$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa File: 83375d68-232d-4999-9b8f-cbf59f65a3fb.roa (raw, json) Hash identifier: XSdFC+4xBEttAd5mrF/+3cYVbaPFp4Ph3axCzyEjFGk= Subject key identifier: 79:DF:20:33:0E:71:C0:77:A1:29:77:05:3A:F9:EE:B2:01:12:FC:AC Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 410A54C76C930B52EF7AF4CA1DFECF84B064A3A0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa Signing time: Fri 06 Feb 2026 00:00:38 +0000 ROA not before: Fri 06 Feb 2026 00:00:38 +0000 ROA not after: Thu 07 May 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daed:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:0a:54:c7:6c:93:0b:52:ef:7a:f4:ca:1d:fe:cf:84:b0:64:a3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Feb 6 00:00:38 2026 GMT Not After : May 7 23:59:59 2026 GMT Subject: serialNumber=813a8b169e21c4eaff7229989e4ce11809dd4c0faed05e56bb3dc2eaff5187a9, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a9:c0:89:77:3a:bc:cb:34:1b:b6:6c:84:38: 65:0a:3d:ac:c2:c3:4a:98:de:23:16:44:6c:4d:e0: 46:fb:00:e8:8b:08:d3:4e:2c:05:48:39:fa:0e:8b: 0e:d0:77:41:71:01:c9:8f:e8:3a:b2:5d:ee:75:92: 61:bd:4d:08:eb:2e:73:4c:a7:7c:9b:85:71:cb:dd: 96:d4:47:cc:cc:a5:b2:92:69:16:65:b1:dd:75:b7: d4:36:99:d3:a2:d5:5f:77:06:91:52:87:0d:d4:36: 2f:08:41:c0:ea:fa:91:78:88:a8:0b:3e:86:c7:41: d6:08:74:63:2e:5c:b9:04:37:df:73:43:5f:57:97: ce:3c:b3:5e:c8:bc:fd:a6:f5:47:5e:91:d0:df:5f: 78:48:1b:fd:b3:75:98:0b:7e:03:81:56:51:eb:76: b7:46:2d:55:01:cc:19:b9:19:bd:95:49:bd:f5:9c: 39:56:5d:47:17:a8:08:2d:8b:08:86:3e:67:35:c1: 1a:ae:7a:83:e2:fb:5e:be:e9:b5:12:3e:b4:3f:16: c0:3b:36:dd:19:99:9d:99:bd:fc:03:56:01:bb:89: da:56:09:bf:1f:93:6b:2f:c1:aa:f2:67:be:9b:5d: db:80:89:4d:73:7b:09:8d:7c:99:6a:17:d5:d2:4a: 74:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:20:33:0E:71:C0:77:A1:29:77:05:3A:F9:EE:B2:01:12:FC:AC X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/83375d68-232d-4999-9b8f-cbf59f65a3fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daed:4040::/48 Signature Algorithm: sha256WithRSAEncryption 97:72:1a:30:66:aa:66:5f:e7:da:d2:5e:e1:a9:82:fe:2c:52: ad:18:26:68:e9:3e:1b:bd:07:bc:da:62:28:a2:a1:13:7d:ff: b2:9c:06:da:b7:43:fb:c9:87:01:af:93:79:75:0d:7e:0c:46: 70:3b:a2:4c:97:0c:c3:15:82:d9:74:9c:e7:0e:3a:ec:2e:cb: 23:05:50:44:8a:4e:a1:36:24:d5:3b:de:84:be:fb:cf:22:2f: a6:86:71:3b:2b:c2:71:d0:1e:d2:2d:03:cd:3a:26:15:bc:7a: 8b:6f:41:c0:e8:e1:9f:2e:31:7d:c7:e5:c3:11:bf:d7:29:51: f0:65:af:e6:33:5f:0a:58:4e:6a:6e:86:3a:bb:70:58:18:d6: dd:b6:e2:60:78:24:99:63:16:7c:45:66:1c:22:15:bf:ec:9e: 0a:dc:c9:b8:f9:bd:6d:e8:3a:a6:db:ec:96:d0:2e:06:4b:96: cf:c8:6d:d6:64:13:01:2d:f8:f7:ff:b6:cc:ad:7b:55:5e:5e: 20:43:72:ea:f1:a0:67:52:68:08:6a:23:f9:3b:34:20:9c:d5: 66:ba:a5:3c:d2:52:46:b4:28:01:bf:0d:43:43:4f:b4:0c:6d: 0a:53:e2:2a:49:8c:5d:60:cc:44:b6:3e:d9:65:58:43:bd:5e: 26:9f:c1:2f -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQQpUx2yTC1LvevTKHf7PhLBko6AwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDIwNjAwMDAzOFoX DTI2MDUwNzIzNTk1OVowejFJMEcGA1UEBRNAODEzYThiMTY5ZTIxYzRlYWZmNzIy OTk4OWU0Y2UxMTgwOWRkNGMwZmFlZDA1ZTU2YmIzZGMyZWFmZjUxODdhOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5anAiXc6vMs0G7ZshDhlCj2swsNK mN4jFkRsTeBG+wDoiwjTTiwFSDn6DosO0HdBcQHJj+g6sl3udZJhvU0I6y5zTKd8 m4Vxy92W1EfMzKWykmkWZbHddbfUNpnTotVfdwaRUocN1DYvCEHA6vqReIioCz6G x0HWCHRjLly5BDffc0NfV5fOPLNeyLz9pvVHXpHQ3194SBv9s3WYC34DgVZR63a3 Ri1VAcwZuRm9lUm99Zw5Vl1HF6gILYsIhj5nNcEarnqD4vtevum1Ej60PxbAOzbd GZmdmb38A1YBu4naVgm/H5NrL8Gq8me+m13bgIlNc3sJjXyZahfV0kp0OwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHnfIDMOccB3oSl3BTr57rIBEvysMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzgzMzc1ZDY4LTIzMmQtNDk5OS05YjhmLWNiZjU5ZjY1YTNmYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba7UBAMA0GCSqGSIb3DQEBCwUAA4IBAQCXchowZqpmX+fa0l7h qYL+LFKtGCZo6T4bvQe82mIooqETff+ynAbat0P7yYcBr5N5dQ1+DEZwO6JMlwzD FYLZdJznDjrsLssjBVBEik6hNiTVO96EvvvPIi+mhnE7K8Jx0B7SLQPNOiYVvHqL b0HA6OGfLjF9x+XDEb/XKVHwZa/mM18KWE5qboY6u3BYGNbdtuJgeCSZYxZ8RWYc IhW/7J4K3Mm4+b1t6Dqm2+yW0C4GS5bPyG3WZBMBLfj3/7bMrXtVXl4gQ3Lq8aBn UmgIaiP5OzQgnNVmuqU80lJGtCgBvw1DQ0+0DG0KU+IqSYxdYMxEtj7ZZVhDvV4m n8Ev -----END CERTIFICATE-----Generated at Sun Mar 1 22:05:01 2026 by rpki-client