$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c091bd9a-f210-4784-93c3-b4f238c33e1e.roa File: c091bd9a-f210-4784-93c3-b4f238c33e1e.roa (raw, json) Hash identifier: TmXIsOLbvcpxg3+BRrBYBbGEBBdnd6SjQZRCjWN6kxA= Subject key identifier: B0:A8:21:59:2F:A8:C3:D6:6A:DE:4B:B1:4F:7C:5F:F5:EE:ED:ED:4C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 27D6AAFFA426D7EBE466FA5A28A6BED56CBAD231 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c091bd9a-f210-4784-93c3-b4f238c33e1e.roa Signing time: Thu 12 Mar 2026 16:25:00 +0000 ROA not before: Thu 12 Mar 2026 16:25:00 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:9080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:d6:aa:ff:a4:26:d7:eb:e4:66:fa:5a:28:a6:be:d5:6c:ba:d2:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:25:00 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=91a073fe3335e7c50e35662d3e26afdf59cd0d20671b716d9ef28c95ef65e479, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a2:04:0f:29:2e:74:f1:de:d0:62:47:e3:c8: 87:8f:6f:ff:33:71:b1:52:f8:02:6e:21:37:a4:d1: 02:18:fe:6d:cd:c3:fe:82:f8:54:c6:81:56:55:f4: d9:4a:9b:7b:5e:24:09:b6:55:fd:37:45:56:f5:cf: 01:d7:5f:06:26:4c:de:0f:b2:29:2f:c7:02:0b:62: 30:a6:20:23:24:fe:f2:45:e0:ef:c5:2f:9b:88:75: 8b:0d:27:9e:e2:04:af:c3:1c:ec:05:c6:5f:a0:5e: cb:3f:c6:63:7b:9a:7f:f0:cc:f1:47:7e:5d:ba:d1: b5:8a:c4:6f:8b:b0:e7:a0:ad:65:6e:5e:c6:f3:28: 78:6b:af:84:a1:53:be:9f:09:27:15:8f:9b:ed:ec: 8b:ce:6e:88:44:01:04:ec:a8:05:27:48:24:c0:67: e8:3c:88:e8:72:6d:4c:cc:6c:26:05:88:67:9a:b4: db:93:50:48:5a:41:95:2f:b5:14:12:32:6a:20:dc: cc:e2:60:0c:9a:ea:07:8e:28:c0:c1:c9:ea:e1:7e: dc:8d:4d:55:9c:f2:0a:b6:13:f8:a5:68:4e:e5:c3: 63:c7:b7:0c:88:51:f0:cc:18:95:69:4c:97:55:eb: 76:0b:bf:14:54:89:ee:67:3a:bb:09:90:0c:d6:a9: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A8:21:59:2F:A8:C3:D6:6A:DE:4B:B1:4F:7C:5F:F5:EE:ED:ED:4C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c091bd9a-f210-4784-93c3-b4f238c33e1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:9080::/48 Signature Algorithm: sha256WithRSAEncryption ca:78:dc:8e:e9:3a:2e:68:0c:98:60:cd:c1:0e:60:50:a7:f0: ea:5b:a2:88:6d:80:a3:cc:79:40:9b:5b:1a:a1:aa:8a:47:fb: e8:3f:61:c5:12:cb:7c:f8:5f:b8:fc:22:4c:24:5f:5c:45:66: 6b:3f:40:1d:93:cc:e1:b7:c7:05:98:c1:b1:00:f0:98:2d:7e: 89:76:e4:e4:0a:05:c6:f2:73:31:d3:bd:ec:bf:5b:c3:40:57: 98:68:dd:c3:06:57:a5:eb:3c:db:7a:3b:00:65:97:67:89:fa: 10:e4:19:f4:fd:67:f1:af:51:92:f8:f3:58:5a:41:ce:c2:57: 9c:bf:de:38:9d:91:e3:c6:9f:d1:e1:a9:1e:98:5c:29:be:bb: 23:51:57:3f:b2:e3:1e:50:3f:62:12:18:5f:1a:38:17:55:dd: 73:d0:a6:14:80:2a:6b:ab:2c:b2:e6:b0:d9:76:c4:b4:42:be: 2e:7f:c9:17:9e:8c:c0:8e:ad:a3:c9:6a:b1:cc:89:37:13:cc: 3b:e1:0f:71:d5:f3:21:4f:cd:77:16:21:93:a8:d7:f3:58:9c: 0f:e6:57:52:02:f5:89:69:c7:cd:dd:da:e3:3f:bc:98:ed:45: 41:d1:25:52:21:23:d7:d6:7d:c0:d2:c8:de:59:96:16:67:d2: 16:28:1c:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUJ9aq/6Qm1+vkZvpaKKa+1Wy60jEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjUwMFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAOTFhMDczZmUzMzM1ZTdjNTBlMzU2 NjJkM2UyNmFmZGY1OWNkMGQyMDY3MWI3MTZkOWVmMjhjOTVlZjY1ZTQ3OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqIEDykudPHe0GJH48iHj2//M3Gx UvgCbiE3pNECGP5tzcP+gvhUxoFWVfTZSpt7XiQJtlX9N0VW9c8B118GJkzeD7Ip L8cCC2IwpiAjJP7yReDvxS+biHWLDSee4gSvwxzsBcZfoF7LP8Zje5p/8MzxR35d utG1isRvi7DnoK1lbl7G8yh4a6+EoVO+nwknFY+b7eyLzm6IRAEE7KgFJ0gkwGfo PIjocm1MzGwmBYhnmrTbk1BIWkGVL7UUEjJqINzM4mAMmuoHjijAwcnq4X7cjU1V nPIKthP4pWhO5cNjx7cMiFHwzBiVaUyXVet2C78UVInuZzq7CZAM1qlZawIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLCoIVkvqMPWat5LsU98X/Xu7e1MMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2MwOTFiZDlhLWYyMTAtNDc4NC05M2MzLWI0ZjIzOGMzM2UxZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ZCAMA0GCSqGSIb3DQEBCwUAA4IBAQDKeNyO6TouaAyYYM3B DmBQp/DqW6KIbYCjzHlAm1saoaqKR/voP2HFEst8+F+4/CJMJF9cRWZrP0Adk8zh t8cFmMGxAPCYLX6JduTkCgXG8nMx073sv1vDQFeYaN3DBlel6zzbejsAZZdnifoQ 5Bn0/Wfxr1GS+PNYWkHOwlecv944nZHjxp/R4akemFwpvrsjUVc/suMeUD9iEhhf GjgXVd1z0KYUgCprqyyy5rDZdsS0Qr4uf8kXnozAjq2jyWqxzIk3E8w74Q9x1fMh T813FiGTqNfzWJwP5ldSAvWJacfN3drjP7yY7UVB0SVSISPX1n3A0sjeWZYWZ9IW KBwA -----END CERTIFICATE-----Generated at Thu Mar 19 12:24:20 2026 by rpki-client