$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca8dc9f7-1632-4a66-a97f-d052e6c2d4f1.roa File: ca8dc9f7-1632-4a66-a97f-d052e6c2d4f1.roa (raw, json) Hash identifier: lGGZBSBtCgCD10Xk6dcWEtOCpdz4oebLv3fHaqFe0Do= Subject key identifier: 3E:78:9C:2B:96:1B:F1:8E:81:F5:CB:95:EE:09:81:C0:0B:1F:7D:E9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5E28577CA10E5D459F1AFDD4C0F8F5958D4B91B8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca8dc9f7-1632-4a66-a97f-d052e6c2d4f1.roa Signing time: Thu 12 Mar 2026 16:23:30 +0000 ROA not before: Thu 12 Mar 2026 16:23:30 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:28:57:7c:a1:0e:5d:45:9f:1a:fd:d4:c0:f8:f5:95:8d:4b:91:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:23:30 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=1d985b5a6ac543aa68fa1f240e6834a4675e3d52dfda4ee2b5650578e7141e6e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e3:ed:fe:63:e2:3f:7f:cb:01:13:e5:94:7a: be:81:e3:06:d3:49:e8:1c:00:1e:da:7a:d6:a4:3f: fb:3b:b0:e8:8a:fc:15:55:7c:91:93:8e:a7:5b:0a: 8b:91:26:a3:cf:e1:97:19:d0:d3:8f:21:5c:94:1a: 48:a4:58:87:58:2a:b9:6e:ec:4a:ba:0e:b5:ea:29: 8a:79:f2:03:e7:1b:3b:6b:e9:b6:3b:c8:84:28:f6: 9c:d4:d5:d0:f3:e4:93:5f:4d:1e:2e:9b:b0:1a:11: ce:53:9a:ef:f0:a0:55:82:39:ab:9d:fc:10:a0:25: 4c:d7:19:bc:1e:57:b0:f5:64:4a:16:2f:61:d6:ef: 43:1a:95:93:7d:c0:13:8b:b7:25:94:18:2c:43:0b: 81:d6:ee:e0:e1:98:9d:00:43:dd:98:c7:ca:bc:d7: fd:06:b8:a7:bb:82:9e:e3:c5:82:2b:48:6b:12:1b: 31:89:b3:d5:a4:78:a4:8b:9f:04:4f:3b:44:bc:89: 44:88:4b:79:3b:e2:7b:01:d2:52:6b:50:55:23:07: 80:d2:cf:e1:40:89:c4:bd:02:0d:1a:b0:b5:14:92: 23:2f:d4:be:94:d7:0a:5f:27:18:c4:0d:b3:cf:4e: cf:17:4c:38:fa:4d:fc:7e:7d:87:7d:45:5a:8f:80: ca:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:78:9C:2B:96:1B:F1:8E:81:F5:CB:95:EE:09:81:C0:0B:1F:7D:E9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ca8dc9f7-1632-4a66-a97f-d052e6c2d4f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:7b:57:8d:62:96:4e:3c:7d:53:87:bf:a8:56:53:48:97:45: cd:42:72:e0:d8:96:f4:63:95:7c:c7:7e:2c:98:11:cf:04:e4: 34:1f:60:d5:57:d0:65:1f:76:70:cd:0b:ac:c3:3f:6b:0e:e4: d1:2f:96:b3:44:3e:07:7e:00:0b:9a:76:ad:f2:78:8a:c3:75: 95:1d:9f:9a:12:e2:78:7b:fa:c1:04:a5:cd:f4:54:0f:93:31: ff:08:92:13:e0:b2:cf:19:d2:7f:ee:75:1a:70:50:14:6f:17: 76:0e:34:af:41:e0:b6:18:5a:5c:6b:7b:8e:77:ab:3a:16:57: 83:27:60:c8:a3:bc:f5:64:39:d3:4d:c0:39:1d:bd:75:71:b4: 33:46:30:72:bc:ce:21:b8:e4:2e:41:28:05:46:da:58:ea:36: c9:0b:4d:ab:b7:15:34:46:c3:65:c0:59:7b:87:85:81:a7:17: 4b:b0:a2:c2:1d:42:f1:60:af:e0:3f:b2:85:c3:cc:38:9b:75: c6:8b:eb:4b:35:6e:68:17:9d:6f:8d:1c:59:68:07:c2:7b:a2: 62:73:60:20:df:ea:9b:e6:63:37:63:46:cf:36:ec:6c:8c:2c: 9c:0e:59:f6:2d:38:76:f2:9a:52:c3:b6:e3:d9:23:2c:e1:a0: b6:35:7a:2f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXihXfKEOXUWfGv3UwPj1lY1LkbgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjMzMFoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMWQ5ODViNWE2YWM1NDNhYTY4ZmEx ZjI0MGU2ODM0YTQ2NzVlM2Q1MmRmZGE0ZWUyYjU2NTA1NzhlNzE0MWU2ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoePt/mPiP3/LARPllHq+geMG00no HAAe2nrWpD/7O7DoivwVVXyRk46nWwqLkSajz+GXGdDTjyFclBpIpFiHWCq5buxK ug616imKefID5xs7a+m2O8iEKPac1NXQ8+STX00eLpuwGhHOU5rv8KBVgjmrnfwQ oCVM1xm8Hlew9WRKFi9h1u9DGpWTfcATi7cllBgsQwuB1u7g4ZidAEPdmMfKvNf9 Brinu4Ke48WCK0hrEhsxibPVpHiki58ETztEvIlEiEt5O+J7AdJSa1BVIweA0s/h QInEvQINGrC1FJIjL9S+lNcKXycYxA2zz07PF0w4+k38fn2HfUVaj4DKsQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD54nCuWG/GOgfXLle4JgcALH33pMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NhOGRjOWY3LTE2MzItNGE2Ni1hOTdmLWQwNTJlNmMyZDRmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbausjAMA0GCSqGSIb3DQEBCwUAA4IBAQAwe1eNYpZOPH1Th7+o VlNIl0XNQnLg2Jb0Y5V8x34smBHPBOQ0H2DVV9BlH3ZwzQuswz9rDuTRL5azRD4H fgALmnat8niKw3WVHZ+aEuJ4e/rBBKXN9FQPkzH/CJIT4LLPGdJ/7nUacFAUbxd2 DjSvQeC2GFpca3uOd6s6FleDJ2DIo7z1ZDnTTcA5Hb11cbQzRjByvM4huOQuQSgF RtpY6jbJC02rtxU0RsNlwFl7h4WBpxdLsKLCHULxYK/gP7KFw8w4m3XGi+tLNW5o F51vjRxZaAfCe6Jic2Ag3+qb5mM3Y0bPNuxsjCycDln2LTh28ppSw7bj2SMs4aC2 NXov -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:05 2026 by rpki-client