$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d345d12d-b5fe-4644-99ad-b3908f757ed7.roa File: d345d12d-b5fe-4644-99ad-b3908f757ed7.roa (raw, json) Hash identifier: DE+nxn8jUP//A4Rn13Ozw1V10ZvzE7NL2w9rvI4qK2A= Subject key identifier: 35:72:F8:CC:F0:D7:19:B9:5A:C4:11:EA:71:01:86:7D:8C:AD:2D:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 373F3D8D3C9DE69F46F44E251D5C0A68164B3EE1 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d345d12d-b5fe-4644-99ad-b3908f757ed7.roa Signing time: Mon 11 May 2026 00:01:18 +0000 ROA not before: Mon 11 May 2026 00:01:18 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:3f:3d:8d:3c:9d:e6:9f:46:f4:4e:25:1d:5c:0a:68:16:4b:3e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:01:18 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=ff587daf3a6df487e5fa3498f7c548e5b264b2ee096e9dcec96833d42987083a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:10:85:44:a2:60:b3:d9:4c:c6:61:22:bc:da: db:2e:91:c2:5d:44:65:72:04:53:1c:08:07:21:31: ce:f9:18:de:6b:5d:8c:66:5e:0f:8e:f2:6d:b9:b4: 51:53:7b:77:83:4d:82:e8:02:cf:d9:ee:77:5b:79: 10:8e:54:32:2c:83:cd:cc:c3:b9:8c:f5:d2:56:08: 6e:c5:fd:70:45:ed:fd:72:5b:4e:ed:be:e7:aa:1d: 40:40:73:e9:7d:2d:78:c2:a6:fc:0e:96:2e:97:e8: 36:b9:87:7c:e8:c7:fb:61:7e:ec:4a:dc:ef:b2:51: 10:fd:2b:fd:10:5b:79:95:74:59:0b:53:b6:ca:af: bb:5e:7a:87:e4:3b:4d:90:a1:a7:aa:45:7a:d1:22: 3c:15:f2:a4:19:cb:80:32:a5:48:cc:91:86:2e:ec: b1:ce:96:58:f2:ba:e5:17:43:6d:fc:bc:25:80:91: e9:74:2f:15:5f:74:e2:7d:4b:97:1a:40:18:46:f0: 6b:65:9d:7d:99:40:74:46:32:9f:1f:1f:bf:87:1a: 1a:0d:f5:f2:1f:bd:28:67:bf:22:9a:b3:01:c0:c5: 07:91:11:a9:1c:0e:f7:36:56:72:a6:8a:0e:98:a5: e6:11:77:78:71:97:7a:73:f8:98:67:ff:a1:78:9c: 5a:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:72:F8:CC:F0:D7:19:B9:5A:C4:11:EA:71:01:86:7D:8C:AD:2D:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d345d12d-b5fe-4644-99ad-b3908f757ed7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 30:c5:b5:e7:b2:94:24:80:eb:06:aa:1a:a2:eb:68:bd:fb:1c: 62:f8:76:0e:ed:dc:91:f2:e1:fb:8f:63:58:8a:0b:bc:c7:dd: 6a:91:96:91:3b:ab:3e:e4:fc:f1:b7:50:a1:0c:d6:af:7f:c5: b8:9c:06:59:96:f5:b9:ba:5a:8a:b8:e8:33:57:97:05:de:38: c9:eb:b8:ad:d8:11:ec:45:81:61:21:82:bf:ed:44:77:dc:a0: 90:01:63:24:5e:0e:b1:ac:1d:1e:1d:b8:bd:b3:57:dc:28:83: 74:50:f6:88:4c:60:bb:b8:bb:a7:8b:00:da:22:48:17:9f:13: ed:e4:d6:c1:00:33:cf:ab:91:9e:10:96:e6:50:82:6c:a2:29: 3a:d2:7d:d5:e2:64:51:a3:c5:2d:54:57:d6:98:88:c1:ac:0a: f5:d9:00:e7:ab:70:25:d3:a0:ce:36:80:d7:c5:f4:c0:27:ea: 6e:22:de:4b:4d:33:b8:dd:07:5a:f8:6f:72:02:97:6d:5c:bc: 23:20:e4:c6:89:66:c9:94:7f:ab:05:d0:51:e8:24:d0:79:ca: 74:ba:c1:99:a1:80:da:28:50:97:bd:5c:12:c3:e8:15:fd:66: 61:bf:ee:c3:2c:af:0d:9c:7c:26:e2:20:b5:d2:bb:a1:2f:98: c1:41:4d:55 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUNz89jTyd5p9G9E4lHVwKaBZLPuEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDExOFoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAZmY1ODdkYWYzYTZkZjQ4N2U1ZmEz NDk4ZjdjNTQ4ZTViMjY0YjJlZTA5NmU5ZGNlYzk2ODMzZDQyOTg3MDgzYTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshCFRKJgs9lMxmEivNrbLpHCXURl cgRTHAgHITHO+Rjea12MZl4PjvJtubRRU3t3g02C6ALP2e53W3kQjlQyLIPNzMO5 jPXSVghuxf1wRe39cltO7b7nqh1AQHPpfS14wqb8DpYul+g2uYd86Mf7YX7sStzv slEQ/Sv9EFt5lXRZC1O2yq+7XnqH5DtNkKGnqkV60SI8FfKkGcuAMqVIzJGGLuyx zpZY8rrlF0Nt/LwlgJHpdC8VX3TifUuXGkAYRvBrZZ19mUB0RjKfHx+/hxoaDfXy H70oZ78imrMBwMUHkRGpHA73NlZypooOmKXmEXd4cZd6c/iYZ/+heJxaPQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDVy+Mzw1xm5WsQR6nEBhn2MrS0kMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2QzNDVkMTJkLWI1ZmUtNDY0NC05OWFkLWIzOTA4Zjc1N2VkNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/5DAMA0GCSqGSIb3DQEBCwUAA4IBAQAwxbXnspQkgOsGqhqi 62i9+xxi+HYO7dyR8uH7j2NYigu8x91qkZaRO6s+5Pzxt1ChDNavf8W4nAZZlvW5 ulqKuOgzV5cF3jjJ67it2BHsRYFhIYK/7UR33KCQAWMkXg6xrB0eHbi9s1fcKIN0 UPaITGC7uLuniwDaIkgXnxPt5NbBADPPq5GeEJbmUIJsoik60n3V4mRRo8UtVFfW mIjBrAr12QDnq3Al06DONoDXxfTAJ+puIt5LTTO43Qda+G9yApdtXLwjIOTGiWbJ lH+rBdBR6CTQecp0usGZoYDaKFCXvVwSw+gV/WZhv+7DLK8NnHwm4iC10ruhL5jB QU1V -----END CERTIFICATE-----Generated at Tue May 12 23:30:29 2026 by rpki-client