$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53a33e19-4564-4056-bb08-1f07e58a592f.roa File: 53a33e19-4564-4056-bb08-1f07e58a592f.roa (raw, json) Hash identifier: HYN4+PFNHpbkocK+DGgAC5nXh8nQjyfcJYYnpKFD0zQ= Subject key identifier: 82:FB:3C:96:68:C5:24:87:58:F1:25:8C:6B:1E:AA:DB:26:4D:EC:6B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 3907CF2D7356683523283025CC3279C80ABD6D62 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53a33e19-4564-4056-bb08-1f07e58a592f.roa Signing time: Fri 03 Apr 2026 02:30:12 +0000 ROA not before: Fri 03 Apr 2026 02:30:12 +0000 ROA not after: Thu 02 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0f0:e0d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:07:cf:2d:73:56:68:35:23:28:30:25:cc:32:79:c8:0a:bd:6d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Apr 3 02:30:12 2026 GMT Not After : Jul 2 23:59:59 2026 GMT Subject: serialNumber=c7fb531d6e4e4e296e0b35d4acc75895ba087427879a0ccbafeaaef87e9a8ddc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ed:84:44:c2:85:43:78:8b:58:1d:f3:c8:71: 6e:3a:c8:c1:68:9c:8a:1e:de:90:9b:67:fb:ff:2e: 08:da:13:f5:ee:fa:55:cf:3f:23:e6:e3:a7:b5:e7: 51:8b:08:11:77:91:3b:4c:62:75:85:f1:3f:6d:94: 26:71:3b:14:97:c9:94:8c:7c:92:e5:72:78:66:fd: 3b:5b:c3:76:66:95:78:70:63:24:19:bb:8f:00:27: 97:49:77:e4:97:0a:d9:eb:ab:d6:7e:f5:e3:d8:65: 7d:08:40:2f:33:b7:71:26:50:59:96:94:69:1a:88: 9a:d8:f2:23:59:b5:72:6d:2a:8b:14:fe:8d:2e:12: 4c:a8:1b:24:0a:19:a5:e4:0f:bb:3a:fa:6e:e6:6a: 8e:b6:1f:1c:17:eb:14:b0:7c:6f:82:ae:d8:4c:1b: a0:e9:06:a8:88:c7:91:dc:56:a8:82:b8:23:e0:df: f3:5d:81:03:e2:5a:c7:d5:36:f5:52:6b:90:27:dd: e7:98:c1:39:4e:39:42:3f:1c:4d:ce:68:27:6d:80: 57:ee:09:18:48:0e:2e:2b:d1:db:60:8a:40:ee:9c: c0:ed:19:1b:b1:d8:bb:e0:d6:33:0e:03:13:ae:fa: cb:cd:30:05:b9:fa:ff:4e:61:96:dc:a7:6c:a6:3f: 22:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:FB:3C:96:68:C5:24:87:58:F1:25:8C:6B:1E:AA:DB:26:4D:EC:6B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/53a33e19-4564-4056-bb08-1f07e58a592f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:e0d::/48 Signature Algorithm: sha256WithRSAEncryption 89:ff:0f:97:16:e4:30:fd:4a:c9:29:fb:00:a5:cb:4a:9d:bb: 7f:f7:e6:3c:7d:36:1d:c5:3d:30:2e:7a:fb:d6:ad:fb:d9:e3: 12:f6:d8:60:90:9a:df:b6:e1:0a:ab:15:19:23:61:ef:05:63: 2f:c3:3c:21:25:6d:5f:8b:f8:72:2e:b0:e9:f1:f7:d5:0a:54: 28:f4:a4:98:e6:c8:4e:68:cb:cf:e2:42:70:94:96:6f:8e:49: 31:52:7a:10:f5:17:76:b9:dc:99:46:63:b8:a1:32:17:65:87: 15:0c:d0:55:5d:7e:67:ce:66:c3:e4:31:8c:71:b1:2a:d4:44: 11:4a:8c:50:41:b5:3b:de:ce:70:ec:59:7a:0a:04:fa:a6:22: 1f:c2:ee:47:ae:09:7e:f1:1a:9f:26:4c:50:d2:5a:ce:4b:bb: 1a:08:de:31:a1:fa:72:19:2e:d2:ea:49:e1:a6:55:aa:cf:78: d5:ba:5a:8c:2b:8d:67:2c:ab:8c:83:34:a3:8f:dc:c1:51:54: 78:c2:5b:6a:24:2b:85:f8:7c:29:1d:17:34:e0:ec:69:2d:d4: 71:eb:7d:46:d8:91:72:89:5a:6b:f6:5d:83:d8:00:db:ab:1a: a6:d0:45:f9:0c:97:bd:50:cb:7a:42:30:79:8c:a6:39:dd:c8: a6:3e:b1:3f -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUOQfPLXNWaDUjKDAlzDJ5yAq9bWIwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNDAzMDIzMDEyWhcNMjYwNzAyMjM1OTU5 WjB6MUkwRwYDVQQFE0BjN2ZiNTMxZDZlNGU0ZTI5NmUwYjM1ZDRhY2M3NTg5NWJh MDg3NDI3ODc5YTBjY2JhZmVhYWVmODdlOWE4ZGRjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDT7YREwoVDeItYHfPIcW46yMFonIoe3pCbZ/v/LgjaE/Xu +lXPPyPm46e151GLCBF3kTtMYnWF8T9tlCZxOxSXyZSMfJLlcnhm/Ttbw3ZmlXhw YyQZu48AJ5dJd+SXCtnrq9Z+9ePYZX0IQC8zt3EmUFmWlGkaiJrY8iNZtXJtKosU /o0uEkyoGyQKGaXkD7s6+m7mao62HxwX6xSwfG+CrthMG6DpBqiIx5HcVqiCuCPg 3/NdgQPiWsfVNvVSa5An3eeYwTlOOUI/HE3OaCdtgFfuCRhIDi4r0dtgikDunMDt GRux2Lvg1jMOAxOu+svNMAW5+v9OYZbcp2ymPyKxAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUgvs8lmjFJIdY8SWMax6q2yZN7GswHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2LzUzYTMzZTE5LTQ1NjQtNDA1Ni1iYjA4LTFmMDdlNThhNTkyZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwDg0wDQYJKoZIhvcNAQELBQADggEBAIn/D5cW5DD9Sskp+wCly0qd u3/35jx9Nh3FPTAuevvWrfvZ4xL22GCQmt+24QqrFRkjYe8FYy/DPCElbV+L+HIu sOnx99UKVCj0pJjmyE5oy8/iQnCUlm+OSTFSehD1F3a53JlGY7ihMhdlhxUM0FVd fmfOZsPkMYxxsSrURBFKjFBBtTveznDsWXoKBPqmIh/C7keuCX7xGp8mTFDSWs5L uxoI3jGh+nIZLtLqSeGmVarPeNW6WowrjWcsq4yDNKOP3MFRVHjCW2okK4X4fCkd FzTg7Gkt1HHrfUbYkXKJWmv2XYPYANurGqbQRfkMl71Qy3pCMHmMpjndyKY+sT8= -----END CERTIFICATE-----Generated at Fri Apr 17 04:44:29 2026 by rpki-client