$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa File: 55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa (raw, json) Hash identifier: eZiJct4XjBdVIMJXUATobe//n2asm2QJydz9/h5VBo8= Subject key identifier: EB:FF:2A:61:4F:A0:5F:2C:7C:05:3A:63:F1:56:DF:F6:64:35:0B:7E Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7D5A37955CC77ECF55DC21ABD22A543031095483 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa Signing time: Mon 11 May 2026 00:10:23 +0000 ROA not before: Mon 11 May 2026 00:10:23 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:4040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5a:37:95:5c:c7:7e:cf:55:dc:21:ab:d2:2a:54:30:31:09:54:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:10:23 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=a31af8e8ff5d19180177f1a6c57f88e275ee898fad3e46c1b72c5f5aba85628a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:58:dc:a6:7c:38:52:53:57:09:07:8a:46:97: 36:95:89:ab:41:1a:c7:a0:ac:78:0b:10:1e:9a:55: e3:e3:2d:c0:77:28:33:09:5a:f3:a7:4d:b5:1c:e7: 94:65:74:0c:c0:86:fa:98:30:43:3e:85:2b:b2:a9: ed:d9:1b:42:ec:3a:53:36:72:5a:77:07:ef:56:ba: f7:d5:53:66:7b:2a:78:10:3f:bb:e7:f8:70:41:52: 0c:2f:84:40:27:cc:c1:ae:76:f2:76:96:60:05:31: 21:52:4b:8f:8e:a0:b6:00:23:b0:15:50:63:06:38: 6d:b1:8c:14:c2:94:82:15:12:cc:37:22:ce:76:8d: 50:63:7f:10:45:e1:c0:21:e3:35:37:74:4f:b2:dc: c7:fb:a2:59:b5:e5:ec:36:4e:cb:52:c1:e4:d9:71: d7:7f:ab:9b:d8:0b:66:d1:d2:04:24:7d:aa:1e:e1: 7b:61:6e:c8:1f:b7:b2:37:4a:39:ba:03:5e:03:25: 74:e9:40:55:07:8a:6a:a1:77:dc:f1:94:cf:d8:37: b5:dd:18:10:f4:c8:4b:8e:33:60:ee:53:a3:48:30: 8c:50:5d:7e:2d:86:58:5b:28:3b:41:b2:4e:a1:9e: e2:e9:58:3e:7a:b7:51:93:37:74:bf:a2:bb:c6:0e: c0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FF:2A:61:4F:A0:5F:2C:7C:05:3A:63:F1:56:DF:F6:64:35:0B:7E X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55168c3f-59f5-4c4b-bf1f-3d712c6a85cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:4040::/48 Signature Algorithm: sha256WithRSAEncryption 5b:17:00:a8:a3:da:c0:c4:6f:bc:5e:ac:e1:af:4b:4a:68:5c: db:13:de:e8:84:6e:a3:fa:8e:a4:51:36:be:d7:a5:be:ba:77: 68:f7:7b:ff:a8:ee:1c:c6:c4:dc:c6:36:82:4e:16:e1:2b:25: 4a:7f:ca:38:82:5e:15:38:68:7c:01:a6:bd:5f:e6:45:74:1d: 44:50:bd:14:4c:6f:f8:5b:7b:6a:e1:44:e6:d5:2b:3b:51:2f: d6:d5:e7:5b:65:c7:9c:40:73:d2:0d:fb:e1:0c:3c:c9:7c:97: 33:69:53:04:83:73:86:97:f8:36:a0:92:d0:34:20:49:8b:90: d7:c7:f8:7c:42:f7:32:db:1a:2b:0d:c2:43:e6:1b:49:2b:f5: 88:a3:cf:86:5f:21:71:29:73:13:21:60:e8:de:fb:45:1f:11: 0a:b1:48:f6:93:f3:ff:e7:11:02:a8:07:11:fa:56:e0:6d:d1: 5d:2d:04:af:96:42:ed:4c:0f:69:56:9a:8a:ed:16:40:1e:16: 10:e3:c6:7d:89:bd:c7:86:c4:57:f3:91:9e:09:45:58:20:02: 7b:57:43:52:bd:62:7f:d1:36:5f:7a:fb:b8:cb:08:87:28:f6: 8e:f0:28:01:ab:e0:75:a5:91:e4:13:a8:3e:93:11:6d:d7:fe: 9d:a1:af:57 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUfVo3lVzHfs9V3CGr0ipUMDEJVIMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMTAyM1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAYTMxYWY4ZThmZjVkMTkxODAxNzdm MWE2YzU3Zjg4ZTI3NWVlODk4ZmFkM2U0NmMxYjcyYzVmNWFiYTg1NjI4YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvljcpnw4UlNXCQeKRpc2lYmrQRrH oKx4CxAemlXj4y3AdygzCVrzp021HOeUZXQMwIb6mDBDPoUrsqnt2RtC7DpTNnJa dwfvVrr31VNmeyp4ED+75/hwQVIML4RAJ8zBrnbydpZgBTEhUkuPjqC2ACOwFVBj BjhtsYwUwpSCFRLMNyLOdo1QY38QReHAIeM1N3RPstzH+6JZteXsNk7LUsHk2XHX f6ub2Atm0dIEJH2qHuF7YW7IH7eyN0o5ugNeAyV06UBVB4pqoXfc8ZTP2De13RgQ 9MhLjjNg7lOjSDCMUF1+LYZYWyg7QbJOoZ7i6Vg+erdRkzd0v6K7xg7A7QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOv/KmFPoF8sfAU6Y/FW3/ZkNQt+MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1MTY4YzNmLTU5ZjUtNGM0Yi1iZjFmLTNkNzEyYzZhODVjYy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8kBAMA0GCSqGSIb3DQEBCwUAA4IBAQBbFwCoo9rAxG+8Xqzh r0tKaFzbE97ohG6j+o6kUTa+16W+undo93v/qO4cxsTcxjaCThbhKyVKf8o4gl4V OGh8Aaa9X+ZFdB1EUL0UTG/4W3tq4UTm1Ss7US/W1edbZcecQHPSDfvhDDzJfJcz aVMEg3OGl/g2oJLQNCBJi5DXx/h8Qvcy2xorDcJD5htJK/WIo8+GXyFxKXMTIWDo 3vtFHxEKsUj2k/P/5xECqAcR+lbgbdFdLQSvlkLtTA9pVpqK7RZAHhYQ48Z9ib3H hsRX85GeCUVYIAJ7V0NSvWJ/0TZfevu4ywiHKPaO8CgBq+B1pZHkE6g+kxFt1/6d oa9X -----END CERTIFICATE-----Generated at Tue May 12 23:56:57 2026 by rpki-client