$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30c53cff-55f9-45ad-9f73-7ea438ddab51.roa File: 30c53cff-55f9-45ad-9f73-7ea438ddab51.roa (raw, json) Hash identifier: v34zn6E/ITY/efU/yO3iBL0zycOuJI6QDVZn2TwxPUU= Subject key identifier: 30:41:8C:AF:14:31:2E:84:F4:40:EB:B6:6E:E5:44:7B:E2:70:A3:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6FE3CC9F43079D04818330C580DA6EAFFBA09E88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30c53cff-55f9-45ad-9f73-7ea438ddab51.roa Signing time: Thu 12 Mar 2026 16:26:50 +0000 ROA not before: Thu 12 Mar 2026 16:26:50 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e3:cc:9f:43:07:9d:04:81:83:30:c5:80:da:6e:af:fb:a0:9e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:26:50 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=161ecc0cc0eed6cd45825efe25d31b87a57f7c1be374041982de11bf76699aae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:4c:3d:56:bb:02:4c:13:f5:6c:a0:2d:10: d7:bc:9e:ac:97:91:d0:af:60:42:c6:c7:91:65:0f: f9:d7:2e:66:86:8b:97:99:7a:5b:02:69:df:b7:27: 1f:a8:d0:96:de:56:2d:86:15:e2:1c:c9:c4:9b:40: f6:33:4a:78:07:87:82:3d:10:8b:11:08:76:ca:65: 0e:5f:40:39:b2:87:d0:83:28:27:6e:91:9d:1e:ce: 30:d1:7b:d1:38:a3:9f:a9:c0:8b:04:5c:14:05:bc: 53:bc:46:6d:4b:58:cb:5b:51:03:77:37:ab:43:ae: 9b:47:26:25:f1:78:b4:16:94:ea:c9:49:8b:95:1a: 34:32:67:eb:c9:1c:7e:0a:dd:90:d4:ae:22:98:12: 1a:cd:10:d5:08:98:c1:80:8c:cb:0a:5c:b0:07:5f: a9:e9:da:86:5b:b8:95:1c:1c:45:06:c7:b9:75:ac: 07:a2:72:cc:a4:55:d9:59:87:c5:4b:df:21:af:d2: 6f:aa:4c:e5:47:f0:f6:0e:58:c5:e6:f6:98:64:d7: 87:35:21:65:db:8e:a9:6a:5a:1c:8d:79:15:b0:85: 57:93:53:23:90:54:27:7a:31:6c:e0:72:8e:8e:de: cb:3d:23:58:be:b8:b8:d1:b4:33:af:5c:40:32:ce: 57:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:41:8C:AF:14:31:2E:84:F4:40:EB:B6:6E:E5:44:7B:E2:70:A3:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/30c53cff-55f9-45ad-9f73-7ea438ddab51.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption 40:dc:f4:26:e1:81:ca:54:4a:59:9e:a2:aa:24:44:e9:a3:c3: e5:21:13:c2:24:56:14:bc:20:f2:a5:5b:16:3b:cf:8b:b2:5c: 3d:2f:e2:3f:4f:3f:17:85:6f:3e:93:67:f9:4d:d9:20:7e:8a: 43:bf:e4:50:75:90:15:66:e0:6d:b0:87:c1:dc:d1:b5:1a:92: be:10:2a:0b:94:d2:85:45:bf:6e:8d:14:e3:80:39:d6:f3:62: d7:b3:2e:d6:09:31:3d:65:42:8b:12:70:e4:63:73:c6:c6:22: 25:1d:0b:b1:ed:4f:74:26:55:07:f8:fe:9f:b5:3f:83:ab:21: b8:44:3c:81:e5:77:0c:7e:d0:8f:03:38:92:3a:08:08:e8:e7: c5:9e:98:27:a4:56:53:d5:e6:f1:2e:93:81:93:86:71:3c:36: 37:e9:7d:73:82:82:11:3d:97:58:c5:b6:c7:8e:8e:a7:a9:71: 67:40:82:aa:90:0a:45:9d:ae:f3:8e:71:86:6d:02:ad:26:29: ca:08:82:79:eb:70:d5:3e:bb:8d:82:de:85:2a:04:4e:34:47: 50:78:b1:20:de:23:ee:10:68:01:48:73:ba:c2:ac:09:a8:c0: 97:e1:49:ee:ac:d3:42:fe:c8:57:34:4f:87:a8:be:f3:f8:c7: 4d:ff:10:52 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUb+PMn0MHnQSBgzDFgNpur/ugnogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjY1MFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMTYxZWNjMGNjMGVlZDZjZDQ1ODI1 ZWZlMjVkMzFiODdhNTdmN2MxYmUzNzQwNDE5ODJkZTExYmY3NjY5OWFhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLBMPVa7AkwT9WygLRDXvJ6sl5HQ r2BCxseRZQ/51y5mhouXmXpbAmnftycfqNCW3lYthhXiHMnEm0D2M0p4B4eCPRCL EQh2ymUOX0A5sofQgygnbpGdHs4w0XvROKOfqcCLBFwUBbxTvEZtS1jLW1EDdzer Q66bRyYl8Xi0FpTqyUmLlRo0MmfryRx+Ct2Q1K4imBIazRDVCJjBgIzLClywB1+p 6dqGW7iVHBxFBse5dawHonLMpFXZWYfFS98hr9JvqkzlR/D2DljF5vaYZNeHNSFl 246palocjXkVsIVXk1MjkFQnejFs4HKOjt7LPSNYvri40bQzr1xAMs5X3QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDBBjK8UMS6E9EDrtm7lRHvicKMTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMwYzUzY2ZmLTU1ZjktNDVhZC05ZjczLTdlYTQzOGRkYWI1MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6fDAMA0GCSqGSIb3DQEBCwUAA4IBAQBA3PQm4YHKVEpZnqKq JETpo8PlIRPCJFYUvCDypVsWO8+Lslw9L+I/Tz8XhW8+k2f5TdkgfopDv+RQdZAV ZuBtsIfB3NG1GpK+ECoLlNKFRb9ujRTjgDnW82LXsy7WCTE9ZUKLEnDkY3PGxiIl HQux7U90JlUH+P6ftT+DqyG4RDyB5XcMftCPAziSOggI6OfFnpgnpFZT1ebxLpOB k4ZxPDY36X1zgoIRPZdYxbbHjo6nqXFnQIKqkApFna7zjnGGbQKtJinKCIJ563DV PruNgt6FKgRONEdQeLEg3iPuEGgBSHO6wqwJqMCX4UnurNNC/shXNE+HqL7z+MdN /xBS -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:01 2026 by rpki-client