$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa File: afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa (raw, json) Hash identifier: ayxfSnIAD7FveQJvmVxGmtkzfQcF1tN0UDLnia+HOUk= Subject key identifier: DA:1A:7F:50:40:D2:82:13:02:08:57:42:C0:30:90:C7:68:42:DA:B3 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 7AD3B973E30B490640C3E922D16900985FE92AF1 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa Signing time: Sun 11 Oct 2026 15:08:49 +0000 ROA not before: Sun 11 Oct 2026 15:08:49 +0000 ROA not after: Sat 09 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:d3:b9:73:e3:0b:49:06:40:c3:e9:22:d1:69:00:98:5f:e9:2a:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 11 15:08:49 2026 GMT Not After : Jan 9 23:59:59 2027 GMT Subject: serialNumber=20dbf53c5e66baf1ba213c3c661efd5d170e4fa0bf6f05081102cc754e731ba1, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b2:0d:79:21:77:ae:79:47:75:ee:a7:ac:b3: 4c:0f:43:ec:00:e9:7b:53:27:a5:cd:87:80:4a:e9: c4:c4:90:28:5e:96:19:a0:49:e7:db:de:dc:42:a2: 33:48:5c:66:85:36:ea:73:ef:f3:a4:28:43:ba:41: 53:0d:aa:66:84:a9:6e:4e:2e:d0:f4:34:08:09:dd: 9f:71:ae:1f:08:b5:0c:7b:59:ba:f4:83:c6:2a:09: f2:3f:1c:6b:cd:ae:06:29:c5:85:65:39:31:3a:b6: 5b:ac:57:ec:e6:97:12:ff:75:a1:f0:70:69:19:5e: 12:41:74:04:0a:87:0b:1e:17:d6:e7:9e:a2:11:85: 60:49:b5:6b:f8:48:57:ab:00:ea:e9:5c:96:d5:fa: 40:76:9d:61:bb:8f:a9:ca:cd:59:75:70:68:2f:ad: d8:4f:cb:bc:b7:3d:b8:d2:9d:48:ca:69:db:95:a5: f4:3f:4e:8e:24:5f:7f:38:bf:cf:d6:ce:53:a6:87: 84:d1:23:e1:c3:f9:62:f3:2d:77:77:e6:2f:a7:e3: 21:e7:7e:5e:00:1f:2d:4e:e1:37:79:c2:9c:b0:3a: 48:cc:7c:b3:0a:54:f8:f9:2d:db:e9:a1:62:d3:11: 33:8c:dd:d6:7d:32:72:9c:05:d8:db:4c:0c:de:75: 99:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1A:7F:50:40:D2:82:13:02:08:57:42:C0:30:90:C7:68:42:DA:B3 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6111::/48 Signature Algorithm: sha256WithRSAEncryption 68:67:97:50:34:41:4c:e5:af:0c:0a:44:ce:fa:66:46:4d:65: bb:82:b0:71:8c:5a:f0:cf:98:7d:20:82:45:13:9d:34:1f:96: a2:0f:16:ef:eb:c6:48:3e:05:a0:a1:2f:97:76:84:64:bd:4e: eb:95:1e:d5:97:fe:df:97:02:82:28:ec:49:3f:5f:6d:b2:5c: 97:82:f9:31:ee:55:09:d7:7e:84:dd:b0:af:f1:ce:35:01:e9: 70:47:6e:0f:ee:ec:f5:69:96:93:a2:6e:5f:4d:d5:4a:d8:47: da:5c:65:29:dc:bd:fa:8c:0c:ae:56:dd:e6:13:17:6a:d1:b9: 68:20:30:bf:2b:d2:83:88:c1:88:64:7c:ba:ed:57:92:16:29: 0b:46:d2:11:62:4a:c4:51:de:7d:53:fe:00:02:8f:9e:b9:18: 78:d6:8f:45:2b:11:88:ff:b9:3a:1c:33:50:ae:c6:17:e5:72: 2f:fb:39:37:dc:bc:45:b1:43:ff:75:91:e2:63:b7:07:d8:22: 3e:60:83:0b:70:4d:77:0b:49:dd:81:bb:41:dd:3b:e0:55:26: 80:d2:ff:06:ea:60:96:34:4f:53:55:95:79:26:87:97:a6:b6: b1:55:6b:67:22:1a:d1:15:ef:b4:68:a0:18:8b:69:de:7b:56: 59:b3:6d:8a -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUetO5c+MLSQZAw+ki0WkAmF/pKvEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYxMDExMTUwODQ5WhcNMjcwMTA5MjM1OTU5 WjB6MUkwRwYDVQQFE0AyMGRiZjUzYzVlNjZiYWYxYmEyMTNjM2M2NjFlZmQ1ZDE3 MGU0ZmEwYmY2ZjA1MDgxMTAyY2M3NTRlNzMxYmExMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDbsg15IXeueUd17qess0wPQ+wA6XtTJ6XNh4BK6cTEkChe lhmgSefb3txCojNIXGaFNupz7/OkKEO6QVMNqmaEqW5OLtD0NAgJ3Z9xrh8ItQx7 Wbr0g8YqCfI/HGvNrgYpxYVlOTE6tlusV+zmlxL/daHwcGkZXhJBdAQKhwseF9bn nqIRhWBJtWv4SFerAOrpXJbV+kB2nWG7j6nKzVl1cGgvrdhPy7y3PbjSnUjKaduV pfQ/To4kX384v8/WzlOmh4TRI+HD+WLzLXd35i+n4yHnfl4AHy1O4Td5wpywOkjM fLMKVPj5LdvpoWLTETOM3dZ9MnKcBdjbTAzedZltAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU2hp/UEDSghMCCFdCwDCQx2hC2rMwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FmY2ZjZmZlLWM3MzQtNGVmMC05NWM4LWViYzYyMzJmNjU5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYREwDQYJKoZIhvcNAQELBQADggEBAGhnl1A0QUzlrwwKRM76ZkZN ZbuCsHGMWvDPmH0ggkUTnTQflqIPFu/rxkg+BaChL5d2hGS9TuuVHtWX/t+XAoIo 7Ek/X22yXJeC+THuVQnXfoTdsK/xzjUB6XBHbg/u7PVplpOibl9N1UrYR9pcZSnc vfqMDK5W3eYTF2rRuWggML8r0oOIwYhkfLrtV5IWKQtG0hFiSsRR3n1T/gACj565 GHjWj0UrEYj/uTocM1Cuxhflci/7OTfcvEWxQ/91keJjtwfYIj5ggwtwTXcLSd2B u0HdO+BVJoDS/wbqYJY0T1NVlXkmh5emtrFVa2ciGtEV77RooBiLad57VlmzbYo= -----END CERTIFICATE-----Generated at Mon Oct 12 00:47:18 2026 by rpki-client