$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/54b90195-351e-449b-8720-119c4baa2b80.roa File: 54b90195-351e-449b-8720-119c4baa2b80.roa (raw, json) Hash identifier: RNgg9nDSwevK5pULkmSWs94mwU0PwrRAfQiSPp2rOR4= Subject key identifier: EE:29:51:7B:D4:EA:D2:FF:18:A3:C9:A0:56:BD:65:C3:42:D4:53:BD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 10252E4259D457AC3584774B7F0850658BB82CC5 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/54b90195-351e-449b-8720-119c4baa2b80.roa Signing time: Tue 21 Jul 2026 00:01:15 +0000 ROA not before: Tue 21 Jul 2026 00:01:15 +0000 ROA not after: Mon 19 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf3:70c0::/46 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:25:2e:42:59:d4:57:ac:35:84:77:4b:7f:08:50:65:8b:b8:2c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Jul 21 00:01:15 2026 GMT Not After : Oct 19 23:59:59 2026 GMT Subject: serialNumber=2619bf9408c247475847d1dc52d76f0667f10d7220892cbe6d146d746cdcab3e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:c0:e2:34:7f:7e:64:20:f3:38:6d:87:03: 94:27:c7:fb:d1:0c:f8:a8:6f:19:0d:1a:a3:8b:c3: 95:73:d3:b0:3c:09:79:24:39:fa:87:78:4a:b4:18: dc:06:ba:b8:f7:fb:88:2d:4c:28:74:06:53:5b:9b: 22:a4:75:e0:2e:9f:f1:79:1a:8f:25:51:d1:eb:b7: 9f:81:39:cc:b8:95:c6:50:e0:b2:71:90:3f:97:6d: 1f:88:77:58:d8:13:77:98:9c:81:0f:d6:b4:11:c8: f2:ac:14:13:f3:08:d6:d3:64:5f:4c:5b:3c:a6:19: 57:90:6e:e0:5a:94:f5:1e:b6:a8:ce:b8:5e:8e:6f: 78:3b:7d:54:a4:7c:29:ac:c8:bb:2a:8a:aa:8a:fd: 19:ac:fd:27:4c:bf:84:40:8b:d8:19:f4:19:61:ba: df:31:58:74:e8:a3:99:63:85:c4:4c:88:a7:78:59: c3:80:cf:01:a3:ce:c1:b3:a0:b2:02:c1:39:ff:71: 5a:b8:90:df:a0:b7:45:fc:75:10:d1:d7:05:eb:01: f2:93:b3:c9:eb:67:81:3d:fa:1a:1c:ee:54:ed:72: 86:79:c5:f2:a1:90:2f:94:bb:32:65:2c:de:f2:d6: 7e:f4:16:16:73:1a:5f:bf:7b:d1:cf:b4:8b:9d:87: 21:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:29:51:7B:D4:EA:D2:FF:18:A3:C9:A0:56:BD:65:C3:42:D4:53:BD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/54b90195-351e-449b-8720-119c4baa2b80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf3:70c0::/46 Signature Algorithm: sha256WithRSAEncryption 1b:2b:5c:55:f7:6f:83:62:0a:29:50:92:93:9d:05:23:b8:87: ad:39:05:43:1d:49:27:02:18:86:97:85:d4:1c:dd:2a:10:1c: 46:5b:f0:e0:88:6c:93:0a:fc:1e:89:5c:20:76:0c:87:7b:27: a8:29:43:11:d1:f6:71:84:37:fa:a9:f3:a1:59:e5:16:0f:7e: 74:51:cd:72:d4:4b:fb:1f:31:b7:40:99:30:46:f1:83:b4:1f: 37:7b:2f:0f:72:54:b6:bd:44:d4:b3:2e:e5:c7:35:c6:fd:18: aa:8a:5b:bd:e8:bc:aa:20:31:55:54:ce:74:5c:d8:a9:67:15: fe:fb:b5:9d:dc:c1:2b:25:a5:94:ce:53:91:19:ac:1e:33:ef: 30:0f:8c:fd:1b:a2:e0:81:39:72:b6:16:7a:e2:ab:b8:0e:d1: 14:e7:37:18:f9:84:62:74:d3:5e:90:f4:70:ef:1e:2f:c9:cc: 30:47:41:2f:c4:f4:34:30:b4:79:e1:eb:4b:a4:12:a1:41:82: 34:1d:2e:f5:25:11:53:f6:3d:b8:0d:37:24:2b:63:8b:3c:9e: 8a:23:2e:3b:bd:69:a7:65:52:87:93:ca:3d:0c:71:03:97:02: 96:57:66:a1:b4:c6:15:b0:18:c9:90:62:8c:dd:36:cb:62:e7: 72:84:8e:b0 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUECUuQlnUV6w1hHdLfwhQZYu4LMUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDcyMTAwMDExNVoX DTI2MTAxOTIzNTk1OVowejFJMEcGA1UEBRNAMjYxOWJmOTQwOGMyNDc0NzU4NDdk MWRjNTJkNzZmMDY2N2YxMGQ3MjIwODkyY2JlNmQxNDZkNzQ2Y2RjYWIzZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT3A4jR/fmQg8zhthwOUJ8f70Qz4 qG8ZDRqji8OVc9OwPAl5JDn6h3hKtBjcBrq49/uILUwodAZTW5sipHXgLp/xeRqP JVHR67efgTnMuJXGUOCycZA/l20fiHdY2BN3mJyBD9a0EcjyrBQT8wjW02RfTFs8 phlXkG7gWpT1Hraozrhejm94O31UpHwprMi7Koqqiv0ZrP0nTL+EQIvYGfQZYbrf MVh06KOZY4XETIineFnDgM8Bo87Bs6CyAsE5/3FauJDfoLdF/HUQ0dcF6wHyk7PJ 62eBPfoaHO5U7XKGecXyoZAvlLsyZSze8tZ+9BYWcxpfv3vRz7SLnYchzwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFO4pUXvU6tL/GKPJoFa9ZcNC1FO9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU0YjkwMTk1LTM1MWUtNDQ5Yi04NzIwLTExOWM0YmFhMmI4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcCJAba83DAMA0GCSqGSIb3DQEBCwUAA4IBAQAbK1xV92+DYgopUJKT nQUjuIetOQVDHUknAhiGl4XUHN0qEBxGW/DgiGyTCvweiVwgdgyHeyeoKUMR0fZx hDf6qfOhWeUWD350Uc1y1Ev7HzG3QJkwRvGDtB83ey8PclS2vUTUsy7lxzXG/Riq ilu96LyqIDFVVM50XNipZxX++7Wd3MErJaWUzlORGaweM+8wD4z9G6LggTlythZ6 4qu4DtEU5zcY+YRidNNekPRw7x4vycwwR0EvxPQ0MLR54etLpBKhQYI0HS71JRFT 9j24DTckK2OLPJ6KIy47vWmnZVKHk8o9DHEDlwKWV2ahtMYVsBjJkGKM3TbLYudy hI6w -----END CERTIFICATE-----Generated at Fri Jul 24 01:18:10 2026 by rpki-client