$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370d0a30-c2b7-48d3-a319-29c5c20fcd8e.roa File: 370d0a30-c2b7-48d3-a319-29c5c20fcd8e.roa (raw, json) Hash identifier: hO/T4ZBC0YyeF/G+LpD/6NVqVii8heSLESEMUICteiA= Subject key identifier: C9:76:A1:DC:5A:E2:C5:C5:21:17:A7:1F:8D:8C:02:CE:CC:18:36:C1 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2ACA23420C1B359D9B7AD009FC65541077B4F592 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370d0a30-c2b7-48d3-a319-29c5c20fcd8e.roa Signing time: Sun 31 May 2026 00:20:05 +0000 ROA not before: Sun 31 May 2026 00:20:05 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae9:a0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ca:23:42:0c:1b:35:9d:9b:7a:d0:09:fc:65:54:10:77:b4:f5:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:20:05 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=138f3e16b8f8b43829c6c1a3095c0d24563450037f0d19b28fe1b8e40841a21b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:ed:c3:ce:c4:a4:8c:dc:ad:83:8f:8b:23: 7c:76:91:8f:c2:e3:ad:14:ca:b9:9a:0e:d2:bb:e4: 1e:52:66:6d:c2:05:7c:e1:70:79:58:80:a6:30:47: da:3a:85:57:22:4c:1e:30:63:41:71:92:e5:c9:d9: 3c:65:53:05:fb:f1:7f:b0:4a:a4:a9:28:9a:4b:00: 9f:eb:54:6a:20:c6:4c:ac:8b:64:0e:4a:b2:79:ce: cd:92:96:fd:cc:de:00:f5:18:d1:8d:e9:d7:a5:ca: f8:fd:db:66:83:23:b0:d8:21:11:da:74:41:13:53: 23:c7:33:50:dd:bb:a1:23:9e:75:80:b4:2a:e0:9c: d9:a0:23:30:5c:c8:64:82:99:db:ee:1f:a1:33:6e: 42:f6:3f:d8:18:f1:8d:e9:97:48:f8:39:1c:3d:f3: 0e:4a:05:de:24:67:b3:6b:75:ab:d4:98:ee:cc:51: e9:a8:44:d7:80:f9:9e:ed:57:09:e8:bc:04:6a:49: 60:47:18:02:3d:66:85:70:8a:a7:a3:2b:c9:51:a3: bc:ed:5f:30:8d:fd:47:c2:02:d2:f5:65:dd:19:64: 83:85:91:56:69:a8:1a:7b:75:81:71:12:43:1b:32: c8:f2:89:e2:76:53:3d:17:b7:f9:fd:26:73:18:3e: 34:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:76:A1:DC:5A:E2:C5:C5:21:17:A7:1F:8D:8C:02:CE:CC:18:36:C1 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/370d0a30-c2b7-48d3-a319-29c5c20fcd8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae9:a0c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:02:78:2e:ed:bd:0a:c6:b6:16:54:6f:5a:09:b8:fb:37:06: d0:22:bf:d1:9d:cc:b5:b5:cd:ab:06:9b:ee:83:1d:74:bf:03: 47:72:32:65:22:8b:ef:41:77:5c:32:62:24:3b:59:3b:c9:50: 37:c3:cd:eb:ce:10:ec:9c:a5:4d:9c:c6:55:94:9e:b3:50:6a: 6a:db:cf:41:08:b4:85:02:88:9a:3b:17:66:c4:d9:74:df:7b: fe:f4:81:a6:66:c0:c9:8e:90:c2:c8:d4:c2:bb:8d:df:49:61: c8:20:27:3a:41:ae:40:e5:34:8a:84:ed:74:59:fb:69:d0:0b: 73:5d:f1:f7:88:47:a0:91:5e:78:f8:d1:ee:fe:a8:79:85:86: 41:26:34:6f:b9:27:f5:55:23:91:12:e7:8e:75:6f:53:0a:c8: 8f:c6:b4:d9:43:9a:8a:c2:5c:52:ea:bd:6e:c0:22:32:72:6c: 30:e1:b5:47:a2:be:b7:b4:9b:5e:c6:68:75:d6:cf:b5:f2:91: ab:0a:03:7c:46:d1:d1:d9:93:8d:67:0b:c6:57:77:47:4e:7c: 8b:08:1d:9a:14:62:ad:50:f5:71:34:25:a5:df:2c:d9:58:33: fd:12:e7:1a:78:97:30:39:9a:4d:52:87:bf:93:b2:f4:3a:04: 95:9d:e3:91 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUKsojQgwbNZ2betAJ/GVUEHe09ZIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMjAwNVoX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAMTM4ZjNlMTZiOGY4YjQzODI5YzZj MWEzMDk1YzBkMjQ1NjM0NTAwMzdmMGQxOWIyOGZlMWI4ZTQwODQxYTIxYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2ftw87EpIzcrYOPiyN8dpGPwuOt FMq5mg7Su+QeUmZtwgV84XB5WICmMEfaOoVXIkweMGNBcZLlydk8ZVMF+/F/sEqk qSiaSwCf61RqIMZMrItkDkqyec7Nkpb9zN4A9RjRjenXpcr4/dtmgyOw2CER2nRB E1MjxzNQ3buhI551gLQq4JzZoCMwXMhkgpnb7h+hM25C9j/YGPGN6ZdI+DkcPfMO SgXeJGeza3Wr1JjuzFHpqETXgPme7VcJ6LwEaklgRxgCPWaFcIqnoyvJUaO87V8w jf1HwgLS9WXdGWSDhZFWaagae3WBcRJDGzLI8onidlM9F7f5/SZzGD40uwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFMl2odxa4sXFIRenH42MAs7MGDbBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzM3MGQwYTMwLWMyYjctNDhkMy1hMzE5LTI5YzVjMjBmY2Q4ZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6aDAMA0GCSqGSIb3DQEBCwUAA4IBAQAwAngu7b0KxrYWVG9a Cbj7NwbQIr/Rncy1tc2rBpvugx10vwNHcjJlIovvQXdcMmIkO1k7yVA3w83rzhDs nKVNnMZVlJ6zUGpq289BCLSFAoiaOxdmxNl033v+9IGmZsDJjpDCyNTCu43fSWHI ICc6Qa5A5TSKhO10Wftp0AtzXfH3iEegkV54+NHu/qh5hYZBJjRvuSf1VSOREueO dW9TCsiPxrTZQ5qKwlxS6r1uwCIycmww4bVHor63tJtexmh11s+18pGrCgN8RtHR 2ZONZwvGV3dHTnyLCB2aFGKtUPVxNCWl3yzZWDP9EucaeJcwOZpNUoe/k7L0OgSV neOR -----END CERTIFICATE-----Generated at Sat Jun 13 10:26:03 2026 by rpki-client