$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa File: 5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa (raw, json) Hash identifier: sBKtnCo7IOVt8+qyoJSwon5qGHZe8QIUy4C7QDz8q4o= Subject key identifier: 43:EC:94:91:59:60:C3:5D:A3:4D:59:2F:3C:88:2E:28:11:CF:6F:F3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3043F9DFCD5F7ACCED359308832D3131A37553DB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa Signing time: Tue 05 May 2026 00:00:09 +0000 ROA not before: Tue 05 May 2026 00:00:09 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:dab9:b000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:43:f9:df:cd:5f:7a:cc:ed:35:93:08:83:2d:31:31:a3:75:53:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 5 00:00:09 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=34bc7aa6cb439703d43e3c643d23dfc988916c6b41889d0602ca94651b2a7e16, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:3f:1c:79:9d:c3:60:2c:01:fb:fd:31:65: 9b:7a:7b:01:54:82:a8:0d:93:c1:cd:aa:9b:a5:e3: 6c:a6:83:74:df:6d:3d:c3:70:3f:06:8f:66:5b:e6: cc:9f:48:87:6f:83:66:8b:7e:ac:69:59:a8:d6:51: d5:cd:1c:92:1f:c6:d4:8c:61:48:39:ac:6b:75:ef: 8f:de:d5:a1:48:6c:13:e6:69:fd:45:02:6c:0d:63: 41:9e:3d:42:e1:bd:c8:05:9c:ea:e1:ba:ae:eb:e8: 3f:0c:12:f5:15:6c:ff:b3:2b:14:47:d3:b3:af:92: b6:dc:b4:3e:a0:54:11:f9:0a:e3:09:ee:6d:5d:08: 1f:2a:2c:ed:33:4c:4d:cb:80:d5:45:bd:a9:56:47: 55:e5:95:09:05:e1:a2:3f:b8:46:ae:c1:71:41:71: e4:94:8f:d7:4a:12:f2:ba:d2:1a:17:61:a7:d7:df: 45:47:bf:e1:75:7a:a4:08:37:68:7c:9e:50:17:97: 1b:f3:75:7e:6f:44:64:28:73:50:08:69:3f:67:5f: 2c:19:76:ee:ac:4c:28:a5:47:49:d1:0f:5d:f7:1c: 16:d6:11:93:4a:4f:b5:40:d2:d7:3a:a3:62:bd:e7: 37:f4:d7:25:ab:a7:13:b2:f6:55:fb:93:1d:fa:cf: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EC:94:91:59:60:C3:5D:A3:4D:59:2F:3C:88:2E:28:11:CF:6F:F3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5421f030-bd8e-457e-b9e5-ffbc49afebe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:b000::/40 Signature Algorithm: sha256WithRSAEncryption 08:81:f6:c0:68:1b:4d:da:74:73:08:69:59:7f:8c:9b:60:e1: 93:20:b4:37:74:0a:ff:51:1d:92:18:a3:18:1a:43:8a:bc:3a: 9a:a7:fc:00:cc:fa:f1:35:d8:89:6e:42:e3:df:97:e4:90:83: c5:87:ff:3a:89:70:f8:ca:2b:58:c5:17:65:d2:61:b9:12:0d: 67:9c:83:80:52:f5:2c:af:a7:83:75:bc:c9:7c:c7:e0:d6:e7: 32:86:2f:13:4c:46:37:df:8f:ae:32:63:02:99:13:3b:6a:35: 71:a3:d7:17:7f:1d:bb:c7:8a:c1:3d:d5:20:3f:6e:e5:a2:ca: 1b:6f:c7:bf:ce:b9:5d:53:c2:62:4a:e1:92:2a:fc:18:c6:41: 00:b2:81:33:f4:11:a0:82:38:79:59:0a:da:35:01:40:4a:80: e9:5d:51:1d:05:a3:8c:e0:c8:20:4a:1a:27:54:d5:7f:eb:2b: 2f:0e:41:72:ad:c4:f5:39:5d:b0:ef:ce:81:13:28:70:02:46: 0d:b0:51:2b:e5:9c:0f:d1:e4:6a:95:3c:37:7e:c4:bf:c1:4c: c4:7f:68:7e:0c:a8:2d:44:ce:52:7e:37:2d:9a:c2:7d:37:16: 27:85:99:52:9f:7f:33:36:22:66:15:49:0e:9b:72:25:22:46: 8b:db:54:c9 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMEP5381fesztNZMIgy0xMaN1U9swDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNTAwMDAwOVoX DTI2MDgwMzIzNTk1OVowejFJMEcGA1UEBRNAMzRiYzdhYTZjYjQzOTcwM2Q0M2Uz YzY0M2QyM2RmYzk4ODkxNmM2YjQxODg5ZDA2MDJjYTk0NjUxYjJhN2UxNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlI/HHmdw2AsAfv9MWWbensBVIKo DZPBzaqbpeNspoN03209w3A/Bo9mW+bMn0iHb4Nmi36saVmo1lHVzRySH8bUjGFI Oaxrde+P3tWhSGwT5mn9RQJsDWNBnj1C4b3IBZzq4bqu6+g/DBL1FWz/sysUR9Oz r5K23LQ+oFQR+QrjCe5tXQgfKiztM0xNy4DVRb2pVkdV5ZUJBeGiP7hGrsFxQXHk lI/XShLyutIaF2Gn199FR7/hdXqkCDdofJ5QF5cb83V+b0RkKHNQCGk/Z18sGXbu rEwopUdJ0Q9d9xwW1hGTSk+1QNLXOqNivec39Nclq6cTsvZV+5Md+s/2LwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFEPslJFZYMNdo01ZLzyILigRz2/zMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0MjFmMDMwLWJkOGUtNDU3ZS1iOWU1LWZmYmM0OWFmZWJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaubAwDQYJKoZIhvcNAQELBQADggEBAAiB9sBoG03adHMIaVl/ jJtg4ZMgtDd0Cv9RHZIYoxgaQ4q8Opqn/ADM+vE12IluQuPfl+SQg8WH/zqJcPjK K1jFF2XSYbkSDWecg4BS9Syvp4N1vMl8x+DW5zKGLxNMRjffj64yYwKZEztqNXGj 1xd/HbvHisE91SA/buWiyhtvx7/OuV1TwmJK4ZIq/BjGQQCygTP0EaCCOHlZCto1 AUBKgOldUR0Fo4zgyCBKGidU1X/rKy8OQXKtxPU5XbDvzoETKHACRg2wUSvlnA/R 5GqVPDd+xL/BTMR/aH4MqC1EzlJ+Ny2awn03FieFmVKffzM2ImYVSQ6bciUiRovb VMk= -----END CERTIFICATE-----Generated at Tue May 12 23:09:11 2026 by rpki-client