$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa File: 727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa (raw, json) Hash identifier: 2kDs267jI/vB2948uycSDkk0rUosqT6VE2/L1TLzjDo= Subject key identifier: 7E:EA:7A:81:DB:7B:A3:B5:30:77:DD:77:B3:CA:E1:7B:2E:2C:19:7B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: C29CB6A78A0C8487E46CDFA275890AA47A37A3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa Signing time: Sat 09 May 2026 00:00:38 +0000 ROA not before: Sat 09 May 2026 00:00:38 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:7080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: c2:9c:b6:a7:8a:0c:84:87:e4:6c:df:a2:75:89:0a:a4:7a:37:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:00:38 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=7a0d0ff6f8bd2d376a001c8f3859baefc61655c892ae9183a537f136c45235fd, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:cf:21:e6:60:3e:1b:0b:9c:65:d8:ea:ba: b7:39:6b:b5:53:de:9a:8d:05:30:62:e0:76:37:dc: 8f:33:8b:8c:71:49:a6:17:3a:7f:7f:98:07:53:3e: 5e:7e:b5:ae:ed:09:a1:45:12:56:0b:f2:0a:8d:99: 45:36:16:3b:22:83:a7:94:5c:fa:c0:b2:9a:a8:98: e1:25:89:ba:0b:8c:91:c5:dc:fe:7a:3f:0b:c6:b8: d2:4e:c9:87:9d:c3:d8:26:4b:c6:d9:b2:dd:4b:9a: e0:64:3c:94:4f:96:ff:af:96:13:1e:14:4b:12:ea: 03:f7:1f:60:d0:34:fd:f3:d9:e3:f4:c2:be:a8:bf: f9:bd:5d:11:46:df:ec:f6:c0:7d:96:41:d9:81:f9: 8f:6f:fe:7e:c7:d8:f4:dc:eb:39:e6:b9:81:57:ec: 96:c6:53:19:5e:81:7c:4d:40:1b:5f:43:6e:0a:e9: 4a:9a:92:ae:13:be:20:8a:34:ee:af:3f:b9:5b:aa: 71:09:44:78:8c:fd:7b:99:3b:8c:15:f5:7d:3f:f8: 4c:8e:7c:50:7a:87:a6:05:c3:56:f4:6b:f7:35:27: 42:4f:00:ac:e5:7a:d4:2b:38:b6:8e:fc:ac:45:ff: 30:f6:e9:60:33:da:3e:c7:b2:1d:00:b6:63:05:78: 01:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:EA:7A:81:DB:7B:A3:B5:30:77:DD:77:B3:CA:E1:7B:2E:2C:19:7B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/727c896b-445c-4fe4-af0f-9c0c9d7ae3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:7080::/48 Signature Algorithm: sha256WithRSAEncryption bc:06:ce:e1:92:32:21:d7:1c:c4:7a:c5:cf:3d:58:77:48:46: db:3b:a7:7a:d7:35:1e:45:2f:ed:67:fa:8f:c7:00:e9:2c:33: 21:44:c1:40:14:6a:ec:10:e0:f0:14:13:59:ee:ae:83:79:38: 4f:95:76:28:6d:3c:25:a2:97:80:95:8b:57:45:81:b6:95:9f: ca:a3:5f:db:41:45:f2:48:87:63:4f:41:26:9a:f1:5b:95:fa: 5b:04:26:7f:05:b5:1b:aa:a3:e7:70:ef:3e:37:3b:59:8e:4f: 3b:94:55:6c:e2:7a:86:c2:8d:65:a9:5b:0e:6e:93:75:ed:bc: 20:59:b2:39:64:0b:f6:d6:6a:12:78:b9:6a:7c:5d:80:cf:f8: 6a:2e:26:dd:53:8d:d1:aa:3f:50:db:85:2a:43:21:2f:64:a7: 79:73:ed:c3:83:fe:82:82:c3:ea:1f:ba:07:d7:50:1d:d6:4c: 45:c5:c0:f8:90:1e:fb:f1:96:2b:bc:1d:15:41:0a:9d:ca:89: d2:fc:08:22:1c:ee:c0:20:99:15:79:33:56:0d:1d:6c:d8:8d: dc:4c:a0:de:f8:fe:08:6e:8d:96:3e:c4:19:fd:60:d6:c1:c3: e9:22:c2:44:60:db:7e:9e:44:c1:b5:44:db:01:72:39:42:20: b0:f3:3e:a9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUAMKctqeKDISH5GzfonWJCqR6N6MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDAzOFoX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAN2EwZDBmZjZmOGJkMmQzNzZhMDAx YzhmMzg1OWJhZWZjNjE2NTVjODkyYWU5MTgzYTUzN2YxMzZjNDUyMzVmZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX3PIeZgPhsLnGXY6rq3OWu1U96a jQUwYuB2N9yPM4uMcUmmFzp/f5gHUz5efrWu7QmhRRJWC/IKjZlFNhY7IoOnlFz6 wLKaqJjhJYm6C4yRxdz+ej8LxrjSTsmHncPYJkvG2bLdS5rgZDyUT5b/r5YTHhRL EuoD9x9g0DT989nj9MK+qL/5vV0RRt/s9sB9lkHZgfmPb/5+x9j03Os55rmBV+yW xlMZXoF8TUAbX0NuCulKmpKuE74gijTurz+5W6pxCUR4jP17mTuMFfV9P/hMjnxQ eoemBcNW9Gv3NSdCTwCs5XrUKzi2jvysRf8w9ulgM9o+x7IdALZjBXgBYQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFH7qeoHbe6O1MHfdd7PK4XsuLBl7MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzcyN2M4OTZiLTQ0NWMtNGZlNC1hZjBmLTljMGM5ZDdhZTNiMC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/3CAMA0GCSqGSIb3DQEBCwUAA4IBAQC8Bs7hkjIh1xzEesXP PVh3SEbbO6d61zUeRS/tZ/qPxwDpLDMhRMFAFGrsEODwFBNZ7q6DeThPlXYobTwl opeAlYtXRYG2lZ/Ko1/bQUXySIdjT0EmmvFblfpbBCZ/BbUbqqPncO8+NztZjk87 lFVs4nqGwo1lqVsObpN17bwgWbI5ZAv21moSeLlqfF2Az/hqLibdU43Rqj9Q24Uq QyEvZKd5c+3Dg/6CgsPqH7oH11Ad1kxFxcD4kB778ZYrvB0VQQqdyonS/AgiHO7A IJkVeTNWDR1s2I3cTKDe+P4Ibo2WPsQZ/WDWwcPpIsJEYNt+nkTBtUTbAXI5QiCw 8z6p -----END CERTIFICATE-----Generated at Tue May 12 23:57:27 2026 by rpki-client