$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4821bcc-7414-446a-9571-a7cf2a501525.roa File: f4821bcc-7414-446a-9571-a7cf2a501525.roa (raw, json) Hash identifier: o5OjE38bnLj3L8EoTe+rhuMRWYB2/L3U2Fd1QRmNaYY= Subject key identifier: 61:AE:60:ED:42:D3:4F:87:6A:E7:FB:38:F6:1F:2D:9A:87:32:6F:19 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F1E15BF607C0FD3C872A2F9D0B691918B158D43 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4821bcc-7414-446a-9571-a7cf2a501525.roa Signing time: Thu 12 Mar 2026 16:21:46 +0000 ROA not before: Thu 12 Mar 2026 16:21:46 +0000 ROA not after: Wed 10 Jun 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:40c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1e:15:bf:60:7c:0f:d3:c8:72:a2:f9:d0:b6:91:91:8b:15:8d:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Mar 12 16:21:46 2026 GMT Not After : Jun 10 23:59:59 2026 GMT Subject: serialNumber=e56fe0d5bf6136a5e055b447eca6209aeed23caf44c2e2ac7f1ed65b7b6df84b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:38:e1:f5:25:46:17:a7:f9:a9:91:90:b2: ea:c4:4b:e2:96:13:be:5d:9c:62:2b:a6:97:12:2e: a7:61:a5:26:63:b0:08:76:b7:e3:23:e9:22:e1:4d: 05:e5:be:91:ed:dc:6b:22:d7:e9:69:af:af:f2:b9: f3:30:96:d6:9a:83:2a:e5:ec:8d:e8:81:da:4f:20: a0:ee:a9:b4:4a:56:85:a2:07:f4:70:65:53:9f:28: a5:94:d8:60:79:e4:85:3e:c1:6a:a1:c3:97:08:d4: 96:92:1e:9f:48:36:29:51:dc:94:0f:63:ba:ff:b6: 1d:a5:57:94:80:a4:33:a3:9c:3b:f7:ea:43:ef:47: 0a:7e:85:c1:6c:bc:9d:e5:be:09:e6:87:61:80:bb: cd:96:95:15:66:ee:1e:ad:b7:bd:03:61:7d:ff:a5: 71:44:e6:ae:04:67:52:f5:ad:35:2f:c7:f5:dc:b4: 30:c3:87:19:d8:e6:11:3e:0d:76:2a:02:06:f5:c5: 27:25:64:b8:c5:9d:a4:c6:3b:7f:8d:f7:04:da:5e: 4c:5f:fc:27:a0:a8:08:00:00:80:82:d2:a5:65:b8: 1d:7e:a8:80:73:85:10:98:0a:c2:db:cc:e8:1e:e6: 24:00:83:4c:50:66:04:bc:a4:26:d1:2c:c8:0e:15: a8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:60:ED:42:D3:4F:87:6A:E7:FB:38:F6:1F:2D:9A:87:32:6F:19 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/f4821bcc-7414-446a-9571-a7cf2a501525.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:40c0::/48 Signature Algorithm: sha256WithRSAEncryption 51:2d:e6:36:a0:99:62:84:09:22:31:59:6f:b9:4c:46:8f:5e: b6:9b:22:af:12:69:22:d1:18:ec:6d:35:13:5b:c1:83:1a:a1: 55:10:d7:5a:c7:40:a4:48:19:ff:50:a3:f9:b8:38:4a:2c:64: 77:49:c1:71:91:35:b1:a6:22:0e:f2:24:25:ca:c0:88:11:65: 7c:9b:e4:1c:b0:47:05:ea:dc:f9:1e:1d:2d:d8:64:6d:06:72: 29:de:7e:67:b2:a5:48:4a:eb:34:cb:ba:d8:18:a4:d6:fa:af: c1:04:80:ae:94:f8:fa:25:07:b6:01:94:a8:54:d1:4c:ab:ae: 38:94:68:36:cc:ad:53:3a:79:51:3c:cc:d6:b3:06:cb:46:f5: 7b:36:70:a9:ae:20:1f:34:ff:bb:d9:f5:1f:79:a6:a1:da:01: aa:b7:75:71:70:92:55:96:9b:8f:5a:88:42:46:f6:21:e6:d9: b5:49:72:d4:51:fb:fc:ef:f1:78:07:44:03:4d:df:86:15:d9: 90:86:bd:5f:e4:ad:0e:50:0f:1d:0c:71:d3:c8:42:88:8e:d0: 67:61:eb:8f:a3:6b:73:6a:65:dc:ad:0b:fa:94:8b:77:1a:1e: 64:3f:ab:7a:df:5b:70:b1:00:00:0c:31:c2:8d:d5:8d:6e:08: 5f:7e:f6:3d -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXx4Vv2B8D9PIcqL50LaRkYsVjUMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDMxMjE2MjE0NloX DTI2MDYxMDIzNTk1OVowejFJMEcGA1UEBRNAZTU2ZmUwZDViZjYxMzZhNWUwNTVi NDQ3ZWNhNjIwOWFlZWQyM2NhZjQ0YzJlMmFjN2YxZWQ2NWI3YjZkZjg0YjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvw44fUlRhen+amRkLLqxEvilhO+ XZxiK6aXEi6nYaUmY7AIdrfjI+ki4U0F5b6R7dxrItfpaa+v8rnzMJbWmoMq5eyN 6IHaTyCg7qm0SlaFogf0cGVTnyillNhgeeSFPsFqocOXCNSWkh6fSDYpUdyUD2O6 /7YdpVeUgKQzo5w79+pD70cKfoXBbLyd5b4J5odhgLvNlpUVZu4erbe9A2F9/6Vx ROauBGdS9a01L8f13LQww4cZ2OYRPg12KgIG9cUnJWS4xZ2kxjt/jfcE2l5MX/wn oKgIAACAgtKlZbgdfqiAc4UQmArC28zoHuYkAINMUGYEvKQm0SzIDhWoUwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGGuYO1C00+Hauf7OPYfLZqHMm8ZMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Y0ODIxYmNjLTc0MTQtNDQ2YS05NTcxLWE3Y2YyYTUwMTUyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaukDAMA0GCSqGSIb3DQEBCwUAA4IBAQBRLeY2oJlihAkiMVlv uUxGj162myKvEmki0RjsbTUTW8GDGqFVENdax0CkSBn/UKP5uDhKLGR3ScFxkTWx piIO8iQlysCIEWV8m+QcsEcF6tz5Hh0t2GRtBnIp3n5nsqVISus0y7rYGKTW+q/B BICulPj6JQe2AZSoVNFMq644lGg2zK1TOnlRPMzWswbLRvV7NnCpriAfNP+72fUf eaah2gGqt3VxcJJVlpuPWohCRvYh5tm1SXLUUfv87/F4B0QDTd+GFdmQhr1f5K0O UA8dDHHTyEKIjtBnYeuPo2tzamXcrQv6lIt3Gh5kP6t631twsQAADDHCjdWNbghf fvY9 -----END CERTIFICATE-----Generated at Thu Mar 19 12:27:53 2026 by rpki-client