$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa File: 1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa (raw, json) Hash identifier: 6ZHd9tMBBsS0zO8pwV/B8KQ9iFZ4j7bln4l9gBd9ACI= Subject key identifier: B2:2B:3F:87:43:45:0C:0B:92:CD:3B:FD:93:8F:99:0A:7E:B9:5B:9D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 101F12C7D17A0B644CA5153A0FEFAAB6D50495FE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa Signing time: Mon 11 May 2026 00:21:13 +0000 ROA not before: Mon 11 May 2026 00:21:13 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:c880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:1f:12:c7:d1:7a:0b:64:4c:a5:15:3a:0f:ef:aa:b6:d5:04:95:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:21:13 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=a6bd8ce9ad0de4d953655563bf021d2312cfe80e9e03719bcb27ea28d9071a3f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:ae:25:33:84:a8:17:21:ef:6d:92:b2:7e: 1a:33:da:60:b6:54:da:e8:c7:a0:f1:50:35:a7:41: 2a:c4:85:de:9f:b7:d9:03:a2:52:1d:c2:1c:6a:24: 95:df:57:a6:93:83:89:0d:79:8b:bb:80:0f:1f:06: ee:d4:15:d8:0d:96:04:0b:d4:53:49:f6:3f:e8:e5: 12:97:77:be:50:65:52:d4:67:94:87:0e:9f:ab:b3: fa:c9:d2:b7:b0:7e:d4:51:8d:5b:a1:9c:ed:42:c2: e8:2f:e9:79:3a:80:17:b9:f6:73:fd:e6:d2:3d:a3: 8f:c7:ba:43:10:b4:6b:5d:1f:0b:6f:63:13:bc:f8: 59:9b:7a:3f:b4:bc:c5:4d:9c:34:9a:4a:93:ab:d3: 47:85:b4:7e:0d:6f:f4:d0:0e:0b:9a:84:2d:f9:4b: 87:83:80:9d:aa:a9:c7:4e:c9:dc:54:b8:cb:75:dc: fa:a3:43:16:65:1e:e5:79:4d:67:75:ae:9c:c2:05: 1d:c8:67:70:92:3b:0f:84:5c:c1:b0:49:37:f6:a4: c0:8b:57:dd:66:bf:e8:ca:9a:1d:73:b9:e4:e1:20: 6c:85:39:4c:3f:80:94:1e:07:f1:d6:09:c0:3b:5f: 1e:e9:d9:a1:41:df:c7:07:33:68:98:0d:ef:cf:7d: 56:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2B:3F:87:43:45:0C:0B:92:CD:3B:FD:93:8F:99:0A:7E:B9:5B:9D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1ca52d2f-1a73-4ea1-9bb5-6d983319305f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:c880::/48 Signature Algorithm: sha256WithRSAEncryption a9:9e:db:3e:7e:b0:07:cd:71:b9:a6:ce:86:e4:18:47:dd:ec: 0a:0c:13:db:e0:0e:24:ea:e6:aa:db:22:38:63:5e:c8:e7:14: 21:1c:0e:fc:e4:8a:a6:83:6d:a3:50:45:3f:61:b4:a4:52:6a: 86:bc:74:cd:e5:42:3a:ad:76:17:c2:ed:be:f9:7d:4d:74:85: 43:20:4a:9b:df:e9:88:4f:90:c8:38:d9:a1:e9:0b:08:a7:66: 05:a7:64:08:a4:d8:86:f5:b3:a7:6c:27:1a:36:4f:ec:79:12: f5:50:1f:6f:af:54:c4:6a:07:fc:7a:94:6c:53:97:91:6e:63: 8e:6a:5c:0e:3c:dc:4c:04:ff:d8:9f:9c:65:fc:05:01:66:f6: 02:e6:82:57:68:a9:13:9b:88:b3:96:32:fa:21:c6:b1:7a:ca: 65:55:70:2f:de:04:dd:69:5e:aa:70:c6:4b:04:a2:5b:b0:e7: cb:22:41:28:47:bf:a5:0d:f6:7c:e5:9a:5e:44:72:e6:51:58: 04:cb:4b:e1:02:db:ff:1a:ca:f0:e8:6a:8e:9d:05:30:87:b8: 1b:f2:90:5d:31:e6:d0:f8:c2:4e:12:f0:cb:90:01:95:56:42: ed:86:19:3d:ce:3f:ac:dd:c5:1e:0f:a8:d0:4d:14:bf:4a:9a: ff:90:01:50 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUEB8Sx9F6C2RMpRU6D++qttUElf4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMjExM1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAYTZiZDhjZTlhZDBkZTRkOTUzNjU1 NTYzYmYwMjFkMjMxMmNmZTgwZTllMDM3MTliY2IyN2VhMjhkOTA3MWEzZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz2uJTOEqBch722Ssn4aM9pgtlTa 6Meg8VA1p0EqxIXen7fZA6JSHcIcaiSV31emk4OJDXmLu4APHwbu1BXYDZYEC9RT SfY/6OUSl3e+UGVS1GeUhw6fq7P6ydK3sH7UUY1boZztQsLoL+l5OoAXufZz/ebS PaOPx7pDELRrXR8Lb2MTvPhZm3o/tLzFTZw0mkqTq9NHhbR+DW/00A4LmoQt+UuH g4CdqqnHTsncVLjLddz6o0MWZR7leU1nda6cwgUdyGdwkjsPhFzBsEk39qTAi1fd Zr/oypodc7nk4SBshTlMP4CUHgfx1gnAO18e6dmhQd/HBzNomA3vz31WLwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLIrP4dDRQwLks07/ZOPmQp+uVudMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjYTUyZDJmLTFhNzMtNGVhMS05YmI1LTZkOTgzMzE5MzA1Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAMiAMA0GCSqGSIb3DQEBCwUAA4IBAQCpnts+frAHzXG5ps6G 5BhH3ewKDBPb4A4k6uaq2yI4Y17I5xQhHA785Iqmg22jUEU/YbSkUmqGvHTN5UI6 rXYXwu2++X1NdIVDIEqb3+mIT5DIONmh6QsIp2YFp2QIpNiG9bOnbCcaNk/seRL1 UB9vr1TEagf8epRsU5eRbmOOalwOPNxMBP/Yn5xl/AUBZvYC5oJXaKkTm4izljL6 IcaxesplVXAv3gTdaV6qcMZLBKJbsOfLIkEoR7+lDfZ85ZpeRHLmUVgEy0vhAtv/ Gsrw6GqOnQUwh7gb8pBdMebQ+MJOEvDLkAGVVkLthhk9zj+s3cUeD6jQTRS/Spr/ kAFQ -----END CERTIFICATE-----Generated at Tue May 12 23:31:05 2026 by rpki-client