$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa File: 140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa (raw, json) Hash identifier: gb7vUDKObtdBuWVBavzggO2hhZxqMlCBr1n+HAn+t4Q= Subject key identifier: 91:69:EF:98:72:08:FE:B6:A5:75:43:59:36:98:E8:A8:4A:1F:66:A5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 69F1306987BE2F0A1C45A79349C82D6F26849654 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa Signing time: Mon 11 May 2026 00:11:02 +0000 ROA not before: Mon 11 May 2026 00:11:02 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f1:30:69:87:be:2f:0a:1c:45:a7:93:49:c8:2d:6f:26:84:96:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:11:02 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=8cc1efe5f7ccf23da082ae0d27a12561233312b6f8617475933565babb9105d5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:b1:ce:2d:6c:65:af:88:f2:21:6a:af:17: 92:e7:1e:7b:11:0b:17:1e:1d:5e:0d:8a:18:62:dd: 7d:8c:b1:e6:df:a4:bb:33:d3:9c:3c:77:35:59:c6: 06:ad:ab:8d:0d:0d:87:a0:7b:96:b9:1a:d7:f3:d1: fe:ba:95:a3:36:64:d0:66:96:58:ea:f2:a5:cc:47: 1a:1f:17:5e:1f:df:2e:25:60:e3:9a:0b:69:a5:b8: ae:d1:1d:4e:49:11:44:9c:78:3f:0b:e4:cf:a3:f2: 22:b1:e0:82:35:d5:25:89:c4:5a:4f:7a:05:26:f8: 53:43:67:c6:1a:ce:0a:28:7a:ef:af:a5:4c:fe:c7: e3:c4:5d:1b:d6:23:74:c8:89:88:60:f0:97:6e:50: 76:92:66:4d:f4:39:de:6e:9d:fa:4d:d2:5e:50:99: 17:03:68:db:3c:91:c7:2e:b9:86:46:b5:6c:11:94: be:b5:57:6d:73:a3:d5:2b:21:07:b2:c3:09:96:7a: 85:fe:a0:d2:77:87:50:54:d2:f0:69:a3:ee:ee:2e: f8:2a:5f:ef:c1:e5:0e:e4:53:0e:c8:64:c9:5c:fa: 12:4e:64:72:1a:3b:29:08:53:36:0a:c0:62:79:dc: 6c:ea:e2:b6:b7:42:19:50:3a:db:cb:47:87:90:19: a5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:69:EF:98:72:08:FE:B6:A5:75:43:59:36:98:E8:A8:4A:1F:66:A5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/140a2854-efc4-48df-ac69-85d6d5a2e8cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4880::/48 Signature Algorithm: sha256WithRSAEncryption 47:8a:a2:f6:1f:5f:60:5f:2a:14:db:3d:09:18:1c:84:12:9d: 35:76:2b:cc:15:7e:c2:90:8b:98:40:bb:4d:1b:e1:00:34:15: 4c:62:49:ef:d1:0c:a7:70:97:01:49:22:79:3d:78:74:4c:7c: cf:f2:9e:33:a2:3f:d8:40:65:af:f2:8f:7f:c0:ee:26:38:80: 33:cb:77:ce:dc:94:cc:c4:11:4c:fb:a9:6d:4c:ef:80:69:20: ff:f1:23:9e:fd:56:08:db:33:a0:d2:fa:19:a7:48:7c:da:0d: e9:5f:7e:a7:02:b1:3c:45:61:c3:f0:74:49:d9:d5:12:a9:a7: 89:66:c1:fa:f7:ba:56:50:0d:e4:9c:b9:ea:2f:54:e1:54:18: 05:8d:f6:85:13:1b:a8:17:f4:f0:40:0e:85:51:ce:1c:00:dc: aa:9b:62:d8:39:94:6c:9e:6a:f0:ab:15:91:ac:96:07:8d:e0: 18:cb:7c:e5:bd:75:36:7e:7e:5e:ae:bc:f1:0f:69:9d:3b:28: fe:d6:f5:66:77:df:bc:2f:92:01:08:76:0b:11:d6:bc:ce:e1: 26:c6:f1:c8:ee:0d:6d:15:52:d9:90:83:e1:dc:15:38:26:87: 24:1a:6a:dc:94:69:ff:f9:08:0b:30:ef:d8:f2:3e:4c:ca:3f: 40:08:22:03 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUafEwaYe+LwocRaeTScgtbyaEllQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMTEwMloX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAOGNjMWVmZTVmN2NjZjIzZGEwODJh ZTBkMjdhMTI1NjEyMzMzMTJiNmY4NjE3NDc1OTMzNTY1YmFiYjkxMDVkNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmaxzi1sZa+I8iFqrxeS5x57EQsX Hh1eDYoYYt19jLHm36S7M9OcPHc1WcYGrauNDQ2HoHuWuRrX89H+upWjNmTQZpZY 6vKlzEcaHxdeH98uJWDjmgtppbiu0R1OSRFEnHg/C+TPo/IiseCCNdUlicRaT3oF JvhTQ2fGGs4KKHrvr6VM/sfjxF0b1iN0yImIYPCXblB2kmZN9Dnebp36TdJeUJkX A2jbPJHHLrmGRrVsEZS+tVdtc6PVKyEHssMJlnqF/qDSd4dQVNLwaaPu7i74Kl/v weUO5FMOyGTJXPoSTmRyGjspCFM2CsBiedxs6uK2t0IZUDrby0eHkBml+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFJFp75hyCP62pXVDWTaY6KhKH2alMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE0MGEyODU0LWVmYzQtNDhkZi1hYzY5LTg1ZDZkNWEyZThjYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOEiAMA0GCSqGSIb3DQEBCwUAA4IBAQBHiqL2H19gXyoU2z0J GByEEp01divMFX7CkIuYQLtNG+EANBVMYknv0QyncJcBSSJ5PXh0THzP8p4zoj/Y QGWv8o9/wO4mOIAzy3fO3JTMxBFM+6ltTO+AaSD/8SOe/VYI2zOg0voZp0h82g3p X36nArE8RWHD8HRJ2dUSqaeJZsH697pWUA3knLnqL1ThVBgFjfaFExuoF/TwQA6F Uc4cANyqm2LYOZRsnmrwqxWRrJYHjeAYy3zlvXU2fn5errzxD2mdOyj+1vVmd9+8 L5IBCHYLEda8zuEmxvHI7g1tFVLZkIPh3BU4JockGmrclGn/+QgLMO/Y8j5Myj9A CCID -----END CERTIFICATE-----Generated at Tue May 12 23:26:11 2026 by rpki-client