$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445e07c8-dbb7-4484-87fd-500b1490bbe7.roa File: 445e07c8-dbb7-4484-87fd-500b1490bbe7.roa (raw, json) Hash identifier: d8dLS0OxzQs1zflqTw6c1aWoEkcj90csdcPMNMsE8+g= Subject key identifier: 1A:02:45:FD:54:41:53:F2:14:A1:6B:60:56:51:6E:FA:83:F3:06:98 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1761CE1D347F6BF76FD2B0C9E6F1C122223C6527 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445e07c8-dbb7-4484-87fd-500b1490bbe7.roa Signing time: Mon 11 May 2026 00:21:32 +0000 ROA not before: Mon 11 May 2026 00:21:32 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:61:ce:1d:34:7f:6b:f7:6f:d2:b0:c9:e6:f1:c1:22:22:3c:65:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:21:32 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=ef9318334a1f00e3909bd7a226f711a71d536e584c473af3e45a02fa1aacd6f3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:88:9b:88:0a:e7:8a:14:ca:5b:43:97:63:39: 3f:dd:a8:86:19:45:8b:42:a0:23:e3:db:0d:6c:1b: ff:38:7a:ae:ca:68:99:3d:e8:e3:ee:6d:c4:fe:60: 18:47:f8:60:62:8a:5a:fc:49:8b:2b:f7:fc:3c:fe: 8b:e9:1b:ad:3b:af:8f:ad:17:75:07:9b:62:fb:aa: 9c:59:ec:10:d5:f6:1d:f1:38:a0:4d:2f:00:a1:e8: 26:c0:5a:60:a1:d6:6a:b2:68:84:24:c3:85:2e:40: 94:8c:01:cd:22:85:9e:a5:20:aa:a1:39:aa:f9:53: cf:04:49:be:ca:8e:f9:c2:73:c4:2e:4e:4e:ab:b3: 7a:f6:9e:67:eb:34:62:60:e3:a4:4e:5f:e0:e2:d1: bf:6f:0a:b6:23:7a:d1:af:1f:e5:f7:66:d8:d6:12: 26:71:03:d3:ad:c4:86:c2:8c:51:e9:cb:57:55:6c: dc:63:11:fa:6f:da:f8:b9:66:69:e2:f7:75:06:f4: c9:03:4c:c0:fd:07:26:05:6a:0a:7b:8f:82:cf:fa: c4:c7:44:4c:e9:bd:e7:9b:5c:f1:1e:97:98:5b:27: 3a:ef:86:33:6e:1d:8e:ea:8e:c7:27:52:4e:0b:9c: d7:46:27:e2:78:5f:68:b8:68:2a:ae:7a:e8:43:ef: 4c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:02:45:FD:54:41:53:F2:14:A1:6B:60:56:51:6E:FA:83:F3:06:98 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445e07c8-dbb7-4484-87fd-500b1490bbe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:28c0::/48 Signature Algorithm: sha256WithRSAEncryption ac:f0:5b:31:bb:31:c0:c3:67:67:a9:aa:ae:f9:72:02:73:1b: b4:f3:f1:81:b0:fe:67:81:2a:62:65:38:d0:63:2a:6b:8f:df: 0d:6d:e3:3e:9a:f1:b0:9f:13:44:c0:ce:da:0e:9e:f3:22:4d: 00:b7:bd:de:f7:d9:5f:d9:6a:6c:aa:c5:f8:7b:13:23:2d:bc: e2:d8:b3:7d:83:f9:30:fb:c6:43:46:e7:9e:9f:94:2f:dc:62: f6:b0:28:5b:39:43:50:38:d6:70:ef:09:58:9e:18:bf:7f:93: b7:1f:fa:34:1d:1a:b5:af:a5:73:d3:7e:90:07:d3:7f:24:76: 2e:d8:35:e1:90:02:7f:72:69:4b:c4:38:d6:c6:47:99:0b:6d: 88:1a:62:37:c0:46:05:bd:5a:98:78:67:10:a7:99:a7:c9:73: ae:cd:49:3a:01:99:f4:a5:c9:1a:b7:1f:54:9a:9a:c8:e3:e2: 36:72:92:bd:bf:d8:bb:ce:5d:21:e4:8a:01:45:c8:c8:36:08: 73:cb:63:75:47:59:c2:67:99:c6:2c:c1:22:ef:01:2a:4a:ea: 73:30:c9:75:1b:3c:36:fa:20:d4:ae:9c:d4:d1:d5:ac:f3:09: 20:e6:f6:ca:22:cd:f8:3e:e8:dd:4e:5f:c2:eb:93:23:b1:9a: 22:a7:2e:07 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUF2HOHTR/a/dv0rDJ5vHBIiI8ZScwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMjEzMloX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAZWY5MzE4MzM0YTFmMDBlMzkwOWJk N2EyMjZmNzExYTcxZDUzNmU1ODRjNDczYWYzZTQ1YTAyZmExYWFjZDZmMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4ibiArnihTKW0OXYzk/3aiGGUWL QqAj49sNbBv/OHquymiZPejj7m3E/mAYR/hgYopa/EmLK/f8PP6L6RutO6+PrRd1 B5ti+6qcWewQ1fYd8TigTS8AoegmwFpgodZqsmiEJMOFLkCUjAHNIoWepSCqoTmq +VPPBEm+yo75wnPELk5Oq7N69p5n6zRiYOOkTl/g4tG/bwq2I3rRrx/l92bY1hIm cQPTrcSGwoxR6ctXVWzcYxH6b9r4uWZp4vd1BvTJA0zA/QcmBWoKe4+Cz/rEx0RM 6b3nm1zxHpeYWyc674Yzbh2O6o7HJ1JOC5zXRifieF9ouGgqrnroQ+9M1wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFBoCRf1UQVPyFKFrYFZRbvqD8waYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NWUwN2M4LWRiYjctNDQ4NC04N2ZkLTUwMGIxNDkwYmJlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/yjAMA0GCSqGSIb3DQEBCwUAA4IBAQCs8FsxuzHAw2dnqaqu +XICcxu08/GBsP5ngSpiZTjQYyprj98NbeM+mvGwnxNEwM7aDp7zIk0At73e99lf 2WpsqsX4exMjLbzi2LN9g/kw+8ZDRueen5Qv3GL2sChbOUNQONZw7wlYnhi/f5O3 H/o0HRq1r6Vz036QB9N/JHYu2DXhkAJ/cmlLxDjWxkeZC22IGmI3wEYFvVqYeGcQ p5mnyXOuzUk6AZn0pckatx9UmprI4+I2cpK9v9i7zl0h5IoBRcjINghzy2N1R1nC Z5nGLMEi7wEqSupzMMl1Gzw2+iDUrpzU0dWs8wkg5vbKIs34PujdTl/C65MjsZoi py4H -----END CERTIFICATE-----Generated at Wed May 13 00:15:14 2026 by rpki-client