc:23:a1:fd:5d:6e:33:2c:d2:ec:03:9e: 3a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A3:60:0A:CB:3E:EB:88:CC:A8:4B:14:12:84:34:16:6E:EB:59:12 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53ea693e-fa8d-4126-baf5-06e1ceebdcec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6107::/48 Signature Algorithm: sha256WithRSAEncryption 43:15:74:e3:d5:ef:b4:73:24:17:74:07:90:b3:29:d4:9f:c3: cc:4e:3e:14:2c:30:3d:f0:a3:9c:4c:41:4c:6e:b9:4a:b0:b1: 0a:d6:b0:32:c5:a6:94:41:6b:ce:da:c9:fc:7c:de:f7:64:a9: c3:6c:e5:85:4b:d9:a4:11:1b:ef:cb:03:f0:a6:cc:2a:da:4a: 78:67:26:53:34:fe:f3:94:1d:e3:b0:5b:bd:e9:10:81:b6:40: 45:dc:ae:43:2c:21:65:6a:d9:59:a4:0a:c3:ae:75:76:13:38: 74:ec:24:ab:2a:a1:87:8a:ef:00:3d:66:db:9c:08:dc:dc:d1: 04:50:85:c3:23:ec:32:bd:9e:20:25:38:79:24:d7:ae:9f:cb: a0:17:1e:12:9a:43:f8:8f:21:55:66:bc:e8:a2:12:fa:c7:82: eb:9a:c7:1d:33:e3:06:9c:65:da:49:30:fb:e7:0c:1e:57:fa: 8f:8c:96:c2:fd:3e:f7:4c:a0:01:89:e7:dc:24:e8:9e:cb:0c: b6:11:c9:7b:39:99:a7:83:e0:77:90:cc:f7:13:5d:4e:7b:30: 8b:83:50:1d:46:33:1a:3b:9a:e6:72:81:0e:ba:f0:28:82:45: 5a:64:ed:41:15:75:0c:02:12:ee:76:e3:89:79:5b:af:9d:cc: c4:10:55:21 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIULIIbVQ1foyRm/X/3p2acgHhQZsQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNTA0MTUxMDE5WhcNMjYwODAyMjM1OTU5 WjB6MUkwRwYDVQQFE0AyNTBkNGM4NjhkNGFkZTc4NmRlNDBhODQ3MjI2MDMzZjc0 YTRiNmM0YWQwNjlmN2RlNzljMDExZmE1MjY1MmMyMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDL5FnhnqPiSMO2rzCnm0N13bGIY2OVr1ZXKmAICSQZsOCW z8/Ed2TBmeKfdcOULIqrxfs6BkKHpMrTg2Bm0LsPeio7z/YV2fGR7VFcktjcyQPZ E03sGyfKVe92xXCN53/JgUVpu7ojG4+UmSMwt1y7zNWYaGOk3aK8lkxtaPZyRAHf UdtADyFpg06WqmqFisLqZF+wDK7CuaVuvBbDNXrNG7QmuhcQ2h+puwEwUG4UbrcS bcn9EtrTiSgnyah8b8aZv7Kx727NNxaGphfRWjVQq4Ma7KCPlgd4tu2Ry81YLDKf 5Qz1aVJeJPnIjmaY26enNLwjof1dbjMs0uwDnjr9AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUrKNgCss+64jMqEsUEoQ0Fm7rWRIwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUzZWE2OTNlLWZhOGQtNDEyNi1iYWY1LTA2ZTFjZWViZGNlYy5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYQcwDQYJKoZIhvcNAQELBQADggEBAEMVdOPV77RzJBd0B5CzKdSf w8xOPhQsMD3wo5xMQUxuuUqwsQrWsDLFppRBa87ayfx83vdkqcNs5YVL2aQRG+/L A/CmzCraSnhnJlM0/vOUHeOwW73pEIG2QEXcrkMsIWVq2VmkCsOudXYTOHTsJKsq oYeK7wA9ZtucCNzc0QRQhcMj7DK9niAlOHkk166fy6AXHhKaQ/iPIVVmvOiiEvrH guuaxx0z4wacZdpJMPvnDB5X+o+MlsL9PvdMoAGJ59wk6J7LDLYRyXs5maeD4HeQ zPcTXU57MIuDUB1GMxo7muZygQ668CiCRVpk7UEVdQwCEu5244l5W6+dzMQQVSE= -----END CERTIFICATE-----Generated at Wed May 13 00:09:41 2026 by rpki-client