$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35a8c530-d885-41fb-af4a-007d63505a5e.roa File: 35a8c530-d885-41fb-af4a-007d63505a5e.roa (raw, json) Hash identifier: lru8ZxP5krP+Rms40LEuNPBfE/Mc59AHEPeIG8yKSk8= Subject key identifier: 9D:43:C4:E6:D6:8C:6F:63:E2:DD:77:71:11:88:44:CA:8D:95:BC:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3FA7C8F57B6E632F5BE4E3BE202FF033ACC5F043 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35a8c530-d885-41fb-af4a-007d63505a5e.roa Signing time: Mon 27 Apr 2026 00:00:36 +0000 ROA not before: Mon 27 Apr 2026 00:00:36 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da18:8000::/37 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a7:c8:f5:7b:6e:63:2f:5b:e4:e3:be:20:2f:f0:33:ac:c5:f0:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 27 00:00:36 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=3f6f30a5cc50824f55c4caae93d127f989c4dc11f68a01aeead5ff4740f8d674, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ad:bc:4f:e3:20:13:59:f4:12:c0:a0:a5:3b: bf:6d:77:14:c6:e0:cf:1b:d6:9b:b4:89:ae:3b:4e: 3e:44:fc:86:ff:77:d0:78:c0:c5:11:60:92:77:2c: 16:25:6d:3e:3c:dc:0c:f7:7f:cf:a8:bb:f2:4e:08: 36:75:19:dc:81:b8:66:bb:e8:b3:84:7a:2b:a1:d3: 3b:b7:32:57:85:1d:50:8d:50:7d:54:cd:3c:7a:9a: ab:cd:4e:c8:d0:3e:dd:cc:8e:db:09:24:73:30:ec: 2c:bd:4d:06:51:dc:66:0a:10:2e:df:93:78:b9:33: d6:f9:1f:9d:12:78:19:93:46:28:2b:3c:c8:ed:79: a0:59:62:21:e0:06:dd:f6:d9:d0:98:76:cb:88:1c: 73:c4:ad:5e:68:a8:d5:78:bd:b0:1b:c3:36:9b:23: 99:6e:10:58:56:ba:d7:15:19:b0:61:ed:2d:2c:fc: 30:a7:09:a3:0e:d7:b5:31:24:5c:5c:c9:81:ba:77: 7b:81:e6:32:a9:3d:fc:6d:91:bc:66:59:9d:77:7d: ca:c5:57:c5:ff:9c:e7:9f:4b:8f:59:7e:c1:ab:4b: 41:c7:f7:e9:77:33:e7:c6:38:89:ef:8b:e3:c2:23: 56:8c:5a:ee:94:e5:c8:2b:97:b0:2e:0f:e0:c8:12: dd:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:43:C4:E6:D6:8C:6F:63:E2:DD:77:71:11:88:44:CA:8D:95:BC:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35a8c530-d885-41fb-af4a-007d63505a5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da18:8000::/37 Signature Algorithm: sha256WithRSAEncryption a0:10:70:9b:8b:a0:35:7d:46:92:07:50:45:d0:b3:e8:e5:32: c2:74:41:9d:90:60:cd:d0:ad:c2:f1:d6:fa:3a:a0:91:7f:c7: 20:35:7f:d9:52:84:b0:8b:98:c7:53:87:0e:08:60:70:1b:36: 87:fc:f5:02:93:67:05:5a:92:a4:9e:b5:0a:b8:33:ae:40:45: d8:cc:a2:d4:11:06:13:4c:ae:d9:af:47:95:a9:12:14:84:a0: eb:b5:01:2d:73:4f:44:7d:ef:a2:c9:bf:bb:b1:64:17:c1:25: c0:78:eb:96:dc:75:7a:8f:0a:7b:1e:95:7d:46:c1:e6:e2:d8: 99:db:bf:17:5c:52:94:97:bf:e9:9c:b7:bd:bc:7e:56:78:d1: 47:6b:48:9f:b0:ae:5f:59:64:43:74:4f:5d:5d:e4:40:74:eb: 9f:06:25:4a:7a:1d:22:f4:44:0f:e1:1d:17:7e:e5:8c:83:af: 2f:43:6a:fa:8f:06:bd:b5:2a:93:cf:27:15:e8:88:2c:af:86: 6a:02:b0:24:43:e5:f8:02:0f:ce:03:de:af:99:4f:0b:34:e2: a9:4a:4b:b3:27:ca:69:c6:a3:25:99:c1:8e:17:ae:55:09:79: c2:eb:9b:0a:8e:50:cf:f5:76:02:69:c8:99:e0:dd:dc:17:d7: f5:8f:a5:9b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUP6fI9XtuYy9b5OO+IC/wM6zF8EMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQyNzAwMDAzNloX DTI2MDcyNjIzNTk1OVowejFJMEcGA1UEBRNAM2Y2ZjMwYTVjYzUwODI0ZjU1YzRj YWFlOTNkMTI3Zjk4OWM0ZGMxMWY2OGEwMWFlZWFkNWZmNDc0MGY4ZDY3NDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr628T+MgE1n0EsCgpTu/bXcUxuDP G9abtImuO04+RPyG/3fQeMDFEWCSdywWJW0+PNwM93/PqLvyTgg2dRncgbhmu+iz hHorodM7tzJXhR1QjVB9VM08epqrzU7I0D7dzI7bCSRzMOwsvU0GUdxmChAu35N4 uTPW+R+dEngZk0YoKzzI7XmgWWIh4Abd9tnQmHbLiBxzxK1eaKjVeL2wG8M2myOZ bhBYVrrXFRmwYe0tLPwwpwmjDte1MSRcXMmBund7geYyqT38bZG8Zlmdd33KxVfF /5znn0uPWX7Bq0tBx/fpdzPnxjiJ74vjwiNWjFrulOXIK5ewLg/gyBLd/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFJ1DxObWjG9j4t13cRGIRMqNlbwzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM1YThjNTMwLWQ4ODUtNDFmYi1hZjRhLTAwN2Q2MzUwNWE1ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaGIAwDQYJKoZIhvcNAQELBQADggEBAKAQcJuLoDV9RpIHUEXQ s+jlMsJ0QZ2QYM3QrcLx1vo6oJF/xyA1f9lShLCLmMdThw4IYHAbNof89QKTZwVa kqSetQq4M65ARdjMotQRBhNMrtmvR5WpEhSEoOu1AS1zT0R976LJv7uxZBfBJcB4 65bcdXqPCnselX1Gwebi2JnbvxdcUpSXv+mct728flZ40UdrSJ+wrl9ZZEN0T11d 5EB0658GJUp6HSL0RA/hHRd+5YyDry9DavqPBr21KpPPJxXoiCyvhmoCsCRD5fgC D84D3q+ZTws04qlKS7MnymnGoyWZwY4XrlUJecLrmwqOUM/1dgJpyJng3dwX1/WP pZs= -----END CERTIFICATE-----Generated at Sun May 3 15:27:29 2026 by rpki-client