$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82d98881-8669-49e7-9d56-1b8070c73797.roa File: 82d98881-8669-49e7-9d56-1b8070c73797.roa (raw, json) Hash identifier: axgClZh+svHZYo/CvW5aVQdEjz2bHRfytp0/bG/9+BE= Subject key identifier: 90:3E:A4:09:E4:08:4F:27:E5:90:EB:50:60:12:0B:82:C0:B1:2C:3E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2D9D158D362B00E4C8C194D5F681B1AF9CAA8A5E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82d98881-8669-49e7-9d56-1b8070c73797.roa Signing time: Thu 12 Mar 2026 16:24:50 +0000 ROA not before: Thu 12 Mar 2026 16:24:50 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:4840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9d:15:8d:36:2b:00:e4:c8:c1:94:d5:f6:81:b1:af:9c:aa:8a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:24:50 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=342cb5a204185531fbb6618fa9d9f05d394fb3668452e2c8e9cea55d3d961423, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:e5:b9:18:cc:74:4b:4f:20:55:8c:8a:50: 04:1e:f7:04:8e:93:fb:3c:94:52:b4:7e:01:f3:00: fb:e4:51:85:d7:16:96:06:7c:6d:88:3e:0d:40:c3: b9:a1:e4:26:de:12:c6:7f:78:14:25:b8:5a:df:1d: 6b:6d:ca:c7:f1:20:f8:c6:bf:5a:bc:4a:2c:ba:24: 69:1f:e8:a9:ad:b3:af:b4:5d:fa:fb:1e:62:c0:e3: 64:ca:88:a7:3f:b8:97:2e:d4:69:57:99:15:15:ae: dd:33:6d:3c:21:0e:61:20:ac:34:c7:c1:4f:35:ac: 08:c7:f3:16:a7:f8:96:6f:3c:16:5f:e0:1b:f2:cd: cd:ea:4b:1c:50:09:35:03:40:32:e0:e3:62:6b:12: 19:c9:fe:0d:6d:e0:f1:7c:42:e2:79:c6:eb:16:51: fa:a1:66:cf:1f:cb:22:8e:35:b0:b2:8b:9a:9c:15: a7:05:09:21:98:ca:9d:81:1f:c5:e6:0e:f5:ff:06: 69:e8:7d:0c:26:86:c4:94:de:05:d5:98:47:cb:a6: 01:53:6d:4b:04:66:3a:d7:ad:9e:f8:a5:c5:1d:3e: f2:f9:07:ea:ec:a4:62:f8:4a:ad:d9:98:77:af:c5: f1:4d:f1:71:e6:b8:d1:48:29:04:5a:58:e2:85:a1: fe:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3E:A4:09:E4:08:4F:27:E5:90:EB:50:60:12:0B:82:C0:B1:2C:3E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/82d98881-8669-49e7-9d56-1b8070c73797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:4840::/48 Signature Algorithm: sha256WithRSAEncryption 0b:28:a0:38:67:a1:cb:82:4d:6d:3d:a3:6d:a7:b3:1f:68:c5: 6b:04:a6:92:c2:a5:64:35:fe:9d:af:d9:1e:17:52:3a:5e:fd: 2b:33:18:f0:15:6d:1e:c5:df:cc:28:9b:a8:ff:34:8d:35:7c: 62:bf:bb:96:ae:06:4e:80:1e:03:dd:9d:44:c5:e5:fd:87:11: 4c:65:dc:fc:88:26:7b:57:01:5e:18:e4:e6:ea:12:0c:b0:ba: c6:c3:1e:c7:ea:3e:db:6a:0f:9f:fb:3f:22:a4:55:7a:5d:e5: 7c:ad:47:4d:b7:9c:da:b1:6a:87:60:19:e2:70:cd:c3:b2:a7: 23:ce:e6:39:d5:6a:c2:e6:cf:47:27:3b:3a:3b:a1:7c:67:c8: d1:a8:21:65:2b:ed:d9:41:ad:e3:d3:62:07:ed:a1:a7:67:3a: 45:25:46:be:09:df:50:1d:39:e1:7a:ff:bc:8c:c0:e3:ae:72: b3:a6:84:b2:b1:6a:41:e5:64:6e:78:2d:30:bb:bd:32:86:68: 14:f7:d7:b2:c9:9b:7b:ab:a7:44:fe:2a:73:ca:fa:46:47:24: 08:3d:18:42:51:41:f7:a3:36:ad:dc:ef:56:60:c2:3f:77:2f: 97:db:61:d0:5a:45:b5:1c:34:7c:05:25:81:d3:71:3f:ff:88: 95:98:08:22 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULZ0VjTYrAOTIwZTV9oGxr5yqil4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjQ1MFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMzQyY2I1YTIwNDE4NTUzMWZiYjY2 MThmYTlkOWYwNWQzOTRmYjM2Njg0NTJlMmM4ZTljZWE1NWQzZDk2MTQyMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHjluRjMdEtPIFWMilAEHvcEjpP7 PJRStH4B8wD75FGF1xaWBnxtiD4NQMO5oeQm3hLGf3gUJbha3x1rbcrH8SD4xr9a vEosuiRpH+iprbOvtF36+x5iwONkyoinP7iXLtRpV5kVFa7dM208IQ5hIKw0x8FP NawIx/MWp/iWbzwWX+Ab8s3N6kscUAk1A0Ay4ONiaxIZyf4NbeDxfELiecbrFlH6 oWbPH8sijjWwsouanBWnBQkhmMqdgR/F5g71/wZp6H0MJobElN4F1ZhHy6YBU21L BGY6162e+KXFHT7y+Qfq7KRi+Eqt2Zh3r8XxTfFx5rjRSCkEWljihaH+1wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJA+pAnkCE8n5ZDrUGASC4LAsSw+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgyZDk4ODgxLTg2NjktNDllNy05ZDU2LTFiODA3MGM3Mzc5Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6UhAMA0GCSqGSIb3DQEBCwUAA4IBAQALKKA4Z6HLgk1tPaNt p7MfaMVrBKaSwqVkNf6dr9keF1I6Xv0rMxjwFW0exd/MKJuo/zSNNXxiv7uWrgZO gB4D3Z1ExeX9hxFMZdz8iCZ7VwFeGOTm6hIMsLrGwx7H6j7bag+f+z8ipFV6XeV8 rUdNt5zasWqHYBnicM3DsqcjzuY51WrC5s9HJzs6O6F8Z8jRqCFlK+3ZQa3j02IH 7aGnZzpFJUa+Cd9QHTnhev+8jMDjrnKzpoSysWpB5WRueC0wu70yhmgU99eyyZt7 q6dE/ipzyvpGRyQIPRhCUUH3ozat3O9WYMI/dy+X22HQWkW1HDR8BSWB03E//4iV mAgi -----END CERTIFICATE-----Generated at Thu Mar 19 12:27:50 2026 by rpki-client