$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75cbf2ba-8573-4944-8cfe-e279d426a979.roa File: 75cbf2ba-8573-4944-8cfe-e279d426a979.roa (raw, json) Hash identifier: XZwPdn87nnF2sDPJxcIw65Vr6gF70zEB9AcSpynQaVE= Subject key identifier: FE:C1:C6:CC:11:24:70:18:65:08:13:80:27:43:62:11:32:56:9B:9F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4B8A4446A92DEFE5AEF87E19B7CAD7BC71777664 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75cbf2ba-8573-4944-8cfe-e279d426a979.roa Signing time: Thu 12 Mar 2026 16:23:23 +0000 ROA not before: Thu 12 Mar 2026 16:23:23 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:a080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8a:44:46:a9:2d:ef:e5:ae:f8:7e:19:b7:ca:d7:bc:71:77:76:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:23:23 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=0f13ba614472effd66188855d4c7f56a5e3ce877aef0163f7c00cb1b168b58e1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:98:38:6f:f9:49:cd:e5:7a:28:b7:51:dd: fe:47:5d:fb:63:7e:b4:0f:a3:31:02:ad:30:15:66: cc:db:73:89:84:da:67:82:62:10:99:17:97:c6:8c: 87:b1:7e:b3:3d:c0:dc:f0:5f:84:f3:ce:a5:97:e8: 17:9b:ee:e6:4e:91:eb:ef:01:ab:1d:c4:df:6a:3d: 80:fc:af:a8:94:c7:42:1c:07:7b:4e:2a:05:bd:de: 13:4d:51:b2:b0:07:c1:03:4f:00:62:60:ba:9d:54: 16:19:00:c3:e4:4b:ce:2c:cd:c9:de:5f:0b:82:d6: 43:1e:d0:e2:93:bc:e6:dd:05:7d:43:26:40:f4:6d: 29:3d:08:32:73:25:6e:17:59:a8:54:d5:d7:7f:ae: f7:1a:a2:75:24:b1:0f:9b:f5:bf:26:89:b8:7a:6c: 0d:6c:2c:13:96:fd:b5:57:43:a0:28:98:46:64:5b: 29:ab:f5:0a:4d:28:dc:84:bb:f8:ff:ad:de:ed:fe: 2f:15:89:aa:ac:08:ed:9b:cb:7c:ef:05:ce:bb:af: fd:bd:42:86:35:2d:4c:dd:aa:cb:02:ab:85:6f:64: 54:34:f9:51:43:44:ec:3e:79:96:40:95:70:8c:0c: 4a:b2:cf:06:08:ab:b3:13:5c:4b:8a:34:8f:2b:14: 75:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:C1:C6:CC:11:24:70:18:65:08:13:80:27:43:62:11:32:56:9B:9F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/75cbf2ba-8573-4944-8cfe-e279d426a979.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:a080::/48 Signature Algorithm: sha256WithRSAEncryption ae:4a:45:5b:79:52:27:b5:73:71:6a:43:9d:54:66:df:f6:a2: 63:de:89:66:0b:39:5e:db:9c:bc:96:c8:be:34:bc:2f:a6:31: bb:e2:e4:fb:5b:83:53:ab:fe:b8:c0:8f:02:2c:ff:41:68:62: 9d:4b:91:95:4f:06:88:db:33:d1:75:91:ec:8c:85:b7:06:93: 1d:8e:88:3e:f4:e3:73:e0:7c:8a:2b:3b:72:3b:e0:5c:ce:bd: 65:10:ad:6e:b8:f8:45:da:77:e6:2d:14:0d:7d:b6:94:6d:0c: 43:0f:b4:41:f8:8b:e4:1f:fb:81:2e:a6:80:15:5f:81:12:9f: 7d:cf:07:ae:32:f4:3b:df:81:17:37:23:80:49:99:4d:ae:61: 69:6a:52:75:de:64:98:6d:97:0e:9b:97:67:2d:2f:cb:31:8b: fc:fd:72:99:1f:b4:62:15:4c:06:37:e4:88:1f:47:87:f4:49: a8:f4:f0:6d:71:00:c6:4f:43:24:07:9f:ab:12:c0:bb:95:9c: 0b:9a:5b:c7:8d:5d:9d:90:b8:6a:c9:11:ef:2e:dc:bf:38:c3: c9:32:5f:c4:65:24:5b:30:34:db:4d:c7:d2:d7:14:6f:9b:f2: ff:7e:c2:69:cf:45:2c:29:65:88:6f:6e:4a:6e:26:46:f2:f2: 43:f8:2f:32 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUS4pERqkt7+Wu+H4Zt8rXvHF3dmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjMyM1oX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMGYxM2JhNjE0NDcyZWZmZDY2MTg4 ODU1ZDRjN2Y1NmE1ZTNjZTg3N2FlZjAxNjNmN2MwMGNiMWIxNjhiNThlMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszCYOG/5Sc3leii3Ud3+R137Y360 D6MxAq0wFWbM23OJhNpngmIQmReXxoyHsX6zPcDc8F+E886ll+gXm+7mTpHr7wGr HcTfaj2A/K+olMdCHAd7TioFvd4TTVGysAfBA08AYmC6nVQWGQDD5EvOLM3J3l8L gtZDHtDik7zm3QV9QyZA9G0pPQgycyVuF1moVNXXf673GqJ1JLEPm/W/Jom4emwN bCwTlv21V0OgKJhGZFspq/UKTSjchLv4/63e7f4vFYmqrAjtm8t87wXOu6/9vUKG NS1M3arLAquFb2RUNPlRQ0TsPnmWQJVwjAxKss8GCKuzE1xLijSPKxR1YQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFP7BxswRJHAYZQgTgCdDYhEyVpufMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzc1Y2JmMmJhLTg1NzMtNDk0NC04Y2ZlLWUyNzlkNDI2YTk3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbauqCAMA0GCSqGSIb3DQEBCwUAA4IBAQCuSkVbeVIntXNxakOd VGbf9qJj3olmCzle25y8lsi+NLwvpjG74uT7W4NTq/64wI8CLP9BaGKdS5GVTwaI 2zPRdZHsjIW3BpMdjog+9ONz4HyKKztyO+Bczr1lEK1uuPhF2nfmLRQNfbaUbQxD D7RB+IvkH/uBLqaAFV+BEp99zweuMvQ734EXNyOASZlNrmFpalJ13mSYbZcOm5dn LS/LMYv8/XKZH7RiFUwGN+SIH0eH9Emo9PBtcQDGT0MkB5+rEsC7lZwLmlvHjV2d kLhqyRHvLty/OMPJMl/EZSRbMDTbTcfS1xRvm/L/fsJpz0UsKWWIb25KbiZG8vJD +C8y -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:06 2026 by rpki-client