$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa File: d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa (raw, json) Hash identifier: +SIVqd/JSRjSOSa4Z6RYE7UDTcP8ivmEz0SHzm4aCRI= Subject key identifier: C3:2A:40:B0:7D:B1:EF:6A:63:20:E3:68:99:33:AD:A3:19:2D:37:73 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 09A5A37103E650561C7AD3DA2F680599EF45B59D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa Signing time: Thu 12 Mar 2026 16:27:49 +0000 ROA not before: Thu 12 Mar 2026 16:27:49 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a5:a3:71:03:e6:50:56:1c:7a:d3:da:2f:68:05:99:ef:45:b5:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:27:49 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=2de90181be3bbef121cc36303bd5f7fc1d95f9603716c934f3566420416d4f59, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:4e:29:7e:9d:73:45:d8:b1:fb:ca:da:79:c2: 7c:51:61:1f:55:31:56:73:ef:04:a2:d2:b5:25:49: ca:ef:27:c6:7d:93:48:fd:b1:2e:b7:bd:b9:df:15: ae:27:59:8a:4d:52:1f:36:85:1b:13:a6:92:cf:b1: 85:12:ea:f0:ab:e1:64:80:88:76:f3:64:d0:ee:79: 12:f1:72:3b:83:94:f5:44:dc:70:7b:e4:1b:d7:4e: b4:9e:d5:d6:89:1b:a4:85:10:b3:fd:84:f6:8f:f2: 23:87:7f:b8:0d:3c:79:25:4c:f2:5f:1d:1a:e0:f7: 41:d2:e4:34:1f:fd:5c:d5:26:69:22:d1:74:82:9d: 58:77:70:c1:0c:b4:a0:8e:cc:7e:19:a5:45:5d:08: 4f:10:5c:c3:29:22:a4:1c:01:37:6c:f2:28:4e:a8: d7:e4:1b:a0:33:26:7b:7b:d4:fb:47:c3:09:f3:85: f1:3b:5e:bc:ae:aa:d3:f9:e4:04:6c:7f:49:bc:11: dd:02:d0:4c:d0:5e:e5:58:bd:18:68:5f:6a:b8:0f: c3:73:a9:35:20:5a:c2:6a:e0:fb:25:10:6a:1c:5f: 57:31:91:6b:b1:69:e0:22:82:d7:9e:b5:86:9d:c2: 7d:9f:45:fe:38:0e:33:6f:c6:43:01:06:10:36:9c: c7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:2A:40:B0:7D:B1:EF:6A:63:20:E3:68:99:33:AD:A3:19:2D:37:73 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d7a9dfdd-1e30-48c4-a84b-e367abbd9971.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:f000::/40 Signature Algorithm: sha256WithRSAEncryption 4d:ec:aa:07:88:66:4c:44:c3:c6:3b:ab:8e:c2:11:33:22:33: 6b:9d:1d:de:d1:c7:5f:d7:f1:d4:66:f4:c3:e3:74:82:d9:d2: fc:4e:42:56:a3:76:40:b7:80:bc:35:f5:03:b8:1f:ea:23:35: 26:0a:80:05:8a:c8:87:73:74:b3:1b:c4:95:fd:6e:fb:0d:38: cf:04:c8:2a:8c:70:17:44:13:42:81:42:03:e4:a8:65:d0:a8: 75:37:06:c0:60:b7:e6:15:cc:30:5f:d0:b3:22:22:5c:ed:46: e7:82:1f:8c:3f:8a:d1:c9:b9:5e:36:86:6f:a4:13:61:f2:a9: 43:ee:e8:5b:ee:d0:56:6a:77:8f:38:d8:67:ed:da:b1:50:a1: 39:d5:7f:a5:0e:b9:2f:4d:31:07:36:ed:68:ae:09:83:23:0f: d7:50:7d:fe:3e:30:fd:c1:c8:ed:98:72:3b:fc:20:0a:f8:7a: aa:b0:e9:eb:c2:4c:fb:e8:0c:e8:42:7c:73:4a:10:10:7c:9b: 7f:c4:aa:2d:b4:43:1e:19:13:50:53:1a:0f:fd:15:68:d3:d4: 24:71:d6:dd:d2:60:a9:b6:7a:f1:b1:9a:55:45:05:02:6c:3e: 4e:6e:85:bd:c1:f2:8f:29:b0:45:76:86:27:ef:ac:85:9f:31: d0:c8:ee:7b -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUCaWjcQPmUFYcetPaL2gFme9FtZ0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2Mjc0OVoX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAMmRlOTAxODFiZTNiYmVmMTIxY2Mz NjMwM2JkNWY3ZmMxZDk1Zjk2MDM3MTZjOTM0ZjM1NjY0MjA0MTZkNGY1OTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6U4pfp1zRdix+8raecJ8UWEfVTFW c+8EotK1JUnK7yfGfZNI/bEut7253xWuJ1mKTVIfNoUbE6aSz7GFEurwq+FkgIh2 82TQ7nkS8XI7g5T1RNxwe+Qb1060ntXWiRukhRCz/YT2j/Ijh3+4DTx5JUzyXx0a 4PdB0uQ0H/1c1SZpItF0gp1Yd3DBDLSgjsx+GaVFXQhPEFzDKSKkHAE3bPIoTqjX 5BugMyZ7e9T7R8MJ84XxO168rqrT+eQEbH9JvBHdAtBM0F7lWL0YaF9quA/Dc6k1 IFrCauD7JRBqHF9XMZFrsWngIoLXnrWGncJ9n0X+OA4zb8ZDAQYQNpzHJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFMMqQLB9se9qYyDjaJkzraMZLTdzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q3YTlkZmRkLTFlMzAtNDhjNC1hODRiLWUzNjdhYmJkOTk3MS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauvAwDQYJKoZIhvcNAQELBQADggEBAE3sqgeIZkxEw8Y7q47C ETMiM2udHd7Rx1/X8dRm9MPjdILZ0vxOQlajdkC3gLw19QO4H+ojNSYKgAWKyIdz dLMbxJX9bvsNOM8EyCqMcBdEE0KBQgPkqGXQqHU3BsBgt+YVzDBf0LMiIlztRueC H4w/itHJuV42hm+kE2HyqUPu6Fvu0FZqd4842Gft2rFQoTnVf6UOuS9NMQc27Wiu CYMjD9dQff4+MP3ByO2Ycjv8IAr4eqqw6evCTPvoDOhCfHNKEBB8m3/Eqi20Qx4Z E1BTGg/9FWjT1CRx1t3SYKm2evGxmlVFBQJsPk5uhb3B8o8psEV2hifvrIWfMdDI 7ns= -----END CERTIFICATE-----Generated at Thu Mar 19 12:28:08 2026 by rpki-client