$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa File: 9d37ea8b-5c6a-4937-9375-496d799c8f30.roa (raw, json) Hash identifier: wIGjJNab9qNZfX0QVp61OJVGdzU7I4g+gk/SOU7D1gA= Subject key identifier: 06:BC:96:56:8B:81:66:37:D6:03:C5:EB:56:0E:70:24:05:98:CB:F5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 46D6A88AE5504AD8133C0561153668A07646F76E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa Signing time: Thu 12 Mar 2026 16:24:54 +0000 ROA not before: Thu 12 Mar 2026 16:24:54 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d6:a8:8a:e5:50:4a:d8:13:3c:05:61:15:36:68:a0:76:46:f7:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:24:54 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=9b953dc5b1f7ada0db571814461f6be3d0dd9edfccda8f20d3c611a7b64f3203, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4e:ce:fd:33:57:ea:79:8d:ad:cb:c7:22:6a: 89:76:c9:5e:1c:d3:b7:38:b1:69:99:b2:8d:8b:f5: 4f:53:fd:c5:52:4d:9c:bf:5a:b6:fd:8b:a8:f1:c5: f7:69:f5:50:9f:32:51:5e:8d:66:6f:3d:d8:d4:10: 96:b8:17:9e:c8:0d:ec:0f:54:0b:e9:54:14:b5:bd: 43:d1:9b:fa:ea:18:b3:b0:c0:d6:d5:6f:f6:e7:04: 0e:4d:a4:90:9a:d2:96:9b:75:8a:81:5e:0d:85:7d: 46:3c:62:74:51:53:8a:ad:67:d3:08:32:ee:4b:4d: 20:18:f9:ad:c6:65:4a:79:7b:1e:60:f7:74:79:e5: a6:d3:ca:7e:34:fb:45:01:c0:b7:ca:42:ab:2b:b5: 3d:20:18:7a:39:9d:76:d5:dc:8b:f3:57:40:57:98: 4b:eb:21:fa:e7:64:ed:74:6b:46:e9:e0:a0:d1:51: d9:f1:52:12:6a:3c:51:f0:df:9f:60:8b:d5:4f:4e: ed:65:2e:be:87:3c:4f:9d:e5:a6:9d:bd:22:18:e9: b0:e2:e9:f8:64:0d:8a:3c:d2:a3:b5:e3:2a:96:c7: 6f:e4:30:b5:6a:4e:87:75:c4:ef:93:3d:9e:20:ca: 92:89:d8:df:1c:d1:92:b2:36:c8:ae:2d:75:54:8b: d8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BC:96:56:8B:81:66:37:D6:03:C5:EB:56:0E:70:24:05:98:CB:F5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/9d37ea8b-5c6a-4937-9375-496d799c8f30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:7080::/48 Signature Algorithm: sha256WithRSAEncryption c3:dc:b3:4c:8c:06:1a:5f:28:29:5b:04:2d:34:48:1a:2c:75: a1:4c:55:84:87:ae:c4:57:bb:40:b9:d1:18:44:21:0f:59:a8: 8c:c6:44:70:8a:e7:40:e6:c2:5f:41:9e:eb:0e:bd:32:ad:22: f9:16:30:b5:dc:a9:65:1c:da:b9:48:cc:f1:37:77:b8:38:3c: 90:eb:f0:cd:aa:06:78:d6:5d:d0:7d:a3:a8:02:17:57:92:ca: af:8a:5e:cf:ba:e9:1c:76:d9:ad:da:c8:6f:bf:1a:71:da:69: 39:e9:10:20:5b:1b:7b:1b:c0:ad:94:84:a1:3c:0c:76:af:43: 01:41:d3:3c:e7:4c:6b:64:34:b6:5d:aa:f6:28:27:13:0a:f7: a0:54:69:43:73:ec:6f:26:c2:ed:bf:ea:99:e6:e8:91:71:46: 99:d5:5b:25:af:eb:7d:9f:a3:63:13:e5:74:f7:3f:53:b4:72: fb:7b:9f:45:27:da:53:74:f6:59:02:98:ab:8f:79:a3:f8:48: 12:55:10:b5:dd:0e:b2:50:a5:b7:8a:38:39:54:71:a7:32:99: 47:19:b5:4a:70:cd:da:2f:bd:44:b3:b7:9f:e5:05:ea:6e:2c: 16:6e:36:59:21:48:bc:83:6a:e1:6f:80:20:1b:14:42:a6:5f: 05:01:b4:c1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURtaoiuVQStgTPAVhFTZooHZG924wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjQ1NFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAOWI5NTNkYzViMWY3YWRhMGRiNTcx ODE0NDYxZjZiZTNkMGRkOWVkZmNjZGE4ZjIwZDNjNjExYTdiNjRmMzIwMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE7O/TNX6nmNrcvHImqJdsleHNO3 OLFpmbKNi/VPU/3FUk2cv1q2/Yuo8cX3afVQnzJRXo1mbz3Y1BCWuBeeyA3sD1QL 6VQUtb1D0Zv66hizsMDW1W/25wQOTaSQmtKWm3WKgV4NhX1GPGJ0UVOKrWfTCDLu S00gGPmtxmVKeXseYPd0eeWm08p+NPtFAcC3ykKrK7U9IBh6OZ121dyL81dAV5hL 6yH652TtdGtG6eCg0VHZ8VISajxR8N+fYIvVT07tZS6+hzxPneWmnb0iGOmw4un4 ZA2KPNKjteMqlsdv5DC1ak6HdcTvkz2eIMqSidjfHNGSsjbIri11VIvYnwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAa8llaLgWY31gPF61YOcCQFmMv1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzlkMzdlYThiLTVjNmEtNDkzNy05Mzc1LTQ5NmQ3OTljOGYzMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6XCAMA0GCSqGSIb3DQEBCwUAA4IBAQDD3LNMjAYaXygpWwQt NEgaLHWhTFWEh67EV7tAudEYRCEPWaiMxkRwiudA5sJfQZ7rDr0yrSL5FjC13Kll HNq5SMzxN3e4ODyQ6/DNqgZ41l3QfaOoAhdXksqvil7Puukcdtmt2shvvxpx2mk5 6RAgWxt7G8CtlIShPAx2r0MBQdM850xrZDS2Xar2KCcTCvegVGlDc+xvJsLtv+qZ 5uiRcUaZ1Vslr+t9n6NjE+V09z9TtHL7e59FJ9pTdPZZApirj3mj+EgSVRC13Q6y UKW3ijg5VHGnMplHGbVKcM3aL71Es7ef5QXqbiwWbjZZIUi8g2rhb4AgGxRCpl8F AbTB -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:02 2026 by rpki-client