$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa File: 60f85a40-3034-46e1-a52b-6569867c71a0.roa (raw, json) Hash identifier: 4okdI79DX3o7G8RQ9oMBWi2lBvdhzr6pRcK6as5vrQc= Subject key identifier: 5F:5D:00:BF:49:23:46:DE:41:C5:36:D0:22:D5:6A:9F:1B:53:0F:80 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 697DB68DCDFB103E1259283A37F73F7239E186DC Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa Signing time: Tue 24 Feb 2026 00:40:42 +0000 ROA not before: Tue 24 Feb 2026 00:40:42 +0000 ROA not after: Mon 25 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 147.108.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:7d:b6:8d:cd:fb:10:3e:12:59:28:3a:37:f7:3f:72:39:e1:86:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 24 00:40:42 2026 GMT Not After : May 25 23:59:59 2026 GMT Subject: serialNumber=6a390a1437cef10e8d14fe63822815a480a51df7ad6ecc43f576622653d96884, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:03:f0:55:e8:97:e8:67:11:2a:e2:e1:25:06: 5b:74:ff:23:b7:f3:e8:16:79:7e:0d:fb:f6:1f:2c: 24:38:c8:d0:2e:90:24:e7:0b:c5:11:1c:65:43:fa: f0:4d:8c:12:37:c9:bf:bb:3b:71:bc:08:52:95:82: ac:b6:50:07:c4:b2:89:d9:d9:5c:a2:6d:79:32:92: 4f:db:b6:65:89:d9:64:b3:e0:24:c1:eb:26:00:73: 67:fa:52:1f:e7:f4:5c:45:66:f5:cc:5f:f7:44:93: 93:e4:0c:f9:65:16:3a:92:72:92:90:11:9c:70:dc: 5e:37:3f:c8:a2:19:19:12:69:d7:0d:93:c3:e4:e7: a0:d5:60:96:c2:94:37:ca:65:3c:83:31:81:08:66: 26:a7:cb:75:f5:f0:80:4d:69:6f:39:65:24:50:2a: 34:7b:82:b8:c5:4e:d6:64:a8:72:e0:d8:a8:39:20: 30:1e:02:56:33:c3:83:2b:11:bd:fc:f1:72:83:75: 99:ee:d7:4f:ea:93:81:15:d5:37:c8:a3:5a:9e:2a: 8c:77:35:79:46:ff:6e:71:55:91:8a:67:fa:3a:8e: 73:2b:53:36:d4:75:c2:b8:ba:59:02:9d:3e:84:96: 42:84:e4:98:11:91:b8:e2:21:3f:01:da:81:a4:4e: 7f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5D:00:BF:49:23:46:DE:41:C5:36:D0:22:D5:6A:9F:1B:53:0F:80 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/60f85a40-3034-46e1-a52b-6569867c71a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.108.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9c:69:7a:ab:63:b1:d2:37:a1:4c:de:c1:e2:c1:d9:f5:b7:48: ef:7e:d4:59:4d:15:a9:78:5c:c2:f0:20:bf:80:ca:f0:7f:5a: 7a:cb:8a:d7:e7:af:f4:83:0c:bf:f6:07:be:9d:07:2d:7c:7f: 5a:07:32:6a:9c:a1:ee:a7:23:fe:8e:0e:ef:5c:eb:0e:6e:6b: b8:96:74:62:24:e6:7d:59:a9:d4:f2:84:35:18:3c:bc:b5:7b: da:c0:66:fc:23:09:61:1b:94:c6:0b:61:a5:ce:be:9d:79:7e: 93:14:a1:04:a8:d5:d6:b8:16:17:22:d0:8a:98:33:34:11:b7: 4a:40:02:97:38:8f:ad:93:ce:e2:44:93:19:35:69:af:40:90: 1f:56:cf:34:97:0c:4f:90:02:f9:43:08:e1:f4:56:60:ed:ca: ba:7d:c9:fb:3f:2d:4b:57:94:b5:3a:fa:60:13:a2:d7:eb:08: 91:52:9d:55:5c:e3:fe:0f:12:c9:97:b8:93:17:18:cb:3b:ae: e6:a7:7f:b4:8f:64:d7:3f:a5:43:af:4c:41:52:66:c7:73:76: e5:8b:a1:90:24:2f:1d:9a:da:33:f4:d9:6a:42:74:c2:43:b1: 31:ca:4d:18:b7:9c:b9:00:2d:98:18:ae:b3:30:b6:76:35:4c: 30:5b:09:02 -----BEGIN CERTIFICATE----- MIIF9zCCBN+gAwIBAgIUaX22jc37ED4SWSg6N/c/cjnhhtwwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjI0MDA0MDQyWhcNMjYwNTI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YTM5MGExNDM3Y2VmMTBlOGQxNGZlNjM4MjI4MTVhNDgw YTUxZGY3YWQ2ZWNjNDNmNTc2NjIyNjUzZDk2ODg0MS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC2A/BV6JfoZxEq4uElBlt0/yO38+gWeX4N+/YfLCQ4yNAu kCTnC8URHGVD+vBNjBI3yb+7O3G8CFKVgqy2UAfEsonZ2VyibXkykk/btmWJ2WSz 4CTB6yYAc2f6Uh/n9FxFZvXMX/dEk5PkDPllFjqScpKQEZxw3F43P8iiGRkSadcN k8Pk56DVYJbClDfKZTyDMYEIZiany3X18IBNaW85ZSRQKjR7grjFTtZkqHLg2Kg5 IDAeAlYzw4MrEb388XKDdZnu10/qk4EV1TfIo1qeKox3NXlG/25xVZGKZ/o6jnMr UzbUdcK4ulkCnT6ElkKE5JgRkbjiIT8B2oGkTn95AgMBAAGjggKwMIICrDAdBgNV HQ4EFgQUX10Av0kjRt5BxTbQItVqnxtTD4AwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYwZjg1YTQwLTMwMzQtNDZlMS1hNTJiLTY1Njk4NjdjNzFhMC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB MAUDAwCTbDANBgkqhkiG9w0BAQsFAAOCAQEAnGl6q2Ox0jehTN7B4sHZ9bdI737U WU0VqXhcwvAgv4DK8H9aesuK1+ev9IMMv/YHvp0HLXx/Wgcyapyh7qcj/o4O71zr Dm5ruJZ0YiTmfVmp1PKENRg8vLV72sBm/CMJYRuUxgthpc6+nXl+kxShBKjV1rgW FyLQipgzNBG3SkAClziPrZPO4kSTGTVpr0CQH1bPNJcMT5AC+UMI4fRWYO3Kun3J +z8tS1eUtTr6YBOi1+sIkVKdVVzj/g8SyZe4kxcYyzuu5qd/tI9k1z+lQ69MQVJm x3N25YuhkCQvHZraM/TZakJ0wkOxMcpNGLecuQAtmBiuszC2djVMMFsJAg== -----END CERTIFICATE-----Generated at Mon Mar 2 03:52:29 2026 by rpki-client