$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af36c87f-c82a-4957-a4a1-65e315999eef.roa File: af36c87f-c82a-4957-a4a1-65e315999eef.roa (raw, json) Hash identifier: T4lidJ1MIZJDQKvF0Y89FmQDJD/PPX43g+vDzxeRn/g= Subject key identifier: 53:1B:14:21:27:8A:16:70:32:74:72:69:2A:A7:C8:FE:B1:2F:DB:CD Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 12E85257144169042D8979F8C4B24303FE1F975A Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af36c87f-c82a-4957-a4a1-65e315999eef.roa Signing time: Tue 13 Oct 2026 00:30:10 +0000 ROA not before: Tue 13 Oct 2026 00:30:10 +0000 ROA not after: Mon 11 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f1:16::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 10 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:e8:52:57:14:41:69:04:2d:89:79:f8:c4:b2:43:03:fe:1f:97:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 13 00:30:10 2026 GMT Not After : Jan 11 23:59:59 2027 GMT Subject: serialNumber=060c07c2973c966a4224a4ef8d4651eec96d7a2a075dbad0f8ae094d90e7688f, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b4:21:f1:e9:cd:3c:41:82:7b:8e:6f:f6:72: 64:5d:5e:d7:08:e2:aa:2f:3f:af:a6:f4:e2:73:21: 7b:da:ea:6e:41:e3:85:9f:a5:d2:44:c8:32:c7:70: 66:59:6e:cd:cc:a7:76:b7:71:7a:13:5b:fc:83:74: e2:bf:d1:1d:c2:e4:7c:56:ab:39:7a:20:b2:ba:86: ba:84:04:9c:20:9e:20:2c:73:20:35:74:18:15:37: 41:d4:e2:67:85:f3:c3:b1:6d:ce:e2:85:af:31:eb: 84:81:1c:2e:84:fb:fc:22:46:54:ad:b5:4e:8b:47: 82:2f:94:b1:61:a9:b6:6e:4c:94:bd:11:43:2c:e9: dd:7f:e7:22:0d:30:b1:22:cf:39:2a:a1:65:e4:c4: 4f:ef:8c:39:2f:15:cd:f1:19:be:d3:79:8f:9e:97: 77:2a:5d:be:a7:1d:d0:82:22:f2:ce:f8:ea:ea:8c: 0e:16:c9:22:56:08:d5:d1:9d:bd:42:7d:44:54:8f: 11:e3:72:2e:15:8f:54:47:13:a8:21:bc:5f:66:20: d2:e6:02:0a:02:0e:7b:7c:93:fd:da:4f:bc:d3:4c: 9d:d3:fc:4f:70:2b:e4:89:d0:d3:14:5f:7c:5c:23: 60:d2:58:42:83:34:9b:06:da:42:68:6d:e8:75:d4: c0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1B:14:21:27:8A:16:70:32:74:72:69:2A:A7:C8:FE:B1:2F:DB:CD X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af36c87f-c82a-4957-a4a1-65e315999eef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f1:16::/47 Signature Algorithm: sha256WithRSAEncryption 19:2c:c1:71:28:c4:d3:23:4b:10:51:50:f6:7d:8b:8a:9b:b7: 50:c5:dc:d4:a8:7b:45:ce:25:88:5e:28:be:82:7d:e9:b4:4d: c6:b2:f9:a7:77:32:98:76:b0:18:ef:87:1f:bb:8a:1d:e7:29: 91:c3:77:a3:e7:14:a5:fb:af:55:e0:5c:2b:e9:2a:34:a3:9e: 9d:db:8a:40:8a:0d:0d:79:e9:12:6f:cc:7b:a4:d3:f2:d4:79: 02:75:c4:01:af:d5:c5:d0:12:30:36:83:cd:db:5d:77:c0:3a: ef:d5:61:4c:2c:50:17:c6:16:2f:f4:66:fe:5f:ea:b9:28:10: 02:7b:dc:5a:e7:fb:f6:79:37:b4:5d:1b:2c:39:9b:6a:51:0a: 4f:33:de:ed:be:b7:64:b3:e2:2b:fe:6b:2d:c0:31:71:fb:09: 87:ad:c7:9e:7f:12:75:f3:78:b5:ed:53:00:0d:3a:2a:25:9a: ac:60:90:0f:a6:ce:5d:71:3a:d3:44:92:06:97:4a:39:e8:92: 41:18:b1:eb:8a:6c:f7:e2:7f:37:01:df:68:d2:3e:fe:63:59: fd:f0:c4:3e:b7:e9:2b:be:01:ce:79:3d:a6:3f:e6:28:19:36: 00:88:53:b3:5f:7e:c4:b3:1e:01:a9:c8:bd:ec:87:bb:68:09: f7:b1:4a:1c -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUEuhSVxRBaQQtiXn4xLJDA/4fl1owDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDEzMDAzMDEwWhcNMjcwMTExMjM1OTU5 WjB6MUkwRwYDVQQFE0AwNjBjMDdjMjk3M2M5NjZhNDIyNGE0ZWY4ZDQ2NTFlZWM5 NmQ3YTJhMDc1ZGJhZDBmOGFlMDk0ZDkwZTc2ODhmMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDKtCHx6c08QYJ7jm/2cmRdXtcI4qovP6+m9OJzIXva6m5B 44WfpdJEyDLHcGZZbs3Mp3a3cXoTW/yDdOK/0R3C5HxWqzl6ILK6hrqEBJwgniAs cyA1dBgVN0HU4meF88Oxbc7iha8x64SBHC6E+/wiRlSttU6LR4IvlLFhqbZuTJS9 EUMs6d1/5yINMLEizzkqoWXkxE/vjDkvFc3xGb7TeY+el3cqXb6nHdCCIvLO+Orq jA4WySJWCNXRnb1CfURUjxHjci4Vj1RHE6ghvF9mINLmAgoCDnt8k/3aT7zTTJ3T /E9wK+SJ0NMUX3xcI2DSWEKDNJsG2kJobeh11MC3AgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUUxsUISeKFnAydHJpKqfI/rEv280wHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FmMzZjODdmLWM4MmEtNDk1Ny1hNGExLTY1ZTMxNTk5OWVlZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAPDxABYwDQYJKoZIhvcNAQELBQADggEBABkswXEoxNMjSxBRUPZ9i4qb t1DF3NSoe0XOJYheKL6Cfem0Tcay+ad3Mph2sBjvhx+7ih3nKZHDd6PnFKX7r1Xg XCvpKjSjnp3bikCKDQ156RJvzHuk0/LUeQJ1xAGv1cXQEjA2g83bXXfAOu/VYUws UBfGFi/0Zv5f6rkoEAJ73Frn+/Z5N7RdGyw5m2pRCk8z3u2+t2Sz4iv+ay3AMXH7 CYetx55/EnXzeLXtUwANOiolmqxgkA+mzl1xOtNEkgaXSjnokkEYseuKbPfifzcB 32jSPv5jWf3wxD636Su+Ac55PaY/5igZNgCIU7NffsSzHgGpyL3sh7toCfexShw= -----END CERTIFICATE-----Generated at Sun Nov 8 17:11:18 2026 by rpki-client