$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a1bc0f6-2c79-4126-ab3d-737d41d4a552.roa File: 3a1bc0f6-2c79-4126-ab3d-737d41d4a552.roa (raw, json) Hash identifier: +4tDWUb7woOVZmEZh9wiKQ3ZW5h98OTwyVzDhk8rVOk= Subject key identifier: 73:9D:34:0A:9C:86:1A:B8:FD:5F:23:4F:8D:B6:18:85:BE:FF:14:13 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 424EC00B761BEDE12F02981A804CAB6AF642C128 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a1bc0f6-2c79-4126-ab3d-737d41d4a552.roa Signing time: Sun 31 May 2026 00:11:03 +0000 ROA not before: Sun 31 May 2026 00:11:03 +0000 ROA not after: Sat 29 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daba:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 00:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:4e:c0:0b:76:1b:ed:e1:2f:02:98:1a:80:4c:ab:6a:f6:42:c1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 31 00:11:03 2026 GMT Not After : Aug 29 23:59:59 2026 GMT Subject: serialNumber=1e353681be6857c30d587dbba17e0cdf1b1737c3c1126dc76ae59f886afe7432, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:97:9f:95:5c:c1:ad:36:db:e9:5e:ce:67:78: 75:19:26:11:9c:28:94:01:9a:68:76:a0:a2:63:53: 4a:62:13:a4:0f:42:85:34:8d:a6:25:76:58:9c:6c: 81:e6:a8:63:8f:22:f8:bd:6b:cf:3f:a0:6b:28:0a: 2e:89:08:1f:49:28:98:a7:8a:7b:df:11:e1:13:dd: f3:01:4f:14:e5:fb:09:e4:7c:2f:5d:d2:8b:6c:89: d5:5a:20:8d:5d:75:e3:e9:a6:a7:43:b6:0b:0d:5a: 2d:4c:9a:06:b4:13:81:0f:cb:3b:d7:bb:2d:90:0c: b1:d8:a2:5b:f1:52:4d:8c:34:b5:11:e4:d8:49:82: 7c:85:4a:b3:6f:2a:65:64:30:eb:ba:be:0d:47:7e: e3:b1:8c:83:0d:28:ff:fa:1b:ad:ca:57:2c:94:0d: 43:7f:c2:35:ed:e4:ed:7c:aa:b5:4b:10:d8:82:21: 20:56:b6:ac:ad:22:65:c5:2c:11:9e:bc:99:9a:08: 76:94:5b:1e:26:0e:c7:bf:37:e9:c7:a4:26:86:de: f0:bb:be:6b:44:09:75:45:af:16:1f:77:9f:6e:dd: a7:29:93:3c:b3:2f:63:10:b1:ef:f9:0b:b4:81:d1: 40:56:a0:35:31:3d:6f:c9:2f:0e:bb:e6:ad:62:9b: bc:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9D:34:0A:9C:86:1A:B8:FD:5F:23:4F:8D:B6:18:85:BE:FF:14:13 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3a1bc0f6-2c79-4126-ab3d-737d41d4a552.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daba:4080::/48 Signature Algorithm: sha256WithRSAEncryption 50:fe:00:51:f5:2e:76:68:6c:b0:48:28:20:a2:10:42:25:de: 53:d3:9c:b9:ca:b5:d7:8f:4c:c9:ba:b7:ea:12:82:54:21:13: 5f:a1:3d:ea:51:14:89:a3:c1:fb:19:b5:f9:e9:83:96:e0:c0: c7:40:3c:1f:92:37:33:14:7f:b7:86:a8:f9:d1:f6:4f:b4:fa: 2a:38:66:a0:c6:a9:e8:fb:15:1e:a3:7c:0c:57:3a:82:28:b2: ff:f6:fa:2c:81:dc:cf:75:47:b5:87:1e:22:50:6c:af:12:d7: 73:a7:86:e9:fa:30:5d:63:75:bd:fa:d8:f0:66:0c:c2:9c:e5: 9d:1b:3e:0a:23:19:ce:ee:3b:a0:c2:5e:06:b5:e0:b2:f3:cb: 21:0a:59:91:3c:7e:3d:47:c6:12:aa:0a:04:45:d9:a7:75:39: 4d:b5:47:b8:47:70:3e:9e:a1:9d:cf:0f:fa:5e:a7:0c:bb:29: 6a:7a:1c:f1:69:a7:c1:bc:45:06:5d:2f:80:cc:96:f0:cf:d1: c3:8f:c7:9b:d7:d5:3d:88:ad:2b:92:a2:dc:7c:0d:19:8e:cf: ca:cf:b4:7b:41:03:40:e7:2d:91:23:6a:a2:2e:59:4b:d3:06: ca:f7:3f:ec:64:5b:73:52:2a:c3:b8:e2:46:4e:d6:5d:36:07: 46:e1:7a:86 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQk7AC3Yb7eEvApgagEyravZCwSgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUzMTAwMTEwM1oX DTI2MDgyOTIzNTk1OVowejFJMEcGA1UEBRNAMWUzNTM2ODFiZTY4NTdjMzBkNTg3 ZGJiYTE3ZTBjZGYxYjE3MzdjM2MxMTI2ZGM3NmFlNTlmODg2YWZlNzQzMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZeflVzBrTbb6V7OZ3h1GSYRnCiU AZpodqCiY1NKYhOkD0KFNI2mJXZYnGyB5qhjjyL4vWvPP6BrKAouiQgfSSiYp4p7 3xHhE93zAU8U5fsJ5HwvXdKLbInVWiCNXXXj6aanQ7YLDVotTJoGtBOBD8s717st kAyx2KJb8VJNjDS1EeTYSYJ8hUqzbyplZDDrur4NR37jsYyDDSj/+hutylcslA1D f8I17eTtfKq1SxDYgiEgVrasrSJlxSwRnryZmgh2lFseJg7Hvzfpx6Qmht7wu75r RAl1Ra8WH3efbt2nKZM8sy9jELHv+Qu0gdFAVqA1MT1vyS8Ou+atYpu8EQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHOdNAqchhq4/V8jT422GIW+/xQTMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhMWJjMGY2LTJjNzktNDEyNi1hYjNkLTczN2Q0MWQ0YTU1Mi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaukCAMA0GCSqGSIb3DQEBCwUAA4IBAQBQ/gBR9S52aGywSCgg ohBCJd5T05y5yrXXj0zJurfqEoJUIRNfoT3qURSJo8H7GbX56YOW4MDHQDwfkjcz FH+3hqj50fZPtPoqOGagxqno+xUeo3wMVzqCKLL/9vosgdzPdUe1hx4iUGyvEtdz p4bp+jBdY3W9+tjwZgzCnOWdGz4KIxnO7jugwl4GteCy88shClmRPH49R8YSqgoE RdmndTlNtUe4R3A+nqGdzw/6XqcMuylqehzxaafBvEUGXS+AzJbwz9HDj8eb19U9 iK0rkqLcfA0Zjs/Kz7R7QQNA5y2RI2qiLllL0wbK9z/sZFtzUirDuOJGTtZdNgdG 4XqG -----END CERTIFICATE-----Generated at Wed Jun 17 08:42:17 2026 by rpki-client