$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa File: aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa (raw, json) Hash identifier: h1RUSLE8kFEDQ4SWRLSyCEfqzWrOATuCl7wjX/Jh38U= Subject key identifier: 29:DA:97:A0:D2:E3:80:28:01:CD:28:6E:02:0A:7E:78:2A:36:99:60 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 21A12E06BC89611C2A79779EE13ABA82E0D31473 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa Signing time: Mon 26 Oct 2026 04:10:08 +0000 ROA not before: Mon 26 Oct 2026 04:10:08 +0000 ROA not after: Sun 24 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 2600:f0fb:e200::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a1:2e:06:bc:89:61:1c:2a:79:77:9e:e1:3a:ba:82:e0:d3:14:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 26 04:10:08 2026 GMT Not After : Jan 24 23:59:59 2027 GMT Subject: serialNumber=effdd84e65f31c79ce11a7c21787afc9130c1ad7efa38e1b3104d00f23631770, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:12:49:46:fd:da:34:3b:03:2a:2b:ea:eb:d3: 61:1c:13:1d:c6:f0:ed:b8:98:16:e5:c7:2a:db:c8: e2:c5:ff:30:bf:28:20:76:53:26:36:9e:d4:20:89: 8d:a4:48:f9:1d:d4:b1:6d:6e:bc:28:08:31:66:18: 7f:a3:2b:c7:1c:26:5e:e7:a0:09:a2:7b:46:3c:39: 93:ad:af:26:29:0d:22:78:f3:5d:ad:ce:63:07:c7: 3f:15:af:56:5d:ae:44:f8:46:6a:7f:83:9b:cb:5d: 09:c1:d3:3d:ad:99:da:9a:91:ba:ab:b7:b0:ee:79: 14:0f:34:72:b4:10:4d:26:de:fe:35:b1:1b:be:34: 42:89:54:97:20:06:77:01:b7:e6:05:94:8a:28:ef: 22:b9:4b:31:b2:7b:a7:6d:41:e6:00:b2:d3:0b:f6: b9:91:75:2c:1f:75:73:15:0e:02:18:2b:f8:a9:cc: ec:98:38:3b:38:3b:88:91:41:69:cb:ee:14:fa:e5: 66:dc:ce:cd:e2:55:54:34:a6:ab:37:96:af:52:71: a9:fa:06:83:43:b5:47:3f:ad:86:6d:a3:3b:9f:a2: 1b:5a:6d:52:d1:02:2e:44:27:fb:fd:5f:5f:a1:d3: b9:6d:de:a4:33:c9:9e:09:a4:a8:23:44:15:16:3b: b9:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DA:97:A0:D2:E3:80:28:01:CD:28:6E:02:0A:7E:78:2A:36:99:60 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/aaf51402-f1bf-4e7b-b7c3-65d93def6bd4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0fb:e200::/42 Signature Algorithm: sha256WithRSAEncryption 77:01:57:00:a9:7c:ce:86:ed:87:34:7e:2c:08:2f:e5:8a:cf: d7:f7:85:cc:89:90:8a:c7:53:0f:40:86:50:91:e3:fa:a1:e9: 6c:16:c1:6a:09:12:0a:87:5e:12:c7:83:e3:28:9c:c4:5b:12: 51:22:a6:ea:12:29:c5:32:27:0f:50:aa:8b:44:ba:0f:97:19: 4f:b7:a4:c7:dc:e7:2a:9a:e8:e4:88:d8:90:3b:f3:cc:75:f2: 73:bb:57:c3:d1:f7:c3:d7:c8:e6:e2:5d:bc:1a:a7:99:b7:43: 6d:35:28:53:46:5e:c0:fb:bf:f5:24:95:59:5e:15:37:05:b0: 7d:4a:7b:23:fe:9f:bd:79:a0:22:40:d8:50:54:67:ce:40:b2: d9:21:33:77:a4:ba:bd:4b:81:ff:4e:53:4f:8d:bd:36:91:9d: df:49:e9:be:67:23:a0:32:ca:28:ee:b4:f2:35:c7:b1:93:b8: 0a:a0:5d:84:9b:a3:ce:88:69:87:1e:8a:de:be:c1:56:6e:06: 43:42:ba:08:17:89:06:0f:66:f9:8d:1c:b8:5a:8a:8f:00:21: 92:68:43:40:3c:82:73:46:61:fb:eb:28:4a:70:07:92:14:95: ca:a9:4c:be:bf:3a:30:b9:8d:ac:a2:bb:0f:81:be:09:1d:8c: 8e:53:5d:3b -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUIaEuBryJYRwqeXee4Tq6guDTFHMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDI2MDQxMDA4WhcNMjcwMTI0MjM1OTU5 WjB6MUkwRwYDVQQFE0BlZmZkZDg0ZTY1ZjMxYzc5Y2UxMWE3YzIxNzg3YWZjOTEz MGMxYWQ3ZWZhMzhlMWIzMTA0ZDAwZjIzNjMxNzcwMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDREklG/do0OwMqK+rr02EcEx3G8O24mBblxyrbyOLF/zC/ KCB2UyY2ntQgiY2kSPkd1LFtbrwoCDFmGH+jK8ccJl7noAmie0Y8OZOtryYpDSJ4 812tzmMHxz8Vr1ZdrkT4Rmp/g5vLXQnB0z2tmdqakbqrt7DueRQPNHK0EE0m3v41 sRu+NEKJVJcgBncBt+YFlIoo7yK5SzGye6dtQeYAstML9rmRdSwfdXMVDgIYK/ip zOyYODs4O4iRQWnL7hT65Wbczs3iVVQ0pqs3lq9Scan6BoNDtUc/rYZtozufohta bVLRAi5EJ/v9X1+h07lt3qQzyZ4JpKgjRBUWO7l7AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUKdqXoNLjgCgBzShuAgp+eCo2mWAwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FhZjUxNDAyLWYxYmYtNGU3Yi1iN2MzLTY1ZDkzZGVmNmJkNC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwYmAPD74gAwDQYJKoZIhvcNAQELBQADggEBAHcBVwCpfM6G7Yc0fiwIL+WK z9f3hcyJkIrHUw9AhlCR4/qh6WwWwWoJEgqHXhLHg+MonMRbElEipuoSKcUyJw9Q qotEug+XGU+3pMfc5yqa6OSI2JA788x18nO7V8PR98PXyObiXbwap5m3Q201KFNG XsD7v/UklVleFTcFsH1KeyP+n715oCJA2FBUZ85AstkhM3ekur1Lgf9OU0+NvTaR nd9J6b5nI6AyyijutPI1x7GTuAqgXYSbo86IaYceit6+wVZuBkNCuggXiQYPZvmN HLhaio8AIZJoQ0A8gnNGYfvrKEpwB5IUlcqpTL6/OjC5jayiuw+BvgkdjI5TXTs= -----END CERTIFICATE-----Generated at Tue Oct 27 00:05:26 2026 by rpki-client