$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa File: 09befdff-9a96-4bae-899f-ded4a020e80d.roa (raw, json) Hash identifier: 4iur7eHSuDOU3B8PBbGpxfjLUuLsfhVIsOWb/FIKkqA= Subject key identifier: F0:FA:06:D5:44:75:A6:D9:E2:FF:B9:BA:42:F4:A4:73:76:4A:1E:A2 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5BC223BBFECF0D0EBB939EB90CFC96766BC4CE88 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa Signing time: Tue 12 May 2026 00:00:54 +0000 ROA not before: Tue 12 May 2026 00:00:54 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c2:23:bb:fe:cf:0d:0e:bb:93:9e:b9:0c:fc:96:76:6b:c4:ce:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:00:54 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=1462e6962bd10980677d036d3a0080b63ee39dcf158fcdf8bfcfe8ab1b468b55, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:20:1e:1a:0b:cb:47:42:4d:f5:79:66:05:43: d5:7b:77:68:c2:37:5f:e4:9a:73:6d:ea:d0:14:13: 63:ac:8f:c9:ef:71:33:14:af:b2:0c:a9:67:c3:45: 56:9e:e9:59:d1:ab:96:02:17:68:20:22:f6:12:1a: 91:ba:a5:3e:4f:bf:4c:ce:24:c9:7d:87:03:ed:df: 49:af:08:82:2e:91:64:e3:e4:c5:ef:5a:f7:50:a5: cb:2f:99:41:d5:02:ad:f6:3d:49:6c:59:ee:b5:38: ba:3a:b9:97:c6:17:eb:dd:93:ec:36:25:5d:8a:6a: 85:3e:19:31:ca:9f:38:48:05:71:e0:fe:e0:36:ca: 3e:e7:03:96:c6:87:ec:92:9f:24:7b:25:d3:16:be: 70:44:50:0d:50:3e:71:3c:37:bd:0b:24:6f:97:74: 14:00:5e:29:2e:9c:43:cc:38:f1:c3:9c:17:b0:b0: 4e:3d:5c:70:e2:ce:0f:5b:df:26:f4:90:85:2b:b0: ab:98:04:ae:8b:62:9a:17:f7:4a:e2:e1:38:82:7f: 35:4e:1b:bb:6e:5e:44:79:77:84:4f:d8:04:6b:5c: c7:1c:1e:3e:b0:ff:a2:d1:98:bb:3f:7c:c2:7d:70: 98:f9:29:ae:c5:79:8a:d4:92:b9:dd:f9:2d:6f:1d: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:FA:06:D5:44:75:A6:D9:E2:FF:B9:BA:42:F4:A4:73:76:4A:1E:A2 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/09befdff-9a96-4bae-899f-ded4a020e80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:6000::/40 Signature Algorithm: sha256WithRSAEncryption 7b:21:14:84:50:fa:19:47:b7:0b:47:c1:2e:b1:04:c5:81:86: 4c:9a:3a:5f:8e:7f:df:80:00:e1:39:33:f1:fd:62:b2:54:aa: d5:be:ce:85:f1:bc:b9:45:fb:01:8d:d3:28:4d:a6:fe:68:7c: fd:8c:dc:5d:7e:c3:7d:fe:1c:ee:55:c6:47:97:05:1c:27:51: 2b:87:63:13:4f:15:6e:c6:0d:8a:88:44:af:5c:b6:23:1c:e6: c7:92:cf:fd:0f:64:5b:2e:8c:9a:7e:b4:40:c0:b7:67:71:7c: bc:f3:d0:4a:86:87:ae:33:d7:b2:5a:f8:ed:1a:df:59:41:7c: 50:d7:f4:aa:9e:06:bb:6f:88:e1:b2:a3:9e:31:a5:24:0b:5d: 5b:e1:c5:39:01:6b:1b:d2:ec:68:a8:0f:f7:52:45:fa:05:99: c8:4d:75:7a:0e:48:c3:0e:f3:25:77:c0:15:8a:4e:58:72:cc: ba:77:64:da:2a:71:0f:8c:fa:f4:07:28:c8:1c:86:0d:c8:39: a1:52:8b:b0:42:fe:55:18:ab:db:eb:b7:a9:49:a3:5a:80:5d: 19:89:46:30:61:8d:26:ce:18:fe:4b:10:94:b4:15:d0:c1:14: b9:5d:40:3e:3a:40:1c:6d:9f:f9:90:9d:d5:b9:7b:9c:21:74: 24:52:5e:06 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUW8Iju/7PDQ67k565DPyWdmvEzogwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDA1NFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAMTQ2MmU2OTYyYmQxMDk4MDY3N2Qw MzZkM2EwMDgwYjYzZWUzOWRjZjE1OGZjZGY4YmZjZmU4YWIxYjQ2OGI1NTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriAeGgvLR0JN9XlmBUPVe3dowjdf 5JpzberQFBNjrI/J73EzFK+yDKlnw0VWnulZ0auWAhdoICL2EhqRuqU+T79MziTJ fYcD7d9JrwiCLpFk4+TF71r3UKXLL5lB1QKt9j1JbFnutTi6OrmXxhfr3ZPsNiVd imqFPhkxyp84SAVx4P7gNso+5wOWxofskp8keyXTFr5wRFANUD5xPDe9CyRvl3QU AF4pLpxDzDjxw5wXsLBOPVxw4s4PW98m9JCFK7CrmASui2KaF/dK4uE4gn81Thu7 bl5EeXeET9gEa1zHHB4+sP+i0Zi7P3zCfXCY+SmuxXmK1JK53fktbx2QPwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPD6BtVEdabZ4v+5ukL0pHN2Sh6iMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA5YmVmZGZmLTlhOTYtNGJhZS04OTlmLWRlZDRhMDIwZTgwZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+2AwDQYJKoZIhvcNAQELBQADggEBAHshFIRQ+hlHtwtHwS6x BMWBhkyaOl+Of9+AAOE5M/H9YrJUqtW+zoXxvLlF+wGN0yhNpv5ofP2M3F1+w33+ HO5VxkeXBRwnUSuHYxNPFW7GDYqIRK9ctiMc5seSz/0PZFsujJp+tEDAt2dxfLzz 0EqGh64z17Ja+O0a31lBfFDX9KqeBrtviOGyo54xpSQLXVvhxTkBaxvS7GioD/dS RfoFmchNdXoOSMMO8yV3wBWKTlhyzLp3ZNoqcQ+M+vQHKMgchg3IOaFSi7BC/lUY q9vrt6lJo1qAXRmJRjBhjSbOGP5LEJS0FdDBFLldQD46QBxtn/mQndW5e5whdCRS XgY= -----END CERTIFICATE-----Generated at Wed May 13 00:37:50 2026 by rpki-client