$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34418644-e5bc-49e0-b5df-6ef63db08788.roa File: 34418644-e5bc-49e0-b5df-6ef63db08788.roa (raw, json) Hash identifier: BJ7Z92JhdUGg7FX0TmnFQnUwnfu6UZWloR/zvUFU2HE= Subject key identifier: E3:1A:7B:7D:20:1E:9D:A4:40:40:CD:3B:5D:27:39:F4:DF:57:A9:71 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1A463CBDAB05F6802B3EDB1DA107906C9A3158A1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34418644-e5bc-49e0-b5df-6ef63db08788.roa Signing time: Thu 12 Mar 2026 16:23:30 +0000 ROA not before: Thu 12 Mar 2026 16:23:30 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:e040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:46:3c:bd:ab:05:f6:80:2b:3e:db:1d:a1:07:90:6c:9a:31:58:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:23:30 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=340a2b8c1727ac9b1912e4a43895ab307d87c0c5ba68edc7ae7690986e65ce23, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:f6:bc:98:19:08:ff:07:34:d6:a8:87:a2: 52:e4:a8:5f:3a:0a:0c:36:28:1f:c3:1a:d0:6d:f6: eb:fb:4e:37:34:da:16:5a:9b:d8:d7:fc:8b:c8:0d: 66:9f:a5:4c:27:ea:77:e4:34:87:4a:9b:2c:db:91: 73:26:b0:69:33:e8:c8:20:92:11:9a:73:d7:ed:f6: 33:89:3b:f5:08:f3:95:0e:4c:66:ea:21:9a:ec:a1: 6b:bf:d5:88:c0:26:44:8d:95:61:78:8b:17:4b:4d: ac:d3:32:13:0c:78:08:66:25:ab:86:a7:e1:5e:f8: 81:6a:7c:17:c8:b1:0d:4f:79:0c:f1:b8:ff:f6:ab: 8f:27:11:0b:63:d5:33:f9:68:d6:31:15:77:f6:00: c8:68:f6:30:30:3e:35:4f:71:6c:c7:45:d4:2e:6f: f3:58:4a:b7:85:b1:b7:d2:12:d7:75:5e:27:17:af: 26:ee:1f:ef:19:a8:35:97:15:92:af:b1:d0:03:4c: 8c:44:78:67:0f:5d:69:a3:35:f6:76:56:ba:4b:8d: 7f:e7:97:40:b8:93:e3:e5:c1:f7:f6:4e:22:ef:7a: 67:06:f5:3c:bb:16:fa:a5:79:cd:9e:4d:34:81:00: f9:27:dc:40:6e:5d:f7:bc:3e:01:cb:ef:23:3d:37: d1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:1A:7B:7D:20:1E:9D:A4:40:40:CD:3B:5D:27:39:F4:DF:57:A9:71 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/34418644-e5bc-49e0-b5df-6ef63db08788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:e040::/48 Signature Algorithm: sha256WithRSAEncryption 4c:b1:b8:b1:37:a2:82:79:ac:e2:b7:b5:74:18:b3:d7:aa:49: 74:8e:ed:8e:3d:a2:e2:38:2d:3f:de:ff:2f:4f:0e:d4:e6:76: 14:94:70:6d:f8:96:63:8f:75:fb:4b:92:89:f5:b7:b1:3e:5b: c2:0c:8f:5a:11:6f:04:12:77:1c:4f:79:e8:8e:60:fc:66:2c: 3c:34:13:66:8c:8b:aa:d3:12:fd:17:50:1b:7f:35:9f:cd:32: bf:c8:49:f8:b9:74:2f:bf:9d:1b:59:7a:29:93:8a:bd:0f:bf: 32:9d:68:8a:48:d4:07:c3:2b:21:cf:83:d8:0c:fe:2d:41:2c: 19:4d:69:ff:1d:f7:d7:04:53:7a:fc:9a:84:d9:74:99:0c:c9: ef:bc:e8:8c:e9:b6:f6:8d:dc:c7:e9:54:e5:f1:09:f1:b9:ae: 91:04:56:35:78:d7:54:e1:3d:47:7d:e2:cf:ff:25:6c:a3:4b: 45:fc:e6:50:30:02:32:26:cc:14:23:7d:55:8f:60:24:69:67: db:93:5e:63:ee:e2:c7:cc:60:39:30:57:61:58:d4:79:3f:19: 6e:b0:e7:c4:1f:a9:b0:2e:3f:3b:fa:c9:f4:41:cf:95:a9:e5: 68:b3:e0:3b:d5:78:d0:cd:2c:6a:c8:e6:a0:8e:93:cb:a6:69: 6b:06:f3:05 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGkY8vasF9oArPtsdoQeQbJoxWKEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjMzMFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMzQwYTJiOGMxNzI3YWM5YjE5MTJl NGE0Mzg5NWFiMzA3ZDg3YzBjNWJhNjhlZGM3YWU3NjkwOTg2ZTY1Y2UyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKb2vJgZCP8HNNaoh6JS5KhfOgoM NigfwxrQbfbr+043NNoWWpvY1/yLyA1mn6VMJ+p35DSHSpss25FzJrBpM+jIIJIR mnPX7fYziTv1CPOVDkxm6iGa7KFrv9WIwCZEjZVheIsXS02s0zITDHgIZiWrhqfh XviBanwXyLENT3kM8bj/9quPJxELY9Uz+WjWMRV39gDIaPYwMD41T3Fsx0XULm/z WEq3hbG30hLXdV4nF68m7h/vGag1lxWSr7HQA0yMRHhnD11pozX2dla6S41/55dA uJPj5cH39k4i73pnBvU8uxb6pXnNnk00gQD5J9xAbl33vD4By+8jPTfRhwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOMae30gHp2kQEDNO10nOfTfV6lxMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM0NDE4NjQ0LWU1YmMtNDllMC1iNWRmLTZlZjYzZGIwODc4OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauuBAMA0GCSqGSIb3DQEBCwUAA4IBAQBMsbixN6KCeazit7V0 GLPXqkl0ju2OPaLiOC0/3v8vTw7U5nYUlHBt+JZjj3X7S5KJ9bexPlvCDI9aEW8E EnccT3nojmD8Ziw8NBNmjIuq0xL9F1AbfzWfzTK/yEn4uXQvv50bWXopk4q9D78y nWiKSNQHwyshz4PYDP4tQSwZTWn/HffXBFN6/JqE2XSZDMnvvOiM6bb2jdzH6VTl 8Qnxua6RBFY1eNdU4T1HfeLP/yVso0tF/OZQMAIyJswUI31Vj2AkaWfbk15j7uLH zGA5MFdhWNR5PxlusOfEH6mwLj87+sn0Qc+VqeVos+A71XjQzSxqyOagjpPLpmlr BvMF -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:02 2026 by rpki-client