$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa File: afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa (raw, json) Hash identifier: 1zRcaiT75vJGGidUnmHCofkYFpzMjZeKFTdK+cfh1OY= Subject key identifier: CC:5D:F6:0A:DF:A2:93:A8:AC:86:03:BD:C2:9C:A5:C3:61:28:3A:98 Certificate issuer: /CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Certificate serial: 0A7202AFA3370FBC3DFA1E2954DD2C64914A5431 Authority key identifier: 2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa Signing time: Fri 31 Oct 2025 01:50:41 +0000 ROA not before: Fri 31 Oct 2025 01:50:41 +0000 ROA not after: Fri 05 Dec 2025 23:59:59 +0000 asID: 14618 IP address blocks: 2600:f0f0:6111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:72:02:af:a3:37:0f:bc:3d:fa:1e:29:54:dd:2c:64:91:4a:54:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08 Validity Not Before: Oct 31 01:50:41 2025 GMT Not After : Dec 5 23:59:59 2025 GMT Subject: serialNumber=e1ff4027dbecda835e49ab759da21f942f63bfe77116eb3149c2310631ac26cc, CN=fbb27576-cac2-4381-9a53-6c15e0dc26ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:74:23:7c:6a:6c:c2:ef:48:05:5d:3e:83:2c: 39:cd:5f:37:ce:b9:48:06:3c:79:de:ec:be:76:ef: aa:ea:af:58:84:b8:e2:6d:81:66:82:51:02:06:8c: cb:ac:bd:fe:46:41:15:cf:cf:e5:27:0d:e6:31:ec: 2d:4c:76:5c:36:32:73:6f:44:bd:9c:df:bc:f5:1b: cd:4d:cc:af:36:c3:06:75:37:9d:af:50:46:20:09: 93:b6:9d:81:7f:b8:6e:4e:29:c1:40:fa:a2:fd:dd: 90:3e:e7:30:c3:5e:ac:6c:f2:6a:c8:30:69:78:85: b6:f3:c2:e4:05:4b:2e:00:3e:46:0f:37:b0:2e:da: 90:85:f2:3c:20:56:e3:77:86:87:0d:0a:aa:a9:61: f1:40:7d:27:5e:08:cf:e0:13:a8:86:51:9a:d4:f3: cc:b5:43:58:03:d7:33:4d:4b:78:5d:79:8b:16:bf: e7:e1:7b:26:79:ec:af:81:bd:38:cb:71:0b:70:5b: 58:ed:40:2e:ca:34:43:8f:58:49:d4:32:0d:a3:fe: 83:aa:9d:95:71:36:68:08:21:ce:b9:8b:5f:a7:b1: 51:d9:f6:3a:99:85:2c:52:2d:e8:91:cb:c5:5b:23: 4c:2d:33:ef:7e:d9:7f:53:23:67:19:d3:9e:4c:90: 68:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5D:F6:0A:DF:A2:93:A8:AC:86:03:BD:C2:9C:A5:C3:61:28:3A:98 X509v3 Authority Key Identifier: keyid:2E:18:E2:08:A1:82:57:1B:09:7D:D2:23:A7:16:9E:40:EB:E9:89:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6a9537a8-a685-4b48-9fa8-8362e4fc47ae/b5845c307d0bf61b134b8ab711545826b1707fd5f0af84da08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/afcfcffe-c734-4ef0-95c8-ebc6232f6591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/517f3ed7-58b5-4796-be37-14d62e48f056/C_YbE0uKtxFUWCaxcH_V8K-E2gg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:f0f0:6111::/48 Signature Algorithm: sha256WithRSAEncryption 3b:7d:d8:9b:b5:a9:98:51:63:6c:90:95:5a:98:d3:c8:07:b6: b1:cd:0e:0b:6d:ca:fc:45:0f:5f:d2:ad:4d:fe:b9:cc:8c:a9: 50:69:e0:df:dd:01:f2:55:62:ec:1b:7c:19:a6:09:b9:bb:c5: 29:ec:a5:d7:d8:ee:7c:12:c5:73:2f:87:2e:a0:54:c8:e9:2f: c7:3c:c3:11:3e:ff:54:ac:bb:9c:f7:60:57:77:5c:2c:9f:c3: b7:52:87:89:1a:70:47:e8:0b:ba:33:e8:63:95:58:45:92:8c: 1d:b0:8c:5a:91:9b:e6:ce:29:76:e4:48:6a:d8:c2:56:c1:68: d3:90:40:4a:fb:08:7c:02:97:7d:80:35:86:9d:9b:85:32:a2: 89:e2:de:da:11:4a:a5:09:1e:3a:e4:17:8d:ea:f6:d0:27:bb: 88:33:b5:c0:e2:25:0e:de:e6:b8:9b:e9:f1:b1:4d:a8:36:74: b0:17:5e:58:11:9c:1d:f7:b8:12:a5:17:1e:b5:56:76:d7:b8: 4c:02:53:ee:f9:0a:3a:b4:ed:c4:c5:fc:34:8a:77:36:b5:10: dd:4c:05:57:87:05:3e:bc:7d:0a:7f:a2:a4:a7:bb:c1:e4:c0: 6b:e1:9f:d5:34:a9:37:e3:88:27:a4:36:54:4e:e5:31:02:38: f7:5f:e1:85 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUCnICr6M3D7w9+h4pVN0sZJFKVDEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjU4NDVjMzA3ZDBiZjYxYjEzNGI4YWI3MTE1NDU4MjZi MTcwN2ZkNWYwYWY4NGRhMDgwHhcNMjUxMDMxMDE1MDQxWhcNMjUxMjA1MjM1OTU5 WjB6MUkwRwYDVQQFE0BlMWZmNDAyN2RiZWNkYTgzNWU0OWFiNzU5ZGEyMWY5NDJm NjNiZmU3NzExNmViMzE0OWMyMzEwNjMxYWMyNmNjMS0wKwYDVQQDEyRmYmIyNzU3 Ni1jYWMyLTQzODEtOWE1My02YzE1ZTBkYzI2ZmYwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDHdCN8amzC70gFXT6DLDnNXzfOuUgGPHne7L5276rqr1iE uOJtgWaCUQIGjMusvf5GQRXPz+UnDeYx7C1Mdlw2MnNvRL2c37z1G81NzK82wwZ1 N52vUEYgCZO2nYF/uG5OKcFA+qL93ZA+5zDDXqxs8mrIMGl4hbbzwuQFSy4APkYP N7Au2pCF8jwgVuN3hocNCqqpYfFAfSdeCM/gE6iGUZrU88y1Q1gD1zNNS3hdeYsW v+fheyZ57K+BvTjLcQtwW1jtQC7KNEOPWEnUMg2j/oOqnZVxNmgIIc65i1+nsVHZ 9jqZhSxSLeiRy8VbI0wtM+9+2X9TI2cZ055MkGidAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUzF32Ct+ik6ishgO9wpylw2EoOpgwHwYDVR0jBBgwFoAULhjiCKGCVxsJ fdIjpxaeQOvpiT0wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82YTk1MzdhOC1h Njg1LTRiNDgtOWZhOC04MzYyZTRmYzQ3YWUvYjU4NDVjMzA3ZDBiZjYxYjEzNGI4 YWI3MTE1NDU4MjZiMTcwN2ZkNWYwYWY4NGRhMDguY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTE3ZjNlZDctNThiNS00Nzk2LWJlMzctMTRk NjJlNDhmMDU2L2FmY2ZjZmZlLWM3MzQtNGVmMC05NWM4LWViYzYyMzJmNjU5MS5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzUxN2YzZWQ3LTU4YjUtNDc5Ni1iZTM3 LTE0ZDYyZTQ4ZjA1Ni9DX1liRTB1S3R4RlVXQ2F4Y0hfVjhLLUUyZ2cuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmAPDwYREwDQYJKoZIhvcNAQELBQADggEBADt92Ju1qZhRY2yQlVqY08gH trHNDgttyvxFD1/SrU3+ucyMqVBp4N/dAfJVYuwbfBmmCbm7xSnspdfY7nwSxXMv hy6gVMjpL8c8wxE+/1Ssu5z3YFd3XCyfw7dSh4kacEfoC7oz6GOVWEWSjB2wjFqR m+bOKXbkSGrYwlbBaNOQQEr7CHwCl32ANYadm4Uyooni3toRSqUJHjrkF43q9tAn u4gztcDiJQ7e5rib6fGxTag2dLAXXlgRnB33uBKlFx61VnbXuEwCU+75Cjq07cTF /DSKdza1EN1MBVeHBT68fQp/oqSnu8HkwGvhn9U0qTfjiCekNlRO5TECOPdf4YU= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:46 2025 by rpki-client