$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13a746d5-ac02-412a-8a63-918cac6ecda2.roa File: 13a746d5-ac02-412a-8a63-918cac6ecda2.roa (raw, json) Hash identifier: OH21b+np9nedkJk2S34QYZHmXuGoVnS+dIzw8QcKOQA= Subject key identifier: 73:3A:FA:F9:22:E9:F5:30:C1:53:F6:AA:50:8C:18:24:24:17:89:D8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 74633744E8ED7A99484305FE87BCBC115BC552B3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13a746d5-ac02-412a-8a63-918cac6ecda2.roa Signing time: Mon 11 May 2026 00:20:09 +0000 ROA not before: Mon 11 May 2026 00:20:09 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:2800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:63:37:44:e8:ed:7a:99:48:43:05:fe:87:bc:bc:11:5b:c5:52:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:20:09 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=96eb451a299c6b55d057fa407032a0cfafcef1810e99e46f485330ca0b0ddaf7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:c8:86:5f:3e:a1:17:7b:28:5e:2b:69:c0: ee:0b:7a:5b:ea:62:a9:b8:9c:0b:29:32:ce:d0:39: 40:0f:90:36:38:1e:c4:75:be:70:fc:0f:ca:42:ca: c9:e0:c6:f9:e1:f7:b3:a8:df:24:37:7f:f4:84:15: 3a:ad:e1:4d:9e:af:b5:0c:ce:09:e5:af:f1:19:79: 92:76:8d:a0:13:0c:c9:2d:fe:40:50:32:08:1e:4c: 67:7b:53:41:03:63:ff:c0:65:e0:95:45:7f:ad:68: a4:39:4f:db:e2:70:2e:68:4f:d2:60:8e:b6:7d:1f: 1f:f6:e4:fd:ae:20:a7:2e:3c:04:58:0d:90:9d:8a: 48:e9:92:e0:fa:0a:2e:50:58:a4:fa:39:1c:70:0c: 20:5e:bf:35:72:3c:33:93:be:c8:07:43:5b:15:33: 1a:b8:82:6a:e0:0d:c5:59:5a:2f:32:bf:c9:d3:7b: 7f:40:59:d7:3b:a6:ab:12:b8:6d:fd:c5:6d:bf:e8: 8d:47:f0:23:fd:83:a7:ca:16:7b:10:6c:fa:24:b7: e1:44:99:e1:e6:7c:fc:3c:d2:23:35:b2:d3:55:c9: 62:e3:09:ed:8a:0b:40:e9:ae:14:0b:19:c4:43:b1: 69:f6:b9:d7:1e:6f:bd:64:6d:49:51:c2:f6:51:99: a0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:3A:FA:F9:22:E9:F5:30:C1:53:F6:AA:50:8C:18:24:24:17:89:D8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/13a746d5-ac02-412a-8a63-918cac6ecda2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:2800::/40 Signature Algorithm: sha256WithRSAEncryption 62:35:80:4e:93:a6:6d:62:54:7d:c4:6e:20:73:a6:31:eb:61: ac:30:a1:73:23:9b:0b:e5:1e:ef:1d:f4:4b:6c:36:da:af:2e: 9f:9d:2d:ab:d1:95:e1:ed:82:35:37:a4:b5:8f:38:ab:97:03: 11:45:79:a2:e6:e8:e2:12:60:4b:69:2d:4f:44:43:66:fc:43: a7:50:48:a7:10:96:66:e1:88:bc:d7:b8:7f:8e:ec:f6:d7:75: cb:1f:fb:16:0f:90:2f:f8:61:d9:a9:d0:ce:7c:08:e9:54:76: 04:8c:ae:cb:ef:4f:10:a4:b6:c6:29:e3:f9:4e:fc:6f:0e:28: 7b:33:7f:18:b6:46:e6:9b:4b:76:72:cf:b3:ce:3c:6e:b4:ce: 3e:6f:5f:c5:18:82:c0:d0:ff:d2:00:7b:79:ff:6e:c7:e1:0d: 13:4e:6e:df:37:43:63:9c:f7:57:f1:e4:33:47:78:1e:21:6b: bc:0f:6b:30:5f:4f:26:c8:36:fa:a1:58:ec:01:fa:1c:47:4c: 25:97:f5:cb:52:12:fe:02:6c:74:d4:73:76:c9:83:c5:38:41: b7:41:de:b5:9d:86:14:07:08:d5:81:d1:d2:56:54:42:66:a5: 13:de:87:68:70:b3:bf:65:22:68:75:c6:e9:31:af:45:94:f7: 67:f6:56:3a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUdGM3ROjteplIQwX+h7y8EVvFUrMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMjAwOVoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAOTZlYjQ1MWEyOTljNmI1NWQwNTdm YTQwNzAzMmEwY2ZhZmNlZjE4MTBlOTllNDZmNDg1MzMwY2EwYjBkZGFmNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KLIhl8+oRd7KF4racDuC3pb6mKp uJwLKTLO0DlAD5A2OB7Edb5w/A/KQsrJ4Mb54fezqN8kN3/0hBU6reFNnq+1DM4J 5a/xGXmSdo2gEwzJLf5AUDIIHkxne1NBA2P/wGXglUV/rWikOU/b4nAuaE/SYI62 fR8f9uT9riCnLjwEWA2QnYpI6ZLg+gouUFik+jkccAwgXr81cjwzk77IB0NbFTMa uIJq4A3FWVovMr/J03t/QFnXO6arErht/cVtv+iNR/Aj/YOnyhZ7EGz6JLfhRJnh 5nz8PNIjNbLTVcli4wntigtA6a4UCxnEQ7Fp9rnXHm+9ZG1JUcL2UZmgcQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHM6+vki6fUwwVP2qlCMGCQkF4nYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzEzYTc0NmQ1LWFjMDItNDEyYS04YTYzLTkxOGNhYzZlY2RhMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaOCgwDQYJKoZIhvcNAQELBQADggEBAGI1gE6Tpm1iVH3EbiBz pjHrYawwoXMjmwvlHu8d9EtsNtqvLp+dLavRleHtgjU3pLWPOKuXAxFFeaLm6OIS YEtpLU9EQ2b8Q6dQSKcQlmbhiLzXuH+O7PbXdcsf+xYPkC/4Ydmp0M58COlUdgSM rsvvTxCktsYp4/lO/G8OKHszfxi2RuabS3Zyz7POPG60zj5vX8UYgsDQ/9IAe3n/ bsfhDRNObt83Q2Oc91fx5DNHeB4ha7wPazBfTybINvqhWOwB+hxHTCWX9ctSEv4C bHTUc3bJg8U4QbdB3rWdhhQHCNWB0dJWVEJmpRPeh2hws79lImh1xukxr0WU92f2 Vjo= -----END CERTIFICATE-----Generated at Wed May 13 00:15:15 2026 by rpki-client