$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa File: 373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa (raw, json) Hash identifier: 8xa0Zo9fTV8ssyG/lYRGjozj+4h/MfaUX3VlANEdwQI= Subject key identifier: 2C:11:94:FB:A6:37:2C:D1:80:DA:97:0D:ED:51:BA:09:EB:E8:FF:FC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 64FB2D2521C1C25A3C0901691FE7787564395C87 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa Signing time: Thu 12 Mar 2026 16:27:53 +0000 ROA not before: Thu 12 Mar 2026 16:27:53 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:8000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fb:2d:25:21:c1:c2:5a:3c:09:01:69:1f:e7:78:75:64:39:5c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:27:53 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=4690a1e4efdac38cb3d59e19758e0c947c4440f9f21727bb08645e1a9604a5ad, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:2e:7a:99:93:2b:22:43:7e:f3:26:44:c1: b5:3d:ce:a0:e5:f2:f7:5f:c8:22:b5:b8:fe:6a:37: 63:a3:69:bc:68:ad:47:4d:73:0c:c7:6e:03:81:81: 9d:97:12:4f:c3:b5:f4:f8:c6:44:7f:fb:1a:a6:93: df:e1:9b:c6:89:a2:3b:85:63:58:14:63:0c:94:07: fa:9d:51:b3:d0:06:a2:85:e3:f5:8c:da:a3:b5:72: e5:74:f0:46:84:cd:52:e1:60:d3:e2:44:ce:2b:ce: 18:f9:26:9a:bc:a9:00:8a:0a:28:e4:8c:8c:b1:c2: c4:e5:ea:b0:db:f3:0d:42:48:d0:b4:00:91:48:d1: 1f:4d:09:f9:a8:94:e7:c1:5f:53:b9:0d:ee:e3:57: 4e:20:2c:53:3b:ee:0a:83:fc:5d:c9:a0:06:ed:db: 72:3c:e8:b8:7e:bd:6f:08:70:9d:c0:63:67:8e:d8: 00:c6:61:b8:79:90:08:39:d8:21:99:97:c5:5a:e5: d1:c4:5a:1f:dd:7c:55:0a:37:87:ec:d2:dd:c7:78: c7:ec:9f:bc:df:8c:d0:ab:0b:cb:4c:c2:11:79:d7: cb:7a:3c:b6:7d:66:4a:46:57:0b:63:c6:ce:0b:ca: f4:60:51:0c:d3:cb:a6:d5:d8:25:8c:f5:ef:75:38: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:11:94:FB:A6:37:2C:D1:80:DA:97:0D:ED:51:BA:09:EB:E8:FF:FC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/373dfcb8-1b1a-49a8-9b61-03b10edb88ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:8000::/40 Signature Algorithm: sha256WithRSAEncryption 3c:04:e8:94:33:b4:39:93:3a:64:53:49:2a:e5:1d:c1:0e:11: 88:59:7f:db:98:93:10:9d:2b:53:d1:73:c7:fa:fb:15:44:b8: dd:0b:d0:72:af:15:37:cf:4a:ce:fe:c9:41:4f:72:b1:c5:fe: f4:12:ed:1c:4e:33:80:5f:f0:58:4a:bb:ba:31:da:f0:15:2a: 1d:69:17:6f:f6:6a:41:74:ea:50:78:a1:be:88:e2:61:e7:b0: e2:5a:9e:f6:54:72:3c:ca:05:68:17:db:05:b1:b4:96:e7:e6: 72:aa:f2:30:fd:0c:6d:57:bf:66:1c:92:cb:ff:d1:2f:ea:65: 72:b1:10:81:50:bb:b1:15:35:f0:eb:62:ff:ca:69:db:c7:a3: d7:ac:58:77:86:e2:e5:48:a9:57:a4:cd:4e:df:33:93:5f:8e: 03:b0:ca:a5:ce:89:4a:c1:d0:ea:4e:16:d9:e2:a3:68:e9:29: 9e:2d:a3:e9:6d:47:cc:75:2b:e3:25:c4:72:33:d2:28:d3:ea: 9e:6e:95:0d:1b:88:2b:b5:c7:5d:c5:eb:19:7b:9e:3c:2c:86: 08:b0:4b:22:8b:1d:90:8b:45:20:46:f5:35:12:bb:a7:83:db: d8:f1:32:b0:5d:39:4c:52:79:3a:f7:43:ee:b6:e6:23:0f:27: 34:a6:1e:b3 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUZPstJSHBwlo8CQFpH+d4dWQ5XIcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2Mjc1M1oX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNANDY5MGExZTRlZmRhYzM4Y2IzZDU5 ZTE5NzU4ZTBjOTQ3YzQ0NDBmOWYyMTcyN2JiMDg2NDVlMWE5NjA0YTVhZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGUuepmTKyJDfvMmRMG1Pc6g5fL3 X8gitbj+ajdjo2m8aK1HTXMMx24DgYGdlxJPw7X0+MZEf/sappPf4ZvGiaI7hWNY FGMMlAf6nVGz0AaiheP1jNqjtXLldPBGhM1S4WDT4kTOK84Y+SaavKkAigoo5IyM scLE5eqw2/MNQkjQtACRSNEfTQn5qJTnwV9TuQ3u41dOICxTO+4Kg/xdyaAG7dty POi4fr1vCHCdwGNnjtgAxmG4eZAIOdghmZfFWuXRxFof3XxVCjeH7NLdx3jH7J+8 34zQqwvLTMIRedfLejy2fWZKRlcLY8bOC8r0YFEM08um1dgljPXvdTh/cQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFCwRlPumNyzRgNqXDe1Rugnr6P/8MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3M2RmY2I4LTFiMWEtNDlhOC05YjYxLTAzYjEwZWRiODhlYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6YAwDQYJKoZIhvcNAQELBQADggEBADwE6JQztDmTOmRTSSrl HcEOEYhZf9uYkxCdK1PRc8f6+xVEuN0L0HKvFTfPSs7+yUFPcrHF/vQS7RxOM4Bf 8FhKu7ox2vAVKh1pF2/2akF06lB4ob6I4mHnsOJanvZUcjzKBWgX2wWxtJbn5nKq 8jD9DG1Xv2Ycksv/0S/qZXKxEIFQu7EVNfDrYv/KadvHo9esWHeG4uVIqVekzU7f M5NfjgOwyqXOiUrB0OpOFtnio2jpKZ4to+ltR8x1K+MlxHIz0ijT6p5ulQ0biCu1 x13F6xl7njwshgiwSyKLHZCLRSBG9TUSu6eD29jxMrBdOUxSeTr3Q+625iMPJzSm HrM= -----END CERTIFICATE-----Generated at Thu Mar 19 12:27:59 2026 by rpki-client