$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa File: 643f38bf-7102-4875-9b05-6243ebeaceb0.roa (raw, json) Hash identifier: 5faj2+WDjye3z4AkJnrGciBacEGt99bNHCxAYMSerM4= Subject key identifier: 15:7F:DA:10:39:A1:BF:D4:D3:FB:0C:5D:48:85:DD:3B:94:7B:06:4E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 67A0985D407F3F923DBB019BC76B7C668381478E Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa Signing time: Wed 05 Aug 2026 01:00:49 +0000 ROA not before: Wed 05 Aug 2026 01:00:49 +0000 ROA not after: Tue 03 Nov 2026 23:59:59 +0000 asID: 14618 IP address blocks: 75.2.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a0:98:5d:40:7f:3f:92:3d:bb:01:9b:c7:6b:7c:66:83:81:47:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Aug 5 01:00:49 2026 GMT Not After : Nov 3 23:59:59 2026 GMT Subject: serialNumber=d69ba9803ab9d06dde46b24cbebc95afc2369f55f24df8b7820554363f85edff, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:57:d6:2b:4c:7f:3a:19:f2:37:bb:41:8a:bd: 17:ef:db:2b:a5:b9:eb:4a:b2:db:16:7c:a6:07:2e: 76:a5:f8:50:af:4b:29:16:ca:98:4b:41:af:05:71: 04:af:15:cc:87:a3:e5:e4:60:1b:92:8c:ba:e9:ef: 13:c5:4d:d6:4e:75:24:08:95:31:71:b3:2e:a9:01: 85:72:4a:84:ed:3b:59:83:0e:5e:e5:0c:41:ac:65: 0b:c5:73:de:e4:4f:13:d9:bb:5d:7b:2d:e4:fe:79: a0:83:9d:d8:5a:39:2a:e5:cc:26:79:62:83:41:fe: f2:cc:67:22:a0:6e:eb:4f:83:c1:b6:1c:1f:98:6d: a5:f1:ff:7f:d9:7f:e7:5f:a6:57:9f:97:d2:7c:84: 94:9d:23:8c:f4:99:86:9f:83:03:c4:be:45:49:b9: 2b:d5:3e:75:60:cd:03:74:09:1e:21:c4:8a:e2:8d: 2d:8f:22:84:af:9a:10:bc:a5:fd:7a:05:d7:26:45: 02:fa:0d:6f:5c:68:ee:3b:fb:61:18:7e:15:ca:36: 69:c0:9d:3c:3c:1b:de:a6:58:54:2d:70:a2:ce:d4: cd:7d:53:f2:de:14:48:48:d2:71:d2:1b:9c:c2:f4: 56:d7:ad:a7:e1:ee:02:4d:65:ae:7b:5c:26:f7:aa: fc:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:7F:DA:10:39:A1:BF:D4:D3:FB:0C:5D:48:85:DD:3B:94:7B:06:4E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/643f38bf-7102-4875-9b05-6243ebeaceb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 75.2.128.0/18 Signature Algorithm: sha256WithRSAEncryption 4a:58:6e:3e:8b:2d:2a:58:2d:2e:9f:f7:4d:56:62:ed:02:20: 05:cc:16:ce:cb:5a:eb:5f:b6:da:d1:86:b5:06:31:8a:ab:df: eb:92:ec:76:6f:0e:e5:28:0d:99:5b:4d:2d:6c:62:c3:67:a6: 8d:d4:60:b6:27:f4:db:a5:d1:d8:56:ca:e3:f0:b3:9f:9e:9e: 8d:9b:e9:8f:17:6d:38:49:e8:e2:c6:92:af:28:00:f2:18:a1: 65:b9:24:08:1b:b3:e6:af:c6:e4:27:9d:8b:86:61:df:ed:33: 40:52:85:e8:e7:dd:1f:85:8f:0d:4a:1a:43:7d:5e:fc:de:e3: 8c:70:a7:fc:c2:00:13:6f:19:0e:8b:21:b6:1f:9a:93:05:a4: 46:70:f8:38:c8:15:5f:ec:4c:c4:7b:69:a8:bb:09:4e:5c:de: 05:ac:2f:38:d8:25:7c:c4:dc:da:02:21:94:9b:40:5d:11:84: 7e:67:f6:8b:26:6f:42:ae:4a:a9:86:57:5b:28:3a:c4:04:6d: a3:78:f8:34:bf:d7:2a:20:19:8c:02:74:9a:ac:35:21:47:49: da:be:09:b8:30:bc:9d:44:b9:7c:aa:46:a9:ed:44:e6:be:aa: ba:13:cd:91:11:b5:5d:9e:5e:e4:11:f4:2d:60:d1:a0:89:ec: ab:bc:53:2e -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUZ6CYXUB/P5I9uwGbx2t8ZoOBR44wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwODA1MDEwMDQ5WhcNMjYxMTAzMjM1OTU5 WjB6MUkwRwYDVQQFE0BkNjliYTk4MDNhYjlkMDZkZGU0NmIyNGNiZWJjOTVhZmMy MzY5ZjU1ZjI0ZGY4Yjc4MjA1NTQzNjNmODVlZGZmMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCPV9YrTH86GfI3u0GKvRfv2yuluetKstsWfKYHLnal+FCv SykWyphLQa8FcQSvFcyHo+XkYBuSjLrp7xPFTdZOdSQIlTFxsy6pAYVySoTtO1mD Dl7lDEGsZQvFc97kTxPZu117LeT+eaCDndhaOSrlzCZ5YoNB/vLMZyKgbutPg8G2 HB+YbaXx/3/Zf+dfplefl9J8hJSdI4z0mYafgwPEvkVJuSvVPnVgzQN0CR4hxIri jS2PIoSvmhC8pf16BdcmRQL6DW9caO47+2EYfhXKNmnAnTw8G96mWFQtcKLO1M19 U/LeFEhI0nHSG5zC9FbXrafh7gJNZa57XCb3qvyfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUFX/aEDmhv9TT+wxdSIXdO5R7Bk4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzY0M2YzOGJmLTcxMDItNDg3NS05YjA1LTYyNDNlYmVhY2ViMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAZLAoAwDQYJKoZIhvcNAQELBQADggEBAEpYbj6LLSpYLS6f901WYu0CIAXM Fs7LWutfttrRhrUGMYqr3+uS7HZvDuUoDZlbTS1sYsNnpo3UYLYn9Nul0dhWyuPw s5+eno2b6Y8XbThJ6OLGkq8oAPIYoWW5JAgbs+avxuQnnYuGYd/tM0BShejn3R+F jw1KGkN9Xvze44xwp/zCABNvGQ6LIbYfmpMFpEZw+DjIFV/sTMR7aai7CU5c3gWs LzjYJXzE3NoCIZSbQF0RhH5n9osmb0KuSqmGV1soOsQEbaN4+DS/1yogGYwCdJqs NSFHSdq+CbgwvJ1EuXyqRqntROa+qroTzZERtV2eXuQR9C1g0aCJ7Ku8Uy4= -----END CERTIFICATE-----Generated at Thu Aug 20 21:55:29 2026 by rpki-client