$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31394a5a-554b-47ca-bb81-76d568c901d8.roa File: 31394a5a-554b-47ca-bb81-76d568c901d8.roa (raw, json) Hash identifier: 25/7BCcTCo1opx3s3K+kBtyJOGeeYTopp+jmgNeknBE= Subject key identifier: 20:6D:AF:8D:8D:CE:69:D8:1F:FF:08:42:0A:4A:A9:5F:8A:12:23:F9 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 44028AEB11C43405FFCF2F141C484F462F131C04 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31394a5a-554b-47ca-bb81-76d568c901d8.roa Signing time: Mon 11 May 2026 00:30:14 +0000 ROA not before: Mon 11 May 2026 00:30:14 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:c8c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:02:8a:eb:11:c4:34:05:ff:cf:2f:14:1c:48:4f:46:2f:13:1c:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:30:14 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=f3f1c84335e1cca021f1ff731245cfb0b7dc1f5b0a7a93c184d205077760ab52, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:27:dd:ef:92:54:c4:56:4a:16:6b:9b:c0:b2: df:fa:71:a7:db:cd:80:68:92:b2:9d:9c:98:8e:3d: 9b:d8:ec:86:cf:d8:34:73:dd:95:37:6f:e6:68:73: 49:bd:7d:0d:59:ad:d8:f7:8d:59:c8:45:7d:74:7a: fd:18:39:64:6a:e2:10:58:45:40:a5:83:86:c5:ba: 9d:d5:fc:6f:7f:3f:28:fa:49:a0:40:5e:72:2d:19: 05:a0:00:37:03:b8:4c:46:53:8d:6b:59:79:27:2c: 2d:01:62:92:23:4d:1e:67:01:bf:83:80:79:2f:af: 6d:a3:45:65:3e:ec:ee:4f:07:f0:9b:65:13:cd:26: 6b:61:3f:03:bf:8f:53:2d:1f:c1:5e:c9:21:e8:d7: 8b:48:1f:c3:ca:45:34:cf:67:af:d9:92:61:4b:27: 32:3d:1d:dc:55:2f:d9:ad:dc:9a:f9:d7:8a:03:d3: e1:a7:f2:5b:25:22:bf:8f:7f:4c:46:b8:a7:51:cd: 05:b7:c1:fc:6d:e5:65:2d:a6:92:eb:b7:5c:b8:92: da:6e:5d:16:76:79:13:d6:49:82:c8:b1:9c:a9:32: 08:a1:fb:8c:16:53:af:58:a9:40:91:85:84:7c:47: 28:c2:06:c3:33:16:a2:e8:a0:ed:95:1c:be:c7:ee: 39:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:6D:AF:8D:8D:CE:69:D8:1F:FF:08:42:0A:4A:A9:5F:8A:12:23:F9 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/31394a5a-554b-47ca-bb81-76d568c901d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:c8c0::/48 Signature Algorithm: sha256WithRSAEncryption 29:29:62:65:65:70:4d:52:07:69:5e:56:f8:a4:cd:4b:62:07: f0:48:ca:59:df:3a:b0:2e:ac:2c:94:6c:d4:09:d8:ea:8c:8b: 74:82:67:9e:6a:af:f1:a1:8f:1e:0f:6a:32:79:8a:ca:9c:ca: e6:34:9c:cf:b6:20:a6:8e:de:29:35:42:1f:4d:36:4b:3d:4e: 21:7a:55:b7:54:37:ed:ad:cf:a2:19:83:3a:dd:cf:54:81:d5: d4:a3:78:55:ae:b1:46:f0:37:f1:34:96:da:b7:6d:81:c2:76: 66:0c:8f:63:ad:29:52:74:57:c9:93:78:f7:57:f0:9a:0b:d4: 65:8a:f9:7f:ce:c2:b2:3e:d6:d8:2a:2b:65:82:c6:89:6c:a5: de:5a:a8:54:3f:d8:bd:c8:39:f1:20:f5:0b:c2:91:50:10:d3: 5f:2b:a2:d2:9f:e8:00:2f:2d:88:66:60:a5:0b:ca:16:2e:07: fd:a4:8b:4b:06:d8:25:6c:73:5b:61:09:de:60:71:98:9d:99: 5e:6d:f1:ff:15:c6:04:12:f6:fc:94:ed:fa:09:de:03:d8:22: c4:8f:4b:5d:26:c2:58:c1:ea:3a:9d:c1:19:e8:50:e1:cc:99: bb:16:99:2d:f1:f3:be:54:32:66:4c:34:70:3c:52:16:9d:70: 92:8c:d7:53 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIURAKK6xHENAX/zy8UHEhPRi8THAQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMzAxNFoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAZjNmMWM4NDMzNWUxY2NhMDIxZjFm ZjczMTI0NWNmYjBiN2RjMWY1YjBhN2E5M2MxODRkMjA1MDc3NzYwYWI1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCfd75JUxFZKFmubwLLf+nGn282A aJKynZyYjj2b2OyGz9g0c92VN2/maHNJvX0NWa3Y941ZyEV9dHr9GDlkauIQWEVA pYOGxbqd1fxvfz8o+kmgQF5yLRkFoAA3A7hMRlONa1l5JywtAWKSI00eZwG/g4B5 L69to0VlPuzuTwfwm2UTzSZrYT8Dv49TLR/BXskh6NeLSB/DykU0z2ev2ZJhSycy PR3cVS/Zrdya+deKA9Php/JbJSK/j39MRrinUc0Ft8H8beVlLaaS67dcuJLabl0W dnkT1kmCyLGcqTIIofuMFlOvWKlAkYWEfEcowgbDMxai6KDtlRy+x+45wwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFCBtr42NzmnYH/8IQgpKqV+KEiP5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzMxMzk0YTVhLTU1NGItNDdjYS1iYjgxLTc2ZDU2OGM5MDFkOC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYcjAMA0GCSqGSIb3DQEBCwUAA4IBAQApKWJlZXBNUgdpXlb4 pM1LYgfwSMpZ3zqwLqwslGzUCdjqjIt0gmeeaq/xoY8eD2oyeYrKnMrmNJzPtiCm jt4pNUIfTTZLPU4helW3VDftrc+iGYM63c9UgdXUo3hVrrFG8DfxNJbat22BwnZm DI9jrSlSdFfJk3j3V/CaC9Rlivl/zsKyPtbYKitlgsaJbKXeWqhUP9i9yDnxIPUL wpFQENNfK6LSn+gALy2IZmClC8oWLgf9pItLBtglbHNbYQneYHGYnZlebfH/FcYE Evb8lO36Cd4D2CLEj0tdJsJYweo6ncEZ6FDhzJm7Fpkt8fO+VDJmTDRwPFIWnXCS jNdT -----END CERTIFICATE-----Generated at Tue May 12 23:42:58 2026 by rpki-client