$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa File: 3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa (raw, json) Hash identifier: LgYTaDlOViN/fmN2X2QgAy7WK4SgPeHZzn+Ro/Z4Khs= Subject key identifier: B1:73:ED:F1:6E:EF:01:32:14:85:A9:45:C1:BD:F4:B6:C6:B0:83:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1520506F025D70757A2F776344051376319FE566 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa Signing time: Wed 13 May 2026 00:30:12 +0000 ROA not before: Wed 13 May 2026 00:30:12 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da36:f000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 00:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:20:50:6f:02:5d:70:75:7a:2f:77:63:44:05:13:76:31:9f:e5:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:30:12 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=e5fd898dbd07076aab9892326c1745d703c324c1bd30e0e730a0fafb2041a8c4, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:3f:f7:00:c7:e2:70:4a:b9:96:fd:ea:6c: fa:b5:8e:87:1e:c6:71:14:19:6d:37:ee:b1:8f:fe: 7f:57:95:3f:eb:5d:92:b8:5e:27:04:7e:bf:4d:0f: 14:d2:7f:c5:8a:a8:dd:3b:b5:f5:09:b2:d1:22:2e: 9b:3a:bf:56:80:2e:77:79:00:90:85:d1:b4:2c:7f: bc:43:85:27:c4:5e:16:01:8b:7d:49:e6:da:38:18: 2c:62:9a:a8:fc:39:24:61:60:cd:ac:2b:1d:98:a8: 55:bd:71:06:e1:65:15:19:70:9f:14:d9:1b:0c:16: e9:ad:59:76:5e:24:92:10:7e:5c:a7:2e:16:93:69: 78:5b:1e:a8:1e:7e:73:c4:98:83:29:12:da:9b:a1: 7f:6d:41:c3:3d:09:9a:b4:11:4d:8e:84:ca:ff:f3: 9d:0d:77:3e:2f:72:b4:e9:cb:81:97:a5:c6:67:0d: 27:c6:4c:c9:38:36:c8:1f:87:fe:86:a8:eb:fa:7f: cb:49:b1:ee:ca:c9:2f:9b:b8:f2:40:87:ac:93:94: c7:f5:50:02:ac:d4:43:e7:f3:0d:6a:b8:b4:f4:2f: 61:f0:21:8a:0a:69:43:42:e7:1a:e3:71:2f:f1:b9: e9:52:6b:64:e7:df:79:42:84:51:d4:cc:2b:2a:11: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:73:ED:F1:6E:EF:01:32:14:85:A9:45:C1:BD:F4:B6:C6:B0:83:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/3aa197c4-ad52-4dbd-9cbe-67990253cbf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da36:f000::/40 Signature Algorithm: sha256WithRSAEncryption 43:53:75:9f:39:42:f2:20:db:32:7b:cc:bf:d9:46:59:26:71: 73:cc:c4:bc:37:27:a3:c2:93:45:4c:3b:34:08:70:2e:9d:b3: 4f:80:08:f1:a2:75:41:1d:3b:c3:f7:33:42:47:18:58:2c:a7: f2:56:e8:4f:3d:47:a7:16:49:b3:0e:13:7a:26:7f:65:28:c1: e0:c9:9b:48:cc:2b:76:49:16:7c:ab:e9:fd:97:7c:60:14:f6: 85:72:ef:bb:0f:47:d1:22:ab:57:c6:f2:44:e3:89:0f:f7:14: 1f:bd:c7:a9:f4:fb:a5:ec:45:21:73:86:17:3c:58:c3:5c:79: ae:91:81:c9:eb:71:8c:55:73:57:7a:5f:74:77:48:33:10:6b: 56:56:02:9e:d4:b8:e3:1b:23:52:b1:c6:88:96:a3:6c:ff:01: ae:1f:ce:41:fa:3d:60:37:9c:dd:71:cb:78:21:48:ba:2a:9a: 5e:83:8b:8b:a2:07:e2:43:a5:2e:49:d9:7b:0d:8d:74:f1:a7: c6:59:c5:aa:7d:af:37:f6:2d:f6:72:d5:7f:53:14:7b:40:73: f7:ba:51:2c:c4:28:c9:75:45:ae:3d:79:7e:51:fa:3f:66:51: 08:32:e6:47:d8:23:4f:dc:95:e3:ee:1b:b3:d4:17:f4:0c:99: fb:f6:7c:8e -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUFSBQbwJdcHV6L3djRAUTdjGf5WYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMzAxMloX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNAZTVmZDg5OGRiZDA3MDc2YWFiOTg5 MjMyNmMxNzQ1ZDcwM2MzMjRjMWJkMzBlMGU3MzBhMGZhZmIyMDQxYThjNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiso/9wDH4nBKuZb96mz6tY6HHsZx FBltN+6xj/5/V5U/612SuF4nBH6/TQ8U0n/FiqjdO7X1CbLRIi6bOr9WgC53eQCQ hdG0LH+8Q4UnxF4WAYt9SebaOBgsYpqo/DkkYWDNrCsdmKhVvXEG4WUVGXCfFNkb DBbprVl2XiSSEH5cpy4Wk2l4Wx6oHn5zxJiDKRLam6F/bUHDPQmatBFNjoTK//Od DXc+L3K06cuBl6XGZw0nxkzJODbIH4f+hqjr+n/LSbHuyskvm7jyQIesk5TH9VAC rNRD5/MNari09C9h8CGKCmlDQuca43Ev8bnpUmtk5995QoRR1MwrKhF7iwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLFz7fFu7wEyFIWpRcG99LbGsIP3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzNhYTE5N2M0LWFkNTItNGRiZC05Y2JlLTY3OTkwMjUzY2JmNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaNvAwDQYJKoZIhvcNAQELBQADggEBAENTdZ85QvIg2zJ7zL/Z RlkmcXPMxLw3J6PCk0VMOzQIcC6ds0+ACPGidUEdO8P3M0JHGFgsp/JW6E89R6cW SbMOE3omf2UoweDJm0jMK3ZJFnyr6f2XfGAU9oVy77sPR9Eiq1fG8kTjiQ/3FB+9 x6n0+6XsRSFzhhc8WMNcea6RgcnrcYxVc1d6X3R3SDMQa1ZWAp7UuOMbI1KxxoiW o2z/Aa4fzkH6PWA3nN1xy3ghSLoqml6Di4uiB+JDpS5J2XsNjXTxp8ZZxap9rzf2 LfZy1X9TFHtAc/e6USzEKMl1Ra49eX5R+j9mUQgy5kfYI0/clePuG7PUF/QMmfv2 fI4= -----END CERTIFICATE-----Generated at Sat Jun 13 08:03:09 2026 by rpki-client