$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4070787c-7920-4341-afdd-98830283493b.roa File: 4070787c-7920-4341-afdd-98830283493b.roa (raw, json) Hash identifier: Q1Ifo3avQkhQdDWMxAzbT7XPgYpAxvvFDe/9cMyzeMc= Subject key identifier: 05:A4:B4:22:D5:28:DC:8E:30:52:65:E0:5A:FB:C2:70:C3:24:79:EB Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 41FE631A024FB2A9DB4D886793C70E3EA4B8938A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4070787c-7920-4341-afdd-98830283493b.roa Signing time: Mon 11 May 2026 00:10:10 +0000 ROA not before: Mon 11 May 2026 00:10:10 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:80c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fe:63:1a:02:4f:b2:a9:db:4d:88:67:93:c7:0e:3e:a4:b8:93:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:10:10 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=6516f278b9d6e338ebea0c37aa2ea96d4864623a7971ec855241e609a906948c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4c:1b:4b:be:08:7c:e2:4f:fa:79:69:5b:d4: ab:b9:fa:c6:c4:17:5a:7c:1d:b1:b9:34:46:4c:5e: c7:88:c5:ec:5c:c8:75:87:f9:ca:b9:18:7c:ad:2b: 70:34:21:a0:43:a9:5a:27:0a:fb:61:8b:cf:99:85: e5:a0:1b:1b:b9:c7:47:85:6a:dc:9e:a0:62:43:e0: b2:8b:11:b2:d1:23:c8:df:2f:f8:38:91:de:2f:dd: 54:2a:92:b6:1c:11:ec:9f:95:81:40:06:eb:37:32: 51:a6:44:8f:0e:8a:25:db:15:6b:17:8d:62:a2:2a: e0:2a:21:9a:a2:a3:25:2c:a6:60:cb:6b:52:e7:9d: 99:1f:4a:44:82:53:78:1b:32:5e:92:7f:07:64:c6: c2:42:d0:68:04:3e:f6:ed:16:e8:ad:ae:93:0f:70: 8d:fe:cd:d4:54:2d:f3:27:17:fb:e3:1d:1a:63:61: d7:0c:f5:d9:33:07:96:b4:0d:f3:57:f8:6d:38:f2: a7:1c:2e:af:60:ec:da:44:e5:f2:dc:88:81:56:08: 5f:d6:d5:64:b7:c1:45:20:a6:15:80:1a:5c:ed:f3: a5:94:67:b1:b9:3f:b3:3d:97:ff:56:e5:23:d4:43: e7:e6:13:8b:9d:5a:36:4e:a3:22:c1:7d:1c:3f:51: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A4:B4:22:D5:28:DC:8E:30:52:65:E0:5A:FB:C2:70:C3:24:79:EB X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4070787c-7920-4341-afdd-98830283493b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:80c0::/48 Signature Algorithm: sha256WithRSAEncryption 95:49:30:d0:c0:70:4d:fc:c7:6d:5d:41:81:4d:fc:6b:e2:98: 59:e3:1a:f6:51:f1:41:02:2d:a8:4b:2d:53:6f:08:11:51:b8: ed:e3:72:4f:54:f1:5b:f9:b8:fc:92:ee:68:29:6b:78:ec:ae: 32:6e:2d:96:b9:82:dc:e9:37:a7:b6:95:45:28:f3:1f:21:17: 85:d2:16:08:08:0a:14:52:aa:10:1f:d8:01:54:61:eb:b4:bc: 11:9b:88:6b:64:e0:c1:6a:fb:c0:ff:a5:4c:f3:a0:4f:1c:f4: df:11:2a:34:9b:1f:6d:85:3c:d3:1a:75:6f:c0:32:d6:55:22: 35:8d:f8:fe:d7:65:c9:82:10:98:ea:e5:cb:5c:d4:42:9d:06: ec:71:ed:61:f6:37:3e:f6:16:51:87:5b:3c:86:d7:28:a6:a9: f5:84:4f:6f:66:19:9d:9b:0a:be:f6:da:d4:62:11:87:01:57: 48:ee:c1:43:8c:6b:fe:1e:91:2c:31:16:a9:7b:8d:88:81:f8: 2a:79:df:b2:d0:89:11:f4:78:9e:64:1c:51:ed:2d:46:2b:6a: 07:87:b3:5a:77:73:e4:ca:48:ee:cb:1f:2b:35:70:1e:8c:2c: 29:32:b7:e8:e3:d7:ee:84:34:99:b1:b2:2d:77:41:3f:01:16: 82:83:de:e1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUQf5jGgJPsqnbTYhnk8cOPqS4k4owDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMTAxMFoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNANjUxNmYyNzhiOWQ2ZTMzOGViZWEw YzM3YWEyZWE5NmQ0ODY0NjIzYTc5NzFlYzg1NTI0MWU2MDlhOTA2OTQ4YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkwbS74IfOJP+nlpW9SrufrGxBda fB2xuTRGTF7HiMXsXMh1h/nKuRh8rStwNCGgQ6laJwr7YYvPmYXloBsbucdHhWrc nqBiQ+CyixGy0SPI3y/4OJHeL91UKpK2HBHsn5WBQAbrNzJRpkSPDool2xVrF41i oirgKiGaoqMlLKZgy2tS552ZH0pEglN4GzJekn8HZMbCQtBoBD727Rbora6TD3CN /s3UVC3zJxf74x0aY2HXDPXZMweWtA3zV/htOPKnHC6vYOzaROXy3IiBVghf1tVk t8FFIKYVgBpc7fOllGexuT+zPZf/VuUj1EPn5hOLnVo2TqMiwX0cP1HT5wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAWktCLVKNyOMFJl4Fr7wnDDJHnrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQwNzA3ODdjLTc5MjAtNDM0MS1hZmRkLTk4ODMwMjgzNDkzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4DAMA0GCSqGSIb3DQEBCwUAA4IBAQCVSTDQwHBN/MdtXUGB Tfxr4phZ4xr2UfFBAi2oSy1TbwgRUbjt43JPVPFb+bj8ku5oKWt47K4ybi2WuYLc 6TentpVFKPMfIReF0hYICAoUUqoQH9gBVGHrtLwRm4hrZODBavvA/6VM86BPHPTf ESo0mx9thTzTGnVvwDLWVSI1jfj+12XJghCY6uXLXNRCnQbsce1h9jc+9hZRh1s8 htcopqn1hE9vZhmdmwq+9trUYhGHAVdI7sFDjGv+HpEsMRape42Igfgqed+y0IkR 9HieZBxR7S1GK2oHh7Nad3Pkykjuyx8rNXAejCwpMrfo49fuhDSZsbItd0E/ARaC g97h -----END CERTIFICATE-----Generated at Wed May 13 00:46:13 2026 by rpki-client