$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c692bc7-6cc1-4b89-b1d0-8142bd22d5ba.roa File: 8c692bc7-6cc1-4b89-b1d0-8142bd22d5ba.roa (raw, json) Hash identifier: iyX8cWD8VpilhlUE60v6VygWcNSYNbzRvw/KbEBq1Ow= Subject key identifier: BC:54:36:FC:18:33:82:2D:42:51:AB:8A:50:E9:E8:EF:2F:FD:FB:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 395C66FB6A52FB960CD6293BCB0A541E0C1DA2BB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c692bc7-6cc1-4b89-b1d0-8142bd22d5ba.roa Signing time: Thu 12 Mar 2026 16:27:48 +0000 ROA not before: Thu 12 Mar 2026 16:27:48 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5c:66:fb:6a:52:fb:96:0c:d6:29:3b:cb:0a:54:1e:0c:1d:a2:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:27:48 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=c96f59b6e98d6451df02d621a395ce892ce4c9d72758744422eb155da6bc0218, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:34:df:70:29:e6:83:a2:07:5e:a3:9e:b0:f4: 3a:cb:08:62:52:71:ef:9c:51:80:5a:8f:9c:89:5f: 90:68:94:77:41:47:0b:6a:0d:0e:7f:e0:1b:39:67: a3:9f:90:7d:1f:6d:86:e8:49:59:17:ab:2d:31:12: a9:47:46:a7:e4:3a:ab:83:c6:f5:a4:96:15:be:ea: c8:9c:2f:22:8a:65:07:85:ed:9b:fc:64:4f:00:5f: ac:13:50:1d:c7:d1:cf:90:27:69:0d:62:70:8d:e0: 93:3c:d2:f6:8a:24:db:ef:e0:55:93:b9:ab:9e:d7: c7:b3:b4:9a:64:5a:a5:7e:80:d6:5b:b7:57:a7:65: 0c:1f:f9:60:de:95:61:58:16:f8:1b:36:4d:cb:c7: 70:dc:5e:db:ef:dd:7d:a6:ef:83:d5:77:d7:a6:e5: a7:b1:bf:7c:a3:f7:59:8a:50:50:99:31:e5:e7:cc: 03:9b:8d:2a:18:38:8c:84:16:cd:73:93:74:db:e3: 3a:b2:0a:bc:78:7a:1e:4c:c3:72:a3:3b:44:36:b6: 40:75:89:96:31:89:88:a0:6e:1e:22:bb:23:32:7a: 3a:f5:52:23:17:6e:7b:29:bd:2b:1c:ce:18:7e:8f: 34:22:cc:24:3d:a7:d0:23:d8:14:c6:5e:ca:2b:16: ff:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:54:36:FC:18:33:82:2D:42:51:AB:8A:50:E9:E8:EF:2F:FD:FB:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8c692bc7-6cc1-4b89-b1d0-8142bd22d5ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:c800::/40 Signature Algorithm: sha256WithRSAEncryption c5:be:10:23:36:33:6c:fe:e3:92:be:73:0b:ac:fe:3e:44:3b: ab:87:6a:9a:9a:03:7a:da:4d:93:5b:52:53:85:7f:18:59:5b: 31:36:b6:8b:45:2a:a3:a2:2e:06:3e:9a:7b:64:db:64:89:49: fa:49:90:21:36:1b:fe:c5:be:4c:2a:f2:b6:b0:59:97:8c:e4: 34:46:be:0e:df:d3:e1:0f:7d:2e:d2:04:51:aa:2b:e9:83:f5: a4:82:f4:3e:e9:22:ea:36:02:8d:d8:3d:a8:df:ba:04:c6:3b: 34:14:ed:79:f1:5f:03:01:25:19:5c:0d:fe:94:a7:3d:e6:07: c6:d9:f7:ca:a1:7c:e3:20:36:36:68:b8:4d:cf:46:c8:72:07: e9:dd:2d:1e:72:34:3f:94:a7:9f:8f:05:32:59:7b:21:63:b0: 71:80:7d:a8:53:24:49:6f:c2:59:d3:aa:7b:2e:27:fc:34:65: c7:fc:1d:e9:88:28:d7:0b:4e:61:ad:24:c1:93:af:c5:0f:3d: 33:e0:bb:bd:c3:c3:2c:a1:91:af:d1:2c:8d:e8:21:a3:1e:82: 82:92:41:84:e9:c1:10:ee:65:06:3a:48:75:77:0f:4b:97:c1: b4:cc:f4:54:40:58:11:54:0e:e5:c7:cb:53:ce:59:fb:e3:ff: d0:94:fc:0e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOVxm+2pS+5YM1ik7ywpUHgwdorswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2Mjc0OFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAYzk2ZjU5YjZlOThkNjQ1MWRmMDJk NjIxYTM5NWNlODkyY2U0YzlkNzI3NTg3NDQ0MjJlYjE1NWRhNmJjMDIxODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjTfcCnmg6IHXqOesPQ6ywhiUnHv nFGAWo+ciV+QaJR3QUcLag0Of+AbOWejn5B9H22G6ElZF6stMRKpR0an5Dqrg8b1 pJYVvurInC8iimUHhe2b/GRPAF+sE1Adx9HPkCdpDWJwjeCTPNL2iiTb7+BVk7mr ntfHs7SaZFqlfoDWW7dXp2UMH/lg3pVhWBb4GzZNy8dw3F7b7919pu+D1XfXpuWn sb98o/dZilBQmTHl58wDm40qGDiMhBbNc5N02+M6sgq8eHoeTMNyoztENrZAdYmW MYmIoG4eIrsjMno69VIjF257Kb0rHM4Yfo80IswkPafQI9gUxl7KKxb/HQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLxUNvwYM4ItQlGrilDp6O8v/fuYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjNjkyYmM3LTZjYzEtNGI4OS1iMWQwLTgxNDJiZDIyZDViYS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbausgwDQYJKoZIhvcNAQELBQADggEBAMW+ECM2M2z+45K+cwus /j5EO6uHapqaA3raTZNbUlOFfxhZWzE2totFKqOiLgY+mntk22SJSfpJkCE2G/7F vkwq8rawWZeM5DRGvg7f0+EPfS7SBFGqK+mD9aSC9D7pIuo2Ao3YPajfugTGOzQU 7XnxXwMBJRlcDf6Upz3mB8bZ98qhfOMgNjZouE3PRshyB+ndLR5yND+Up5+PBTJZ eyFjsHGAfahTJElvwlnTqnsuJ/w0Zcf8HemIKNcLTmGtJMGTr8UPPTPgu73Dwyyh ka/RLI3oIaMegoKSQYTpwRDuZQY6SHV3D0uXwbTM9FRAWBFUDuXHy1POWfvj/9CU /A4= -----END CERTIFICATE-----Generated at Thu Mar 19 12:27:57 2026 by rpki-client