$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa File: 35e5605c-f1af-42e1-99b5-cde6515ffeef.roa (raw, json) Hash identifier: PBLo5me1KUKHN40LP6cfdY2M8jKBNxavF0MChoKiSIU= Subject key identifier: C8:59:88:31:43:67:7C:28:D6:F0:56:A0:3A:95:3A:D9:9B:88:21:D6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5C03EFB4D1B287CB61048018825BAAD7D0B8CB70 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa Signing time: Wed 11 Feb 2026 00:10:34 +0000 ROA not before: Wed 11 Feb 2026 00:10:34 +0000 ROA not after: Tue 12 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:10c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:03:ef:b4:d1:b2:87:cb:61:04:80:18:82:5b:aa:d7:d0:b8:cb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 11 00:10:34 2026 GMT Not After : May 12 23:59:59 2026 GMT Subject: serialNumber=eac21459fb82953ff02c5df5f1f67938a8968d94ff2b60c03bafde47ad73ec8a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:25:1c:7f:7f:0b:df:5d:0e:96:bc:23:85:89: e8:3b:d8:e0:5d:c4:73:4f:5c:8a:3d:f4:a9:4c:8a: 4f:c2:cd:18:25:d1:66:00:e0:bc:c1:2a:df:4b:2a: d1:44:ef:eb:fb:50:f5:8c:ab:53:14:54:80:ba:19: ec:99:be:5a:24:57:f4:61:94:3d:37:77:d5:a9:4f: 11:99:f1:5f:25:6d:dc:85:1a:5d:a9:77:69:c7:3d: 0d:14:6c:9c:1c:79:53:89:b3:3f:3f:a0:2b:4f:67: cc:c1:e2:0d:b4:31:a9:ab:0e:ad:12:5e:b5:e7:d4: 48:f8:c2:a0:c7:1f:f9:2c:45:5e:0a:88:20:12:a4: 5a:1e:69:24:d8:bf:dc:47:89:20:96:15:35:1e:e3: 64:a6:b2:7e:3f:9b:b7:fc:40:8e:ad:cf:2b:10:af: 8f:c1:ba:6d:2e:1e:24:8d:49:51:43:a0:2c:75:a6: a9:8c:5d:c5:b4:bc:35:97:9c:5c:d4:88:e5:f3:2f: 83:73:22:4d:c2:40:49:ab:a7:62:08:2d:18:c5:a2: f0:13:90:cd:61:20:f6:ce:97:46:43:4c:a9:a3:45: be:a1:b5:e8:86:97:e5:f0:8a:b7:08:98:85:b7:91: 14:cb:35:83:0f:49:92:13:7b:1a:c5:21:c1:18:63: a0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:59:88:31:43:67:7C:28:D6:F0:56:A0:3A:95:3A:D9:9B:88:21:D6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/35e5605c-f1af-42e1-99b5-cde6515ffeef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:10c0::/46 Signature Algorithm: sha256WithRSAEncryption 4d:98:6f:20:c9:b6:64:ae:59:2e:69:e9:3e:f9:29:22:68:c5: e3:f2:05:34:6b:38:bc:34:ea:55:8c:df:ff:b3:3e:16:9d:02: 1e:e0:ee:a9:cc:19:0b:03:3d:f6:74:e2:12:6f:e8:da:4f:c5: ca:ee:85:a6:8b:ac:47:78:7e:d9:ab:58:f1:01:6c:81:88:bb: 0f:48:83:33:f6:74:75:9c:e0:09:7a:20:ad:a9:15:3b:25:d7: 52:22:9f:ad:4b:99:2e:59:f8:2c:ab:8c:07:b2:46:c6:9d:15: c4:54:69:6d:8c:db:ad:dc:ed:07:3e:51:89:3d:2d:02:fd:53: c8:81:38:10:8f:bd:b0:89:1d:16:60:0c:d3:64:d4:b8:19:0d: df:aa:af:40:7d:b9:07:ce:cd:b4:74:45:07:ea:ad:14:e0:e3: e5:93:93:b7:47:a6:03:41:08:5f:d0:57:fa:a4:1e:1d:04:04: 99:a2:e7:cb:70:a3:f1:93:c8:9f:29:0c:17:20:13:9e:a1:61: 47:2a:cb:d0:7c:88:54:2b:00:a6:30:00:e7:04:24:6e:a4:e6: 09:11:9e:a0:2d:4b:76:bf:bd:d6:d9:da:a4:01:2c:a4:87:23: e7:66:f1:07:2f:7c:48:ce:ca:36:ce:55:ab:61:88:64:bf:1c: bb:cc:5d:d7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXAPvtNGyh8thBIAYgluq19C4y3AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIxMTAwMTAzNFoX DTI2MDUxMjIzNTk1OVowejFJMEcGA1UEBRNAZWFjMjE0NTlmYjgyOTUzZmYwMmM1 ZGY1ZjFmNjc5MzhhODk2OGQ5NGZmMmI2MGMwM2JhZmRlNDdhZDczZWM4YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyUcf38L310OlrwjhYnoO9jgXcRz T1yKPfSpTIpPws0YJdFmAOC8wSrfSyrRRO/r+1D1jKtTFFSAuhnsmb5aJFf0YZQ9 N3fVqU8RmfFfJW3chRpdqXdpxz0NFGycHHlTibM/P6ArT2fMweINtDGpqw6tEl61 59RI+MKgxx/5LEVeCoggEqRaHmkk2L/cR4kglhU1HuNkprJ+P5u3/ECOrc8rEK+P wbptLh4kjUlRQ6AsdaapjF3FtLw1l5xc1Ijl8y+DcyJNwkBJq6diCC0YxaLwE5DN YSD2zpdGQ0ypo0W+obXohpfl8Iq3CJiFt5EUyzWDD0mSE3saxSHBGGOghQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMhZiDFDZ3wo1vBWoDqVOtmbiCHWMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM1ZTU2MDVjLWYxYWYtNDJlMS05OWI1LWNkZTY1MTVmZmVlZi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba8xDAMA0GCSqGSIb3DQEBCwUAA4IBAQBNmG8gybZkrlkuaek+ +SkiaMXj8gU0azi8NOpVjN//sz4WnQIe4O6pzBkLAz32dOISb+jaT8XK7oWmi6xH eH7Zq1jxAWyBiLsPSIMz9nR1nOAJeiCtqRU7JddSIp+tS5kuWfgsq4wHskbGnRXE VGltjNut3O0HPlGJPS0C/VPIgTgQj72wiR0WYAzTZNS4GQ3fqq9AfbkHzs20dEUH 6q0U4OPlk5O3R6YDQQhf0Ff6pB4dBASZoufLcKPxk8ifKQwXIBOeoWFHKsvQfIhU KwCmMADnBCRupOYJEZ6gLUt2v73W2dqkASykhyPnZvEHL3xIzso2zlWrYYhkvxy7 zF3X -----END CERTIFICATE-----Generated at Mon Mar 2 03:24:31 2026 by rpki-client