$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa File: 082ff1eb-44aa-43f9-9667-adb2b519afec.roa (raw, json) Hash identifier: jq9QZxzQA9hcYpgev4vflP4zu5iV+FYd84HyjiefWPw= Subject key identifier: F9:26:01:E6:83:14:8E:E4:70:5D:AC:4C:D7:DB:12:71:9E:B5:8A:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F269E3D17870C40F048FA5D5D88B66441A67C55 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa Signing time: Wed 06 May 2026 00:00:08 +0000 ROA not before: Wed 06 May 2026 00:00:08 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60:2800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:26:9e:3d:17:87:0c:40:f0:48:fa:5d:5d:88:b6:64:41:a6:7c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 6 00:00:08 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=adde007ea18cfa5e49ba1a730eedb3ad6395d6eb44f26a6f249566b3e00cc3ef, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:79:81:68:ba:bd:77:50:a9:b8:03:20:4f:e2: 10:71:d4:46:e9:89:26:b1:04:80:20:8f:9d:1b:29: 13:93:a3:70:d0:6a:0f:e9:1b:c5:23:e6:7d:99:73: 78:21:f6:3c:2a:2d:32:ee:e3:3f:f3:07:7c:26:43: e8:a9:de:44:fc:74:39:c4:c8:2a:4c:e5:f7:df:77: 70:db:a2:17:c1:87:a3:f7:99:11:0f:2f:0a:92:e9: da:21:ec:f6:14:d4:6b:88:57:53:56:7c:db:41:6e: 1e:0d:9c:be:2c:6f:7f:6d:3f:1c:39:5c:b0:0a:f1: 45:fe:9c:9d:ff:64:ee:0d:ca:a9:89:b6:7e:7a:d7: 4d:06:4e:c0:75:fa:b0:f8:7c:19:3c:bf:25:ee:ab: 70:6f:7d:b4:46:1f:84:7d:11:a1:87:41:17:9e:6c: c1:a7:bf:66:82:25:51:aa:36:2c:c1:09:91:9c:be: 3f:8b:6e:13:53:34:bf:c8:ba:5e:3d:45:bc:67:a9: dc:be:9f:05:73:59:29:69:1b:cf:a0:a4:f9:24:3c: 66:ab:85:0e:35:cb:cd:2a:d7:75:46:ab:56:35:0a: d1:07:2f:91:90:86:8b:64:b2:14:25:6b:b5:03:dd: c3:82:fc:4c:ea:e0:02:a5:5b:3c:1e:97:b1:62:3d: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:26:01:E6:83:14:8E:E4:70:5D:AC:4C:D7:DB:12:71:9E:B5:8A:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/082ff1eb-44aa-43f9-9667-adb2b519afec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60:2800::/40 Signature Algorithm: sha256WithRSAEncryption 25:64:d7:cd:80:f5:2b:ed:21:3e:69:30:39:2d:9d:61:66:a4: a2:e5:65:7d:0d:f9:80:63:98:2e:5d:72:ee:ef:1d:bd:3d:c1: fd:16:37:2e:82:0d:be:19:15:45:26:a8:0d:00:ed:9b:f3:45: d0:b7:ff:59:c5:61:7e:ae:5c:3a:b1:14:1f:99:f3:2e:66:b3: 48:34:9e:0b:18:14:d9:b9:d7:85:fa:ec:65:87:66:27:ba:40: df:8e:83:88:cf:c9:96:67:25:ae:7b:3f:02:0f:e8:08:05:32: e1:4a:9a:51:6d:85:71:ab:fe:80:a8:1e:8e:40:fb:e9:14:f9: 23:b7:6a:a3:89:24:98:be:2d:62:32:5f:5f:87:19:67:6f:9f: d1:13:ba:b0:a6:67:e6:b8:1c:9f:7e:d4:38:74:b1:14:b7:8c: db:22:3b:8f:78:84:72:35:54:45:b0:80:11:1e:bb:bf:09:89: e9:13:e0:7b:3e:cc:f4:92:0c:98:a3:c1:8b:7d:f8:93:2c:a8: 76:a8:44:2f:bf:1e:9a:06:39:d9:ab:59:72:cf:40:20:67:e9: 64:05:ac:aa:91:ec:6e:b3:a8:47:08:97:b2:db:c2:b8:2d:fe: 4c:3c:42:e7:25:d5:f5:e2:47:06:cd:d7:52:9e:d8:90:4d:f5: 39:3f:ad:16 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUXyaePReHDEDwSPpdXYi2ZEGmfFUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNjAwMDAwOFoX DTI2MDgwNDIzNTk1OVowejFJMEcGA1UEBRNAYWRkZTAwN2VhMThjZmE1ZTQ5YmEx YTczMGVlZGIzYWQ2Mzk1ZDZlYjQ0ZjI2YTZmMjQ5NTY2YjNlMDBjYzNlZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnmBaLq9d1CpuAMgT+IQcdRG6Ykm sQSAII+dGykTk6Nw0GoP6RvFI+Z9mXN4IfY8Ki0y7uM/8wd8JkPoqd5E/HQ5xMgq TOX333dw26IXwYej95kRDy8KkunaIez2FNRriFdTVnzbQW4eDZy+LG9/bT8cOVyw CvFF/pyd/2TuDcqpibZ+etdNBk7Adfqw+HwZPL8l7qtwb320Rh+EfRGhh0EXnmzB p79mgiVRqjYswQmRnL4/i24TUzS/yLpePUW8Z6ncvp8Fc1kpaRvPoKT5JDxmq4UO NcvNKtd1RqtWNQrRBy+RkIaLZLIUJWu1A93DgvxM6uACpVs8HpexYj3XlwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPkmAeaDFI7kcF2sTNfbEnGetYqNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4MmZmMWViLTQ0YWEtNDNmOS05NjY3LWFkYjJiNTE5YWZlYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYCgwDQYJKoZIhvcNAQELBQADggEBACVk182A9SvtIT5pMDkt nWFmpKLlZX0N+YBjmC5dcu7vHb09wf0WNy6CDb4ZFUUmqA0A7ZvzRdC3/1nFYX6u XDqxFB+Z8y5ms0g0ngsYFNm514X67GWHZie6QN+Og4jPyZZnJa57PwIP6AgFMuFK mlFthXGr/oCoHo5A++kU+SO3aqOJJJi+LWIyX1+HGWdvn9ETurCmZ+a4HJ9+1Dh0 sRS3jNsiO494hHI1VEWwgBEeu78JiekT4Hs+zPSSDJijwYt9+JMsqHaoRC+/HpoG OdmrWXLPQCBn6WQFrKqR7G6zqEcIl7Lbwrgt/kw8Qucl1fXiRwbN11Ke2JBN9Tk/ rRY= -----END CERTIFICATE-----Generated at Tue May 12 23:26:44 2026 by rpki-client