$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa File: af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa (raw, json) Hash identifier: 4mkPsUKMgLG+PoofOOS8vK4Jw0k+ItkjUMSWGjBWnmo= Subject key identifier: D3:CB:33:F6:9E:10:C6:1A:D3:D4:C8:4F:CA:F5:7F:04:F4:F8:5D:2B Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0865FEF7C970EE095FE88B68EC99065951ED2D Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa Signing time: Thu 15 Oct 2026 03:20:19 +0000 ROA not before: Thu 15 Oct 2026 03:20:19 +0000 ROA not after: Wed 13 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:65:fe:f7:c9:70:ee:09:5f:e8:8b:68:ec:99:06:59:51:ed:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 15 03:20:19 2026 GMT Not After : Jan 13 23:59:59 2027 GMT Subject: serialNumber=2328e0d402d123052c92e03126316bd5703ad87d9a0dba7059ed5322baecbcf6, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:13:0f:a4:f0:59:86:9f:39:22:91:bb:ab:4f: fa:69:06:5d:e5:5b:9b:d1:ba:23:55:ce:e5:97:83: 79:31:55:a7:84:8a:81:1a:58:3f:50:4e:18:db:c9: 04:79:fb:3a:24:a8:97:a6:1a:39:6f:b6:f9:f3:b4: 5d:6e:19:ef:3b:10:81:f4:13:28:68:d5:87:f3:ef: fd:dc:2f:c3:60:cf:24:d2:91:bd:da:76:81:6e:e2: 2c:d7:e4:2e:a6:22:f0:50:36:de:cf:3b:97:19:cd: f5:07:37:58:ac:c7:22:ee:40:0f:a8:64:79:8e:cc: ac:de:61:6e:19:62:cc:58:41:6a:88:60:1c:bd:4b: 82:85:eb:cb:c1:0b:5b:77:1e:b1:5f:7d:bf:d8:c0: 07:10:d0:f8:cd:78:63:fa:f6:3a:cb:38:df:36:c7: ac:3d:9f:7c:55:4b:a5:88:be:23:08:94:ee:d2:12: 79:6f:a4:7b:20:b4:1c:65:bc:e4:c1:9b:4a:9a:cb: 47:29:41:2d:7f:73:4d:e5:4b:c8:2a:a1:45:34:c0: 3d:5b:9e:c9:f3:94:f1:33:13:58:0e:07:75:0b:27: 3e:d4:e6:53:c4:68:e2:20:35:10:c8:83:da:de:e1: 52:36:0e:d6:1b:f9:54:70:28:b4:7a:14:17:db:24: 7f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CB:33:F6:9E:10:C6:1A:D3:D4:C8:4F:CA:F5:7F:04:F4:F8:5D:2B X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/af6d0ca1-dd77-4249-a5cf-dd7574db34fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6122::/48 Signature Algorithm: sha256WithRSAEncryption 17:a3:9d:11:1e:7e:93:d4:ff:6c:ac:a3:1a:65:54:1d:97:d8: dc:5a:78:79:ad:59:72:e4:8b:6f:e8:eb:c3:db:c5:de:09:45: 67:e5:98:de:9a:5e:ff:5b:25:5d:d8:54:b7:6a:10:b6:99:27: 86:d0:f9:48:4d:2c:4f:51:ff:32:46:d4:ab:1c:78:9b:28:90: b1:fe:ea:14:fb:e1:47:eb:90:21:d5:15:2e:4e:82:4f:2c:e3: a8:32:ee:1d:76:7e:6e:e4:ed:70:35:c0:e8:f1:4c:16:d3:cb: 92:2e:93:10:58:26:f1:78:42:ee:34:71:6d:ff:32:66:e8:8d: e6:c9:be:48:66:f8:78:a3:7f:c1:fb:a3:c8:69:2b:66:94:6d: 03:c2:00:3d:70:c9:95:df:1d:3c:33:4d:32:5d:1c:18:f2:f6: 62:ba:18:88:a1:68:97:e9:73:f6:ff:80:88:c2:70:e1:1e:7c: 83:a4:8a:46:d8:36:b0:55:5a:24:2b:46:38:20:bb:81:cf:10: d2:a8:37:52:d7:4d:b0:50:f4:29:ae:ef:7f:65:85:fe:b2:1a: f2:d5:66:fd:87:42:3c:d1:c9:8b:66:54:8e:51:f9:e8:80:32: 5b:fb:71:54:e1:ec:6d:2e:50:a6:29:6c:cc:34:dc:33:65:b5: 7c:89:a9:1c -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgITCGX+98lw7glf6Ito7JkGWVHtLTANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzJiNTg0NWMzMDdkMGJmNjFiMTM0YjhhYjcxMTU0NTgyNmIx NzA3ZmQ1ZjBhZjg0ZGEwODAeFw0yNjEwMTUwMzIwMTlaFw0yNzAxMTMyMzU5NTla MHoxSTBHBgNVBAUTQDIzMjhlMGQ0MDJkMTIzMDUyYzkyZTAzMTI2MzE2YmQ1NzAz YWQ4N2Q5YTBkYmE3MDU5ZWQ1MzIyYmFlY2JjZjYxLTArBgNVBAMTJGZiYjI3NTc2 LWNhYzItNDM4MS05YTUzLTZjMTVlMGRjMjZmZjCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAL4TD6TwWYafOSKRu6tP+mkGXeVbm9G6I1XO5ZeDeTFVp4SK gRpYP1BOGNvJBHn7OiSol6YaOW+2+fO0XW4Z7zsQgfQTKGjVh/Pv/dwvw2DPJNKR vdp2gW7iLNfkLqYi8FA23s87lxnN9Qc3WKzHIu5AD6hkeY7MrN5hbhlizFhBaohg HL1LgoXry8ELW3cesV99v9jABxDQ+M14Y/r2Oss43zbHrD2ffFVLpYi+IwiU7tIS eW+keyC0HGW85MGbSprLRylBLX9zTeVLyCqhRTTAPVueyfOU8TMTWA4HdQsnPtTm U8Ro4iA1EMiD2t7hUjYO1hv5VHAotHoUF9skf9UCAwEAAaOCArQwggKwMB0GA1Ud DgQWBBTTyzP2nhDGGtPUyE/K9X8E9PhdKzAfBgNVHSMEGDAWgBQuGOIIoYJXGwl9 0iOnFp5A6+mJPTAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv NTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3ZTk3MWFjLzZhOTUzN2E4LWE2 ODUtNGI0OC05ZmE4LTgzNjJlNGZjNDdhZS9iNTg0NWMzMDdkMGJmNjFiMTM0Yjhh YjcxMTU0NTgyNmIxNzA3ZmQ1ZjBhZjg0ZGEwOC5jZXIwgZ4GCCsGAQUFBwELBIGR MIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS81MTdmM2VkNy01OGI1LTQ3OTYtYmUzNy0xNGQ2 MmU0OGYwNTYvYWY2ZDBjYTEtZGQ3Ny00MjQ5LWE1Y2YtZGQ3NTc0ZGIzNGZiLnJv YTCBiAYDVR0fBIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0 LTIuYW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzct MTRkNjJlNDhmMDU2L0NfWWJFMHVLdHhGVVdDYXhjSF9WOEstRTJnZy5jcmwwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACYA8PBhIjANBgkqhkiG9w0BAQsFAAOCAQEAF6OdER5+k9T/bKyjGmVUHZfY 3Fp4ea1ZcuSLb+jrw9vF3glFZ+WY3ppe/1slXdhUt2oQtpknhtD5SE0sT1H/MkbU qxx4myiQsf7qFPvhR+uQIdUVLk6CTyzjqDLuHXZ+buTtcDXA6PFMFtPLki6TEFgm 8XhC7jRxbf8yZuiN5sm+SGb4eKN/wfujyGkrZpRtA8IAPXDJld8dPDNNMl0cGPL2 YroYiKFol+lz9v+AiMJw4R58g6SKRtg2sFVaJCtGOCC7gc8Q0qg3UtdNsFD0Ka7v f2WF/rIa8tVm/YdCPNHJi2ZUjlH56IAyW/txVOHsbS5QpilszDTcM2W1fImpHA== -----END CERTIFICATE-----Generated at Thu Nov 5 12:16:21 2026 by rpki-client