$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa File: 5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa (raw, json) Hash identifier: qWk/7rqGNcvKjrZBvYmUQEoKnD6phHRTHq6KmW2jUY0= Subject key identifier: 01:E3:5B:08:23:04:C1:CB:5E:E5:0D:1F:79:48:5F:37:2E:FE:BF:D3 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3EF30037A8DE339C6C2FDC5A9AF752B9097F30F3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa Signing time: Sat 02 May 2026 00:20:39 +0000 ROA not before: Sat 02 May 2026 00:20:39 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f3:00:37:a8:de:33:9c:6c:2f:dc:5a:9a:f7:52:b9:09:7f:30:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:20:39 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=94a4cb7cf14085a81df120eb1a006f38989c91ea2ea2eaa2e8d6abf4a145f00b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:3a:af:84:d7:27:c5:2f:4e:a6:a6:eb:74:67: aa:ed:3d:e5:c7:4e:75:75:10:d9:f8:af:6a:a3:38: e4:00:50:8d:d8:f6:52:d6:1e:89:bb:fa:6f:95:62: 29:3c:de:d6:5a:8e:8b:82:58:83:f6:de:99:24:10: d4:cc:64:f6:0f:24:06:da:c5:87:83:5a:d2:5b:27: 00:94:04:08:76:1a:f5:e8:36:8f:42:27:98:db:23: 87:9e:e5:f7:c1:40:e8:ae:2f:bd:03:88:58:14:4f: 84:b5:b1:a9:e8:70:06:c3:e1:72:03:ef:39:6d:16: f0:41:65:cc:51:f2:70:2f:bc:a2:d5:5a:94:0d:7b: d5:8c:31:d1:19:43:56:bd:8c:6e:1b:e2:53:77:55: 7c:d7:93:61:ac:80:f4:01:98:d7:05:76:67:b0:c7: f2:95:e3:6a:88:87:5f:12:04:4c:b4:6e:93:3b:c0: 06:65:58:f9:e9:94:e5:1f:3f:c3:b9:bf:0c:98:71: 8e:40:dc:c2:8d:4d:08:ca:6f:d5:21:11:ab:be:43: 13:33:3f:e4:82:4b:33:45:9f:30:ed:51:ce:d9:e4: 71:c9:e8:cd:36:4a:12:ab:6f:ad:ac:8e:8f:08:b1: 69:81:c4:a8:f8:6e:16:36:16:4c:13:a2:f2:fe:93: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:E3:5B:08:23:04:C1:CB:5E:E5:0D:1F:79:48:5F:37:2E:FE:BF:D3 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5de23e6b-f89f-4fb1-9780-ceb677a541e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:93:54:eb:ef:d1:52:05:77:47:8b:3b:e3:66:13:e1:1e:30: af:37:bf:e1:27:73:89:a7:db:3e:3f:14:1a:4e:8f:2b:88:e4: 64:1e:ca:8e:c3:fe:32:8e:e9:28:58:9f:c5:7c:9e:d1:dd:67: 99:14:99:94:0e:a3:16:3d:55:19:d5:79:b9:6c:81:a2:fc:4b: 67:24:d6:8f:e0:99:bb:ab:27:84:3f:fb:cf:1a:c7:45:4e:33: 25:00:20:db:4b:b0:08:93:fa:2f:79:d3:10:03:e5:f6:44:cb: fd:ff:e8:13:1b:18:76:6d:8c:6f:0c:9e:a0:bf:1f:f9:fd:b0: f2:a7:28:c4:a4:84:f1:53:70:51:f1:dc:df:c8:91:67:47:bc: ac:d4:7b:3c:7e:17:74:45:d6:4c:9e:05:87:82:f9:56:49:2b: ab:e3:4e:c8:e6:14:3b:26:4b:04:53:d5:ef:60:b5:a1:18:a1: af:30:80:09:5d:3c:45:48:48:e0:a0:ff:10:16:c8:76:cc:f0: 29:db:39:14:20:66:a7:4f:69:7e:49:93:8d:0c:5d:7c:5d:cd: 4b:96:6c:d7:11:5a:02:f6:5e:6a:60:1f:ba:15:2b:29:d8:03: ed:b4:a3:5a:91:60:b4:84:b3:5e:85:68:ef:17:04:9c:05:4b: 74:3f:f4:4a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUPvMAN6jeM5xsL9xamvdSuQl/MPMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMjAzOVoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAOTRhNGNiN2NmMTQwODVhODFkZjEy MGViMWEwMDZmMzg5ODljOTFlYTJlYTJlYWEyZThkNmFiZjRhMTQ1ZjAwYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jqvhNcnxS9OpqbrdGeq7T3lx051 dRDZ+K9qozjkAFCN2PZS1h6Ju/pvlWIpPN7WWo6LgliD9t6ZJBDUzGT2DyQG2sWH g1rSWycAlAQIdhr16DaPQieY2yOHnuX3wUDori+9A4hYFE+EtbGp6HAGw+FyA+85 bRbwQWXMUfJwL7yi1VqUDXvVjDHRGUNWvYxuG+JTd1V815NhrID0AZjXBXZnsMfy leNqiIdfEgRMtG6TO8AGZVj56ZTlHz/Dub8MmHGOQNzCjU0Iym/VIRGrvkMTMz/k gkszRZ8w7VHO2eRxyejNNkoSq2+trI6PCLFpgcSo+G4WNhZME6Ly/pNGvwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFAHjWwgjBMHLXuUNH3lIXzcu/r/TMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVkZTIzZTZiLWY4OWYtNGZiMS05NzgwLWNlYjY3N2E1NDFlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6hDAMA0GCSqGSIb3DQEBCwUAA4IBAQCLk1Tr79FSBXdHizvj ZhPhHjCvN7/hJ3OJp9s+PxQaTo8riORkHsqOw/4yjukoWJ/FfJ7R3WeZFJmUDqMW PVUZ1Xm5bIGi/EtnJNaP4Jm7qyeEP/vPGsdFTjMlACDbS7AIk/ovedMQA+X2RMv9 /+gTGxh2bYxvDJ6gvx/5/bDypyjEpITxU3BR8dzfyJFnR7ys1Hs8fhd0RdZMngWH gvlWSSur407I5hQ7JksEU9XvYLWhGKGvMIAJXTxFSEjgoP8QFsh2zPAp2zkUIGan T2l+SZONDF18Xc1LlmzXEVoC9l5qYB+6FSsp2APttKNakWC0hLNehWjvFwScBUt0 P/RK -----END CERTIFICATE-----Generated at Wed May 13 00:39:39 2026 by rpki-client