$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa File: 35e5605c-f1af-42e1-99b5-cde6515ffeef.roa (raw, json) Hash identifier: /yazKYAJssOgTJ8auIKbGYq5QMaMQTTKWew81c95Z5Y= Subject key identifier: 28:34:CA:08:AD:20:2E:4C:D6:DB:EC:4A:BA:72:26:87:C2:A3:1D:D5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2A6F253AB9B122B468D2928C30FA112254B29E48 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa Signing time: Sat 02 May 2026 00:10:11 +0000 ROA not before: Sat 02 May 2026 00:10:11 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:10c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6f:25:3a:b9:b1:22:b4:68:d2:92:8c:30:fa:11:22:54:b2:9e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:10:11 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=b4225dc0588d0fe30c5894c061db34ef7de0f5098bedc44884106466fc8c4767, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:e6:d1:4d:80:ee:1a:c7:b5:e1:5e:92:f0: 2b:21:9e:ba:2a:71:3c:a1:5f:64:96:c6:72:8d:a7: ee:e8:80:86:c4:a0:96:31:76:e4:2b:77:d4:a4:1c: 32:b1:97:54:f1:61:7e:31:2d:1e:b7:37:13:43:87: 4a:6a:0f:f1:fe:20:36:1e:ee:da:42:25:19:0e:a8: 5a:e0:70:d6:e5:62:eb:55:6a:4e:5f:ff:6a:57:d0: d6:eb:28:36:9c:79:ae:79:76:2d:df:e9:4e:84:74: 8c:91:83:b1:d6:b9:3c:86:00:62:b1:cb:4c:cc:11: 43:21:bb:0d:04:d1:53:08:9c:4b:2a:c3:27:3b:74: d1:c9:7d:06:28:f8:a0:ad:34:b5:f3:2f:9b:f1:db: 8b:28:b7:61:e9:ea:b4:d6:0e:2a:15:2c:db:4e:60: 92:9a:af:ed:23:fb:e8:da:95:ac:6f:75:aa:90:d5: ba:ab:54:51:3a:5e:e9:03:db:e2:c0:de:81:3e:02: 25:e6:a9:6a:0c:69:da:b0:34:43:0b:03:ea:c3:04: 0f:1d:03:7d:11:b4:7b:29:80:f7:30:79:04:ba:f1: 1b:e1:57:df:39:2d:20:40:9e:56:ca:a3:01:64:ee: 31:37:05:d7:5f:45:87:9a:08:c8:3f:9a:f2:c9:79: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:34:CA:08:AD:20:2E:4C:D6:DB:EC:4A:BA:72:26:87:C2:A3:1D:D5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:10c0::/46 Signature Algorithm: sha256WithRSAEncryption a5:3b:9e:2e:2e:5c:7c:50:e7:a9:45:6c:c5:1b:c4:f6:f2:e6: 22:e2:ba:0a:21:bf:9a:ef:2e:15:f7:60:5b:ec:1d:c3:a7:b2: 4e:22:40:a7:1a:40:fa:7e:94:1a:b4:72:08:76:e3:6b:4c:af: bd:0c:12:f9:d0:ac:e4:7e:96:20:64:a8:c4:cd:c8:b0:ab:91: 69:52:16:d1:41:1c:ed:e8:c7:f1:1f:14:5e:12:5b:b0:2f:98: 95:85:4c:0e:45:fe:32:e8:a2:76:6f:7a:76:55:27:d1:f4:a4: 87:59:a6:40:fd:42:b7:04:80:53:53:9d:74:65:8e:98:84:3c: ad:c7:ff:14:05:67:3d:8b:18:a3:09:3c:8f:f2:e0:ea:78:58: dc:f3:ce:7c:0b:48:4a:f1:dc:ca:e9:a2:bc:8b:c3:f3:0b:fd: 9c:f9:b8:54:00:f2:af:5e:0a:44:eb:36:b9:98:fa:dd:7d:7e: 85:1f:cf:b5:eb:00:87:65:df:bc:93:8d:cb:e1:23:30:3e:46: d8:ca:0f:aa:b7:47:ae:c5:8b:61:ba:08:b7:ff:e7:bc:6b:73: 38:f6:87:c6:84:de:f4:ea:89:6e:a5:5b:97:7d:bc:72:a9:42: b9:ab:5f:74:e2:57:fd:9e:ae:bc:3c:a7:4c:42:cb:ba:19:ab: 00:32:63:d1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKm8lOrmxIrRo0pKMMPoRIlSynkgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMTAxMVoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAYjQyMjVkYzA1ODhkMGZlMzBjNTg5 NGMwNjFkYjM0ZWY3ZGUwZjUwOThiZWRjNDQ4ODQxMDY0NjZmYzhjNDc2NzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWvm0U2A7hrHteFekvArIZ66KnE8 oV9klsZyjafu6ICGxKCWMXbkK3fUpBwysZdU8WF+MS0etzcTQ4dKag/x/iA2Hu7a QiUZDqha4HDW5WLrVWpOX/9qV9DW6yg2nHmueXYt3+lOhHSMkYOx1rk8hgBisctM zBFDIbsNBNFTCJxLKsMnO3TRyX0GKPigrTS18y+b8duLKLdh6eq01g4qFSzbTmCS mq/tI/vo2pWsb3WqkNW6q1RROl7pA9viwN6BPgIl5qlqDGnasDRDCwPqwwQPHQN9 EbR7KYD3MHkEuvEb4VffOS0gQJ5WyqMBZO4xNwXXX0WHmgjIP5ryyXkCGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCg0ygitIC5M1tvsSrpyJofCox3VMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM1ZTU2MDVjLWYxYWYtNDJlMS05OWI1LWNkZTY1MTVmZmVlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8xDAMA0GCSqGSIb3DQEBCwUAA4IBAQClO54uLlx8UOepRWzF G8T28uYi4roKIb+a7y4V92Bb7B3Dp7JOIkCnGkD6fpQatHIIduNrTK+9DBL50Kzk fpYgZKjEzciwq5FpUhbRQRzt6MfxHxReEluwL5iVhUwORf4y6KJ2b3p2VSfR9KSH WaZA/UK3BIBTU510ZY6YhDytx/8UBWc9ixijCTyP8uDqeFjc8858C0hK8dzK6aK8 i8PzC/2c+bhUAPKvXgpE6za5mPrdfX6FH8+16wCHZd+8k43L4SMwPkbYyg+qt0eu xYthugi3/+e8a3M49ofGhN706olupVuXfbxyqUK5q1904lf9nq68PKdMQsu6GasA MmPR -----END CERTIFICATE-----Generated at Sun May 3 16:11:30 2026 by rpki-client