$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa File: 5f4586d3-447b-4c16-87c7-c068a92e5e74.roa (raw, json) Hash identifier: 2dkbQSbcTnky95t+EQUZoA+Dv2qzblruOScpBuL+dWw= Subject key identifier: 60:09:86:42:81:B0:97:D1:49:F6:F7:96:65:1E:D2:49:15:59:9B:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 601971BD82CECD7E406B425A6A4FE4680D6FEB31 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa Signing time: Tue 12 May 2026 00:10:47 +0000 ROA not before: Tue 12 May 2026 00:10:47 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:1040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:19:71:bd:82:ce:cd:7e:40:6b:42:5a:6a:4f:e4:68:0d:6f:eb:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:10:47 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=61581105d6cb8763f561ad620db77c461320b4d3263c6ce0942578a0b5ad20a7, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:13:a4:6e:7c:cd:87:7f:80:fc:96:f2:1d:a1: a5:ea:e9:1a:88:7a:8a:2c:e5:78:e5:2e:0b:98:0c: e3:7c:ff:34:c1:fb:3e:e7:91:e8:45:e8:22:2a:49: ea:6d:43:0c:17:73:1b:67:0b:90:3f:e8:08:b9:41: cf:2d:2e:52:7a:c4:0e:2a:da:e3:12:04:8c:07:01: a4:54:66:2b:5a:af:b4:05:9a:6a:ef:44:8b:0a:a2: 81:8b:d8:d5:32:f9:03:b7:41:b4:bf:ef:ca:a3:22: 8d:5f:0b:30:75:3f:c4:7b:57:25:f2:98:3d:3f:00: da:5b:d0:e7:e6:49:e7:b3:70:c4:01:ea:54:38:4a: eb:cc:3a:15:53:ff:47:20:a9:9b:d1:77:91:b1:7a: 30:91:d8:3c:43:0d:41:dd:b5:dc:fa:1d:73:b0:b6: b9:e8:2f:0d:81:33:2e:2b:74:67:63:ac:b8:89:a9: 4c:0e:57:47:89:3a:90:f3:b1:78:85:cb:c7:ba:7a: 33:7f:4a:96:bb:07:31:0b:0d:35:1e:ce:70:01:ba: 80:4e:61:1f:f7:b1:b9:4c:c0:93:91:58:44:47:9b: aa:3d:5f:91:99:68:b6:06:d1:76:02:1c:78:b0:dc: 77:ea:91:4d:dd:e1:33:89:c9:a6:56:31:57:28:5d: 78:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:09:86:42:81:B0:97:D1:49:F6:F7:96:65:1E:D2:49:15:59:9B:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/5f4586d3-447b-4c16-87c7-c068a92e5e74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:1040::/48 Signature Algorithm: sha256WithRSAEncryption 92:6f:d3:de:18:c0:9c:17:56:50:bf:e7:ef:4e:5e:ca:09:30: 3c:37:dc:71:cc:9b:75:8c:33:ed:99:e3:cd:1d:48:74:5e:cc: 6c:24:a9:03:2d:be:27:3a:ff:1e:50:16:17:d2:ef:f2:02:cf: a4:61:02:f9:42:22:34:66:2e:12:5a:26:0d:0a:0b:54:3b:66: 8e:a0:ff:87:36:d8:86:b8:2f:35:5b:78:90:4c:1b:fe:b3:13: dc:21:30:98:5b:36:30:9d:60:75:50:ba:a7:97:22:f2:0c:0b: 49:56:36:35:24:35:d2:58:45:2b:e7:3c:18:1a:b2:d1:57:cd: 16:a4:60:72:38:80:51:bd:8c:c7:19:ce:94:3f:b8:c9:6c:d7: 4f:b5:0c:93:5f:5b:98:be:8c:a8:96:bd:cc:ce:ce:e8:8b:f6: 32:2d:1c:ce:4f:e5:42:ea:e1:77:15:39:03:96:71:ca:78:b3: f4:17:df:37:37:1b:ca:7d:f4:81:2a:8f:15:9a:87:09:87:66: 30:ea:a3:12:33:33:79:83:80:e4:c3:90:d4:b0:bd:9d:3a:27: fd:59:94:a6:a7:d4:23:4d:61:53:a5:d6:d7:de:0c:56:e3:0e: bc:0c:55:95:b8:7b:7d:68:71:db:4a:99:a4:f0:95:ee:ac:71: b8:5d:fd:0b -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUYBlxvYLOzX5Aa0Jaak/kaA1v6zEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTA0N1oX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNANjE1ODExMDVkNmNiODc2M2Y1NjFh ZDYyMGRiNzdjNDYxMzIwYjRkMzI2M2M2Y2UwOTQyNTc4YTBiNWFkMjBhNzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BOkbnzNh3+A/JbyHaGl6ukaiHqK LOV45S4LmAzjfP80wfs+55HoRegiKknqbUMMF3MbZwuQP+gIuUHPLS5SesQOKtrj EgSMBwGkVGYrWq+0BZpq70SLCqKBi9jVMvkDt0G0v+/KoyKNXwswdT/Ee1cl8pg9 PwDaW9Dn5knns3DEAepUOErrzDoVU/9HIKmb0XeRsXowkdg8Qw1B3bXc+h1zsLa5 6C8NgTMuK3RnY6y4ialMDldHiTqQ87F4hcvHunozf0qWuwcxCw01Hs5wAbqATmEf 97G5TMCTkVhER5uqPV+RmWi2BtF2Ahx4sNx36pFN3eEzicmmVjFXKF14HwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGAJhkKBsJfRSfb3lmUe0kkVWZvkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzVmNDU4NmQzLTQ0N2ItNGMxNi04N2M3LWMwNjhhOTJlNWU3NC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8hBAMA0GCSqGSIb3DQEBCwUAA4IBAQCSb9PeGMCcF1ZQv+fv Tl7KCTA8N9xxzJt1jDPtmePNHUh0XsxsJKkDLb4nOv8eUBYX0u/yAs+kYQL5QiI0 Zi4SWiYNCgtUO2aOoP+HNtiGuC81W3iQTBv+sxPcITCYWzYwnWB1ULqnlyLyDAtJ VjY1JDXSWEUr5zwYGrLRV80WpGByOIBRvYzHGc6UP7jJbNdPtQyTX1uYvoyolr3M zs7oi/YyLRzOT+VC6uF3FTkDlnHKeLP0F983NxvKffSBKo8VmocJh2Yw6qMSMzN5 g4Dkw5DUsL2dOif9WZSmp9QjTWFTpdbX3gxW4w68DFWVuHt9aHHbSpmk8JXurHG4 Xf0L -----END CERTIFICATE-----Generated at Wed May 13 00:02:45 2026 by rpki-client