$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa File: af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa (raw, json) Hash identifier: fmFp3KWqDmuyjyTjCsjkwTJB7TDCFOITG0GboUlhkoI= Subject key identifier: E0:47:78:D2:0A:F8:93:C1:CC:B6:FB:64:B9:BF:BC:30:29:A3:9C:EC Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0E00AFF765521BA709075EE65DD72EC5360963E8 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa Signing time: Mon 27 Jul 2026 03:10:08 +0000 ROA not before: Mon 27 Jul 2026 03:10:08 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:00:af:f7:65:52:1b:a7:09:07:5e:e6:5d:d7:2e:c5:36:09:63:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Jul 27 03:10:08 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=c16f8ef6c38348cce8d25871b46462f818858484d5a2022cd4e26d83196efafb, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:10:23:a9:7a:7d:b6:0b:f9:42:97:f4:47: 12:62:6a:bd:00:2b:de:27:a1:b0:8c:3b:5f:be:ba: 41:c0:45:f2:60:f5:3f:81:0a:1a:65:63:0b:ef:4c: 9b:92:f8:73:ba:f7:93:82:53:ec:16:ae:1b:31:f6: ce:31:4b:a7:3b:db:53:98:93:93:e5:05:09:df:75: 10:41:60:bb:7b:9a:47:85:5e:e7:83:58:bb:c1:62: 8e:43:cc:a5:38:ac:54:ec:4a:ce:fd:e2:27:14:7f: b6:76:12:36:0d:0e:e2:ab:47:4f:fc:93:98:45:99: 72:bf:0c:93:96:3c:a4:91:b4:c1:cf:ea:28:7b:bd: b4:db:44:ba:93:48:06:1e:6d:8a:07:fe:66:88:7f: 0a:d9:73:54:5e:08:d7:5c:9b:3a:3a:34:a0:ed:ed: 25:49:ed:ec:25:c4:7d:20:31:88:a4:74:fc:54:09: d1:84:54:dd:8d:8e:36:12:a2:7d:9b:62:a0:0b:4a: 8a:b8:d4:fd:85:58:f5:ad:07:ad:63:af:10:3c:28: 02:d4:8c:8c:e3:f8:70:64:df:2a:f8:7a:d2:93:c2: c8:dc:81:5c:9a:df:85:3c:bb:ff:05:58:05:d4:18: f7:2b:e8:56:ff:55:70:4c:a1:17:4f:b8:ad:66:2b: 99:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:47:78:D2:0A:F8:93:C1:CC:B6:FB:64:B9:BF:BC:30:29:A3:9C:EC X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 64:75:04:08:b8:5b:ed:9c:e4:95:43:40:14:c1:3a:d3:83:9d: 83:ef:77:ea:86:62:10:2c:1a:33:67:df:41:d1:d1:a8:67:10: 39:f1:cc:ed:15:34:8b:2e:ac:c9:ad:b8:04:a5:5f:53:31:ad: 61:3c:62:f1:0d:66:1b:3a:55:28:d0:d8:a7:de:e1:ca:bd:b8: 0a:07:70:d7:57:95:8a:c0:c3:6f:63:d1:fa:b3:b4:bb:a9:c8: 47:12:4d:da:e6:54:77:47:28:ca:cd:04:d9:87:77:27:a2:7a: 50:1e:19:b4:54:71:2e:c3:7e:e2:ee:65:64:b6:07:01:2f:52: 15:94:1d:79:2f:97:5b:e1:df:0a:03:b0:16:db:56:a5:af:44: af:bf:a2:2d:f5:cc:26:1f:56:f9:84:79:2c:9c:a0:d7:e5:b0: a8:82:c3:62:d5:52:78:05:4a:93:a2:f0:ac:fd:08:e4:9d:ae: 67:45:15:64:88:ff:2c:88:eb:18:42:b2:86:5b:bd:dc:4b:1a: 6f:30:63:57:00:ed:14:6c:55:07:a9:17:eb:72:bc:20:dc:04: 60:37:55:59:86:54:27:da:84:0d:ca:ed:03:0d:c4:d5:51:3e: 39:dc:95:ac:59:2e:6c:d7:3b:c0:06:49:eb:05:f2:ec:3e:ee: 23:f8:a6:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUDgCv92VSG6cJB17mXdcuxTYJY+gwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjYwNzI3MDMxMDA4WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0BjMTZmOGVmNmMzODM0OGNjZThkMjU4NzFiNDY0NjJmODE4 ODU4NDg0ZDVhMjAyMmNkNGUyNmQ4MzE5NmVmYWZiMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCbBBAjqXp9tgv5Qpf0RxJiar0AK94nobCMO1++ukHARfJg 9T+BChplYwvvTJuS+HO695OCU+wWrhsx9s4xS6c721OYk5PlBQnfdRBBYLt7mkeF XueDWLvBYo5DzKU4rFTsSs794icUf7Z2EjYNDuKrR0/8k5hFmXK/DJOWPKSRtMHP 6ih7vbTbRLqTSAYebYoH/maIfwrZc1ReCNdcmzo6NKDt7SVJ7ewlxH0gMYikdPxU CdGEVN2NjjYSon2bYqALSoq41P2FWPWtB61jrxA8KALUjIzj+HBk3yr4etKTwsjc gVya34U8u/8FWAXUGPcr6Fb/VXBMoRdPuK1mK5kJAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQU4Ed40gr4k8HMtvtkub+8MCmjnOwwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FmNmQwY2ExLWRkNzctNDI0OS1hNWNmLWRkNzU3NGRiMzRmYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYSIwDQYJKoZIhvcNAQELBQADggEBAGR1BAi4W+2c5JVDQBTBOtOD nYPvd+qGYhAsGjNn30HR0ahnEDnxzO0VNIsurMmtuASlX1MxrWE8YvENZhs6VSjQ 2Kfe4cq9uAoHcNdXlYrAw29j0fqztLupyEcSTdrmVHdHKMrNBNmHdyeielAeGbRU cS7DfuLuZWS2BwEvUhWUHXkvl1vh3woDsBbbVqWvRK+/oi31zCYfVvmEeSycoNfl sKiCw2LVUngFSpOi8Kz9COSdrmdFFWSI/yyI6xhCsoZbvdxLGm8wY1cA7RRsVQep F+tyvCDcBGA3VVmGVCfahA3K7QMNxNVRPjnclaxZLmzXO8AGSesF8uw+7iP4poU= -----END CERTIFICATE-----Generated at Tue Jul 28 21:20:24 2026 by rpki-client