$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa File: 1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa (raw, json) Hash identifier: /fmyI2UJBs97JDI6EQWvXnNL/30YzZO0534DnD2lae4= Subject key identifier: B5:29:32:B9:7C:6B:08:4D:E9:7D:93:29:1F:98:87:40:6E:F7:29:20 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 20CFC5F93DBAEB15E137735F5E668C5F0621077A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa Signing time: Mon 11 May 2026 00:11:03 +0000 ROA not before: Mon 11 May 2026 00:11:03 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:cf:c5:f9:3d:ba:eb:15:e1:37:73:5f:5e:66:8c:5f:06:21:07:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:11:03 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=915d23722df469abb01aec70e261aba91fefe37e7021bea43ed2850627fc3eaf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:37:d4:bf:35:81:45:8b:35:49:fc:7b:b6: 81:b9:b6:0b:f5:29:54:7a:61:e4:ff:fc:85:02:31: 79:04:f1:90:64:5d:65:80:92:bb:68:15:6b:1b:39: 78:57:f3:54:db:70:29:e6:3b:d6:fd:67:d4:00:77: 18:b4:ae:ba:d3:70:50:2c:9c:88:68:9c:0d:17:02: ea:94:b5:5b:2e:ad:f0:3b:a5:13:0d:d7:ad:e2:5a: 95:39:69:6b:cf:7b:2a:30:03:e7:60:11:6d:5c:c7: ed:9e:63:06:32:89:17:e8:8a:6d:14:7c:47:e9:7a: 8e:65:bd:05:e2:9d:c8:92:1b:c3:2e:e8:da:de:74: eb:1c:eb:95:9b:8e:30:b9:04:6c:ec:32:a7:0b:ca: f9:44:1e:c3:c6:bc:e0:fc:aa:ca:4c:f8:a6:ba:ef: 92:0c:35:2d:c7:72:1e:d8:a5:b9:8a:a2:ad:6f:8a: 88:ff:a4:4b:d0:e6:99:cb:9d:dd:91:60:95:2a:54: 66:1f:58:e2:df:bc:08:94:b4:f1:cf:e4:73:19:f9: 33:8c:2f:d7:c2:e0:65:ee:33:8c:5a:3d:c3:04:dd: af:7e:8e:90:b7:8e:96:27:6d:c4:63:fb:98:15:5b: af:57:e4:e2:ef:4c:23:6d:b8:b0:31:7e:f7:5e:3a: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:29:32:B9:7C:6B:08:4D:E9:7D:93:29:1F:98:87:40:6E:F7:29:20 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1582ee0d-11ea-4495-97e5-0ed825ba8ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4020::/48 Signature Algorithm: sha256WithRSAEncryption 5c:14:f7:1d:a3:ca:50:53:8e:bd:33:45:c6:aa:e2:65:07:26: 7c:3f:ed:2f:76:00:6c:27:0a:3f:90:02:47:80:23:e1:f5:62: 55:3b:e1:d4:46:23:bd:5d:1d:bf:23:91:71:27:c2:6b:50:4e: 47:dc:fc:34:b5:ba:5b:b9:e0:c7:20:3e:28:25:67:4c:bd:ec: 0a:27:e0:e0:51:0a:31:fe:06:b7:f9:f0:5e:9d:33:95:83:6b: a7:e6:ef:93:c9:84:c0:61:0c:06:7b:93:b1:d0:ec:2b:d2:4d: e2:cb:f3:5c:bc:c1:7f:74:c2:1c:17:46:48:cc:d2:f2:80:ba: 3a:ff:4a:c6:cb:52:42:4c:7f:1c:c4:c0:1c:9e:b8:f0:b7:20: a6:a2:89:62:90:0c:58:47:9b:57:a2:4d:e7:6c:d8:ca:73:64: 0a:8b:b9:3a:f5:dc:30:c0:d2:85:ab:ba:41:44:d0:f8:84:ac: bc:c6:6b:e0:3d:95:a6:96:9f:60:fb:84:11:5a:59:4b:b7:20: ca:3c:2a:87:b5:b1:02:35:84:24:68:18:c4:29:74:f8:7c:68: c3:cb:e9:d0:bb:d6:29:f7:4f:a9:7c:c1:81:bb:ec:f3:40:a7: 7b:0c:8c:a0:27:ec:87:29:b6:74:8c:81:70:aa:5b:77:ce:ab: 14:61:60:87 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUIM/F+T266xXhN3NfXmaMXwYhB3owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMTEwM1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAOTE1ZDIzNzIyZGY0NjlhYmIwMWFl YzcwZTI2MWFiYTkxZmVmZTM3ZTcwMjFiZWE0M2VkMjg1MDYyN2ZjM2VhZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIQ31L81gUWLNUn8e7aBubYL9SlU emHk//yFAjF5BPGQZF1lgJK7aBVrGzl4V/NU23Ap5jvW/WfUAHcYtK6603BQLJyI aJwNFwLqlLVbLq3wO6UTDdet4lqVOWlrz3sqMAPnYBFtXMftnmMGMokX6IptFHxH 6XqOZb0F4p3IkhvDLuja3nTrHOuVm44wuQRs7DKnC8r5RB7Dxrzg/KrKTPimuu+S DDUtx3Ie2KW5iqKtb4qI/6RL0OaZy53dkWCVKlRmH1ji37wIlLTxz+RzGfkzjC/X wuBl7jOMWj3DBN2vfo6Qt46WJ23EY/uYFVuvV+Ti70wjbbiwMX73XjrY6wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLUpMrl8awhN6X2TKR+Yh0Bu9ykgMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzE1ODJlZTBkLTExZWEtNDQ5NS05N2U1LTBlZDgyNWJhOGVlMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kAgMA0GCSqGSIb3DQEBCwUAA4IBAQBcFPcdo8pQU469M0XG quJlByZ8P+0vdgBsJwo/kAJHgCPh9WJVO+HURiO9XR2/I5FxJ8JrUE5H3Pw0tbpb ueDHID4oJWdMvewKJ+DgUQox/ga3+fBenTOVg2un5u+TyYTAYQwGe5Ox0Owr0k3i y/NcvMF/dMIcF0ZIzNLygLo6/0rGy1JCTH8cxMAcnrjwtyCmoolikAxYR5tXok3n bNjKc2QKi7k69dwwwNKFq7pBRND4hKy8xmvgPZWmlp9g+4QRWllLtyDKPCqHtbEC NYQkaBjEKXT4fGjDy+nQu9Yp90+pfMGBu+zzQKd7DIygJ+yHKbZ0jIFwqlt3zqsU YWCH -----END CERTIFICATE-----Generated at Tue May 12 23:33:58 2026 by rpki-client