$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ffe405-af5c-4562-aa96-cff0cf796a1c.roa File: 27ffe405-af5c-4562-aa96-cff0cf796a1c.roa (raw, json) Hash identifier: dDa/nBRDc6inmwYQ8OWdGT2v76w3ABFdbmXk/1aVS+k= Subject key identifier: FB:15:60:CB:B6:9C:43:FB:7D:3B:EC:6C:EE:83:D4:C1:59:A5:05:4F Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52D9BDEAE3BC037643D86C48D06855F72B98BE13 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ffe405-af5c-4562-aa96-cff0cf796a1c.roa Signing time: Mon 11 May 2026 00:30:11 +0000 ROA not before: Mon 11 May 2026 00:30:11 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:6020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:d9:bd:ea:e3:bc:03:76:43:d8:6c:48:d0:68:55:f7:2b:98:be:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:30:11 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=70c66b50c6dc3426ff56acd8097f0cee5301ffa60187f2183e6f6cfdee0360d5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:e7:15:e7:48:e9:4a:56:34:02:3b:e6:b4: 83:85:da:2b:3f:6c:9b:56:88:a9:41:86:52:e7:80: 83:70:27:fe:44:c4:77:8a:ea:5d:bd:05:51:7b:ae: 49:73:00:fe:6d:58:9d:94:02:58:ec:e3:5c:29:03: 0a:5e:b7:b8:1a:74:95:10:72:23:7f:d2:f3:dd:1f: 72:b4:a4:21:88:75:9c:31:7b:81:25:a1:22:e8:74: fb:71:76:8b:22:51:9c:6f:5c:38:c8:2b:de:b8:46: 31:fd:ac:9d:95:91:82:74:a5:65:5a:79:3a:37:83: f0:a4:c6:a3:2e:64:11:7d:4d:18:49:96:e2:56:66: 65:90:4a:41:1b:67:5f:2f:c0:44:c6:87:08:6b:63: a2:00:a2:bf:49:14:62:98:ca:10:cf:29:d6:1d:eb: 6d:2a:c2:0a:70:76:04:b4:2a:ff:27:eb:a4:af:3e: 00:63:71:db:83:a6:c4:7e:9e:1c:0e:ce:14:02:5d: 85:6d:ce:66:a7:a9:76:96:0b:eb:8d:ef:49:5b:15: ce:49:3b:ca:c5:81:03:95:ae:cf:f7:bb:58:87:72: 4c:64:e8:8b:d0:b4:42:91:24:7a:d4:dc:4a:61:18: b2:c3:6a:ad:84:be:a1:4d:d8:76:a9:e3:f0:53:6d: a7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:15:60:CB:B6:9C:43:FB:7D:3B:EC:6C:EE:83:D4:C1:59:A5:05:4F X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/27ffe405-af5c-4562-aa96-cff0cf796a1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:6020::/48 Signature Algorithm: sha256WithRSAEncryption 11:ee:b9:a1:ad:f3:44:86:3f:07:0a:e7:69:84:2a:e9:af:fb: b5:85:ee:41:a9:39:99:ff:01:1a:01:b6:96:9a:ff:71:47:e9: 16:86:89:31:35:07:e9:ae:86:5d:1e:0e:6f:af:0b:1a:3a:76: b3:27:97:ac:cd:93:b2:14:18:1d:4e:e2:ea:ac:be:c0:3a:02: 54:88:b2:b1:b4:2d:73:2b:b1:57:68:45:55:27:5a:30:aa:63: 53:be:bb:23:70:a4:e6:b3:75:ff:b9:bf:47:35:20:31:44:47: 23:ca:2d:75:6d:33:4b:f4:3a:0d:fd:cc:15:6f:60:ad:08:77: a5:35:69:33:17:f7:15:fb:a1:62:da:d6:e1:c1:33:45:0a:f6: f9:29:37:06:c9:01:80:23:0d:3e:48:b5:14:1d:e5:4c:aa:d8: 7b:e2:49:0c:84:3a:05:e5:f5:ee:1e:a6:d2:ef:ed:4a:b0:81: 91:69:97:27:2c:0c:36:4a:19:36:ef:6e:1e:43:4c:c5:84:bc: ef:e0:5d:c1:70:45:ef:da:c6:24:97:21:8e:bc:60:02:48:91: 9f:0b:90:e8:79:e4:29:c0:52:4c:e3:76:e3:49:19:14:88:b2: 20:69:a5:2c:53:53:ce:6f:7b:00:2b:c4:01:01:d5:0b:84:19: 30:52:69:f9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUUtm96uO8A3ZD2GxI0GhV9yuYvhMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMzAxMVoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNANzBjNjZiNTBjNmRjMzQyNmZmNTZh Y2Q4MDk3ZjBjZWU1MzAxZmZhNjAxODdmMjE4M2U2ZjZjZmRlZTAzNjBkNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr3nFedI6UpWNAI75rSDhdorP2yb VoipQYZS54CDcCf+RMR3iupdvQVRe65JcwD+bVidlAJY7ONcKQMKXre4GnSVEHIj f9Lz3R9ytKQhiHWcMXuBJaEi6HT7cXaLIlGcb1w4yCveuEYx/aydlZGCdKVlWnk6 N4PwpMajLmQRfU0YSZbiVmZlkEpBG2dfL8BExocIa2OiAKK/SRRimMoQzynWHett KsIKcHYEtCr/J+ukrz4AY3Hbg6bEfp4cDs4UAl2Fbc5mp6l2lgvrje9JWxXOSTvK xYEDla7P97tYh3JMZOiL0LRCkSR61NxKYRiyw2qthL6hTdh2qePwU22nEQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPsVYMu2nEP7fTvsbO6D1MFZpQVPMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI3ZmZlNDA1LWFmNWMtNDU2Mi1hYTk2LWNmZjBjZjc5NmExYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/2AgMA0GCSqGSIb3DQEBCwUAA4IBAQAR7rmhrfNEhj8HCudp hCrpr/u1he5BqTmZ/wEaAbaWmv9xR+kWhokxNQfproZdHg5vrwsaOnazJ5eszZOy FBgdTuLqrL7AOgJUiLKxtC1zK7FXaEVVJ1owqmNTvrsjcKTms3X/ub9HNSAxREcj yi11bTNL9DoN/cwVb2CtCHelNWkzF/cV+6Fi2tbhwTNFCvb5KTcGyQGAIw0+SLUU HeVMqth74kkMhDoF5fXuHqbS7+1KsIGRaZcnLAw2Shk2724eQ0zFhLzv4F3BcEXv 2sYklyGOvGACSJGfC5DoeeQpwFJM43bjSRkUiLIgaaUsU1POb3sAK8QBAdULhBkw Umn5 -----END CERTIFICATE-----Generated at Tue May 12 23:57:48 2026 by rpki-client