$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa File: 43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa (raw, json) Hash identifier: xtyOOfMvVP6sYSdOrHBfBJdlq+ksJuGqWebwp/cYKqI= Subject key identifier: 79:95:CF:7F:04:2E:F3:DE:0F:D7:B8:F4:A8:50:1A:DC:C6:32:9E:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 217827ED47FF396C522E38383EE15592C50235EB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa Signing time: Tue 12 May 2026 00:00:19 +0000 ROA not before: Tue 12 May 2026 00:00:19 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:a800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:78:27:ed:47:ff:39:6c:52:2e:38:38:3e:e1:55:92:c5:02:35:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:00:19 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=dac3303985f6dc8c6f313b4a44077e53a63885151182c0ea12bd671b95ed1514, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:60:1d:6e:f7:85:7f:fb:87:4d:9c:40:8c:65: 1b:2a:b2:e1:39:23:bf:1a:45:32:18:4e:d2:be:c1: e1:fa:a7:48:e5:59:6d:b0:aa:81:3d:91:41:02:ca: c3:96:88:5d:b9:10:ae:fb:65:70:87:67:91:cf:94: 03:df:c2:54:e8:4e:5f:40:9e:4c:cf:57:67:72:0f: de:44:32:d7:26:d4:05:e0:7d:e8:c0:cf:f7:ce:a2: f3:72:6d:eb:8b:ea:87:14:87:6e:ed:88:87:42:65: af:02:9f:00:a1:66:0b:07:2b:8a:17:a2:1d:91:fa: f2:87:3b:8d:7e:e8:2e:22:7b:7e:b9:6c:e5:9c:8b: 4c:15:f6:77:b5:45:8f:69:c8:92:98:46:bd:07:c7: 2a:ce:5a:98:4a:43:8b:97:fa:b4:42:93:b1:60:ff: ef:ca:49:71:e2:d0:64:aa:3b:e7:e0:68:77:5a:7d: 70:fe:97:88:89:c8:a5:17:6e:02:c1:e1:6e:0e:f0: ab:be:53:f3:c7:42:a7:02:be:a3:42:6e:00:cd:e2: a6:a9:9f:a0:93:81:fd:4c:1b:fa:ee:be:2a:c3:66: 45:52:91:02:27:f6:da:df:80:fa:a3:49:df:68:2c: 6f:6e:e4:1e:b2:77:9a:ac:53:b3:65:22:71:eb:ae: 5a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:95:CF:7F:04:2E:F3:DE:0F:D7:B8:F4:A8:50:1A:DC:C6:32:9E:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/43a9fb43-6cc8-49fc-93f8-70c99496c67a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:a800::/40 Signature Algorithm: sha256WithRSAEncryption 22:2c:63:25:a6:13:0d:8b:9f:97:cf:7f:8d:d1:0a:38:3b:53: 7e:e2:9b:0c:3e:26:46:21:57:fd:51:9a:f8:f8:f0:95:f6:b1: 29:d9:8b:c3:a4:3f:61:24:c7:c5:8f:5d:b2:ed:dc:bc:d4:ec: 78:37:fd:bf:a8:ff:ce:2f:a9:ed:41:5f:87:34:b7:e6:ea:2e: 7f:22:e7:e9:60:37:7b:95:fa:04:fb:f0:85:50:07:b8:8a:26: 2e:26:94:0a:66:21:e0:52:d3:1a:37:68:f7:59:cf:75:a6:2d: f3:c4:e9:12:aa:1b:4d:d9:4a:e7:92:b8:a6:2e:28:80:70:7e: f9:1c:4f:48:8f:7e:05:95:e9:27:23:b4:8c:32:2d:6b:e0:6a: 20:b3:04:d1:04:3d:4a:e3:4a:2e:ce:b5:a8:ec:54:89:c9:f3: d3:68:53:be:17:84:21:0b:4c:4d:fd:d2:58:30:ec:be:2d:8f: ff:0a:69:7f:6a:44:22:50:7e:82:ef:8e:30:61:32:8d:d0:23: 97:dc:93:75:63:a2:10:1f:0b:8f:bf:d5:39:8e:89:3f:5f:61: 7a:7d:a3:b9:2a:a3:82:b9:1e:ae:08:7f:28:f4:8a:70:93:2d: 41:77:cd:a7:ce:41:72:90:b4:9a:11:78:b4:e1:ae:46:09:77: e4:31:90:a9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUIXgn7Uf/OWxSLjg4PuFVksUCNeswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDAxOVoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAZGFjMzMwMzk4NWY2ZGM4YzZmMzEz YjRhNDQwNzdlNTNhNjM4ODUxNTExODJjMGVhMTJiZDY3MWI5NWVkMTUxNDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmAdbveFf/uHTZxAjGUbKrLhOSO/ GkUyGE7SvsHh+qdI5VltsKqBPZFBAsrDlohduRCu+2Vwh2eRz5QD38JU6E5fQJ5M z1dncg/eRDLXJtQF4H3owM/3zqLzcm3ri+qHFIdu7YiHQmWvAp8AoWYLByuKF6Id kfryhzuNfuguInt+uWzlnItMFfZ3tUWPaciSmEa9B8cqzlqYSkOLl/q0QpOxYP/v yklx4tBkqjvn4Gh3Wn1w/peIicilF24CweFuDvCrvlPzx0KnAr6jQm4AzeKmqZ+g k4H9TBv67r4qw2ZFUpECJ/ba34D6o0nfaCxvbuQesnearFOzZSJx665aRQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHmVz38ELvPeD9e49KhQGtzGMp5SMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQzYTlmYjQzLTZjYzgtNDlmYy05M2Y4LTcwYzk5NDk2YzY3YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaAKgwDQYJKoZIhvcNAQELBQADggEBACIsYyWmEw2Ln5fPf43R Cjg7U37imww+JkYhV/1Rmvj48JX2sSnZi8OkP2Ekx8WPXbLt3LzU7Hg3/b+o/84v qe1BX4c0t+bqLn8i5+lgN3uV+gT78IVQB7iKJi4mlApmIeBS0xo3aPdZz3WmLfPE 6RKqG03ZSueSuKYuKIBwfvkcT0iPfgWV6ScjtIwyLWvgaiCzBNEEPUrjSi7Otajs VInJ89NoU74XhCELTE390lgw7L4tj/8KaX9qRCJQfoLvjjBhMo3QI5fck3VjohAf C4+/1TmOiT9fYXp9o7kqo4K5Hq4Ifyj0inCTLUF3zafOQXKQtJoReLThrkYJd+Qx kKk= -----END CERTIFICATE-----Generated at Tue May 12 23:42:49 2026 by rpki-client