$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa File: ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa (raw, json) Hash identifier: v6AEslO+b77lWVSvjZGcWA5tUzzCZf7WHSpWjwcG3y4= Subject key identifier: 95:E6:9B:0A:B0:D9:E3:C0:ED:EB:9B:0E:99:89:38:CC:87:8E:0B:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41AD1A3817027B9A6337CFC53EEB9F727BAC714D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa Signing time: Thu 12 Mar 2026 16:21:49 +0000 ROA not before: Thu 12 Mar 2026 16:21:49 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:ad:1a:38:17:02:7b:9a:63:37:cf:c5:3e:eb:9f:72:7b:ac:71:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:21:49 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=e8cd3866be579860d3ce28677d62a7b60d39fb7b5f7bb852260244843fa2d48e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:03:5d:d3:75:e0:8b:da:fc:cb:6b:c9:1a:11: 19:1c:1a:36:55:c7:c5:58:80:d9:73:34:ac:f1:29: 9b:22:45:63:76:d0:9a:6c:f2:31:40:ee:9c:6a:89: db:0f:b3:1e:66:f4:7a:f7:63:9e:96:da:45:dd:df: 41:55:a4:f1:42:fd:1a:44:3b:95:82:cf:84:77:28: 57:2e:03:83:5f:28:15:36:33:30:e9:e6:25:14:5c: ad:81:cd:3f:8f:c4:00:46:3f:08:fe:d4:8b:ac:5a: 68:97:b2:b8:aa:35:fa:a3:b0:68:e4:42:a2:67:46: e7:b7:e4:96:99:ed:75:f4:5f:29:93:10:fd:f4:bb: c7:c1:bc:0a:31:b1:7f:92:54:87:2f:44:08:0e:e2: e3:64:fe:0e:59:7b:ec:5d:dd:83:8d:15:39:8d:00: c9:1a:41:27:c7:47:24:d6:4d:d5:b6:bc:3f:ae:3b: bb:c6:ec:2f:27:03:4d:88:a1:8b:2e:2c:d9:97:ad: ff:43:a7:d1:e4:53:3e:25:29:a0:35:27:31:23:ba: 9b:45:c1:2c:87:5f:f1:68:1a:7a:5c:e3:d2:c1:bc: 08:b3:41:4c:a6:b7:83:dd:11:85:2c:f7:31:b3:3e: d9:91:d5:97:fc:8d:4d:0b:9a:85:c9:38:75:ce:e4: 87:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E6:9B:0A:B0:D9:E3:C0:ED:EB:9B:0E:99:89:38:CC:87:8E:0B:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ae7cac0c-d4a8-4e41-95c5-05a70db88e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:60c0::/48 Signature Algorithm: sha256WithRSAEncryption a5:a8:7f:f4:61:91:dd:52:c9:f1:da:64:5c:99:6d:fc:2e:e0: f1:87:9c:5c:42:0c:69:54:88:f2:ce:71:6c:cb:b8:df:4d:67: de:87:25:19:ea:9a:ae:1f:ad:78:39:6b:59:90:ba:8f:97:14: 15:84:9a:fc:2b:18:be:c2:79:6a:e2:1a:d6:63:56:7c:08:91: c1:25:1d:36:60:b5:b3:d0:8e:eb:80:aa:cd:f7:e2:26:9b:3a: 86:a1:96:cf:67:41:30:5d:af:97:c9:c5:1b:73:71:89:e0:48: 8d:d9:99:7a:b4:3e:a7:ce:76:ed:54:56:6d:ed:ef:37:3e:45: 73:df:37:b0:67:88:b4:86:86:d6:95:d0:51:68:83:86:33:00: 2a:e9:7d:7e:d3:e2:4b:d3:16:b5:af:10:05:e7:db:fe:7b:88: 36:46:ee:ca:cd:83:a5:aa:47:25:9b:4e:b7:24:a9:fe:71:46: e2:3e:68:ea:63:f4:61:40:c5:0e:c9:51:31:6b:19:69:52:ae: 59:7c:43:13:0e:a3:b2:30:b2:29:8a:47:84:8b:b2:a4:a6:6b: eb:f4:76:62:60:9d:e0:e4:d1:46:a0:72:b3:22:68:6a:cf:5e: 21:93:36:44:08:55:84:51:79:bf:80:ef:14:19:a7:e1:58:2f: 6d:8c:5c:ba -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQa0aOBcCe5pjN8/FPuufcnuscU0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjE0OVoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAZThjZDM4NjZiZTU3OTg2MGQzY2Uy ODY3N2Q2MmE3YjYwZDM5ZmI3YjVmN2JiODUyMjYwMjQ0ODQzZmEyZDQ4ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwNd03Xgi9r8y2vJGhEZHBo2VcfF WIDZczSs8SmbIkVjdtCabPIxQO6caonbD7MeZvR692OeltpF3d9BVaTxQv0aRDuV gs+EdyhXLgODXygVNjMw6eYlFFytgc0/j8QARj8I/tSLrFpol7K4qjX6o7Bo5EKi Z0bnt+SWme119F8pkxD99LvHwbwKMbF/klSHL0QIDuLjZP4OWXvsXd2DjRU5jQDJ GkEnx0ck1k3Vtrw/rju7xuwvJwNNiKGLLizZl63/Q6fR5FM+JSmgNScxI7qbRcEs h1/xaBp6XOPSwbwIs0FMpreD3RGFLPcxsz7ZkdWX/I1NC5qFyTh1zuSHfwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJXmmwqw2ePA7eubDpmJOMyHjgtLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FlN2NhYzBjLWQ0YTgtNGU0MS05NWM1LTA1YTcwZGI4OGU4MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaumDAMA0GCSqGSIb3DQEBCwUAA4IBAQClqH/0YZHdUsnx2mRc mW38LuDxh5xcQgxpVIjyznFsy7jfTWfehyUZ6pquH614OWtZkLqPlxQVhJr8Kxi+ wnlq4hrWY1Z8CJHBJR02YLWz0I7rgKrN9+ImmzqGoZbPZ0EwXa+XycUbc3GJ4EiN 2Zl6tD6nznbtVFZt7e83PkVz3zewZ4i0hobWldBRaIOGMwAq6X1+0+JL0xa1rxAF 59v+e4g2Ru7KzYOlqkclm063JKn+cUbiPmjqY/RhQMUOyVExaxlpUq5ZfEMTDqOy MLIpikeEi7Kkpmvr9HZiYJ3g5NFGoHKzImhqz14hkzZECFWEUXm/gO8UGafhWC9t jFy6 -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:05 2026 by rpki-client