$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa File: 7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa (raw, json) Hash identifier: ctZ8cC8aeVykA6gFniFVwQomSf4di9FP/0BKrSATo5E= Subject key identifier: D9:57:78:2D:11:68:A2:97:88:23:E5:40:95:15:9C:75:59:11:FA:04 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1CC1CA920C683BC5AADE08E40104C8E799C91E2E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa Signing time: Tue 12 May 2026 00:10:30 +0000 ROA not before: Tue 12 May 2026 00:10:30 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:1080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c1:ca:92:0c:68:3b:c5:aa:de:08:e4:01:04:c8:e7:99:c9:1e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:10:30 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=6ed5baa4e57be6be30a9163865cc213a4db84c7616ca65cf2f776fa5c1683252, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:0e:4c:98:f5:d7:ee:a0:c2:cc:95:5c:bc: a5:ab:fe:16:3c:a4:c7:ea:57:7f:16:a2:bd:f7:b6: 86:6d:89:1f:7e:5e:15:0a:a2:a6:1d:64:ab:26:15: 39:33:9d:26:0b:2c:fb:b1:e2:c3:e5:9c:3e:52:e1: cf:d3:10:80:b9:7c:9c:84:89:dd:27:b3:96:7e:4d: a3:96:d2:bd:31:7d:c3:aa:36:ea:d6:39:72:45:99: d5:ea:e9:b2:35:a9:68:7e:92:51:e7:61:07:6e:94: 15:a3:ff:56:bd:8f:fd:ba:ed:72:98:f6:b1:64:ed: 29:44:de:8c:f1:a4:cb:2e:3c:90:dd:b2:82:6e:4b: d5:11:52:f1:f2:0f:43:3b:d0:87:84:e5:1a:7c:c5: 66:c8:09:6b:98:bc:1b:03:55:0d:e1:4b:e7:7a:c1: 53:8c:26:5f:f0:74:47:00:33:4a:ab:1c:23:60:22: 29:c1:49:82:3f:c5:30:7e:f9:87:f0:b4:71:8c:c8: 73:b8:ed:ab:20:ac:4b:98:1b:6b:44:e1:83:fd:7f: 8b:77:c5:ba:50:34:e4:fe:c4:09:96:32:33:b0:dd: 25:14:c3:d9:4d:2e:bb:f5:3b:93:03:b9:e8:fa:93: 02:ab:46:c2:f3:3a:4c:12:89:4c:e8:92:24:2d:18: 17:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:57:78:2D:11:68:A2:97:88:23:E5:40:95:15:9C:75:59:11:FA:04 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ac508b8-33c3-47d4-ac8a-1c25f37db3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:1080::/48 Signature Algorithm: sha256WithRSAEncryption 4e:69:d8:68:2a:8c:63:1f:9a:63:b3:b4:de:1c:ba:41:fc:b2: 5e:93:15:25:3c:f8:bc:53:6e:2a:2c:aa:f4:03:31:0d:b8:0d: 1e:ef:75:50:c6:62:37:7e:02:d0:ec:51:12:14:48:38:03:39: 27:d3:88:1d:cc:be:13:0b:a6:d8:34:d0:08:4e:98:cd:5c:60: 2f:23:c6:2b:2e:3a:a9:a5:4e:54:d9:69:6f:77:ba:b3:b0:6a: 50:eb:9d:71:80:54:45:0e:31:29:a8:ac:70:01:58:3c:5c:0d: c8:31:2b:ea:a6:a3:85:ec:cc:9b:9b:44:f5:17:8d:d0:8b:2e: 67:42:40:1d:f6:cc:bd:a5:89:0a:1f:a9:46:e6:ad:03:80:cf: be:74:b9:37:e0:4a:34:80:fd:22:41:7d:47:ab:ba:f5:94:5b: c5:8b:74:a9:1d:bd:47:dd:12:cf:58:ab:d8:ad:be:04:1b:d1: 2f:20:25:33:fd:5f:cb:b0:2d:71:49:1d:d8:b9:4f:f3:d4:8c: fa:23:5d:d5:be:5b:0b:96:4a:31:14:85:71:2f:bb:32:25:10: a9:70:a0:9d:38:08:d3:93:9b:d1:65:d1:1c:48:47:1a:aa:f3: 97:89:01:c6:92:cc:c1:fb:6c:7e:bd:a9:01:64:5a:0e:d4:d6: 2d:d1:2b:73 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUHMHKkgxoO8Wq3gjkAQTI55nJHi4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMTAzMFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNANmVkNWJhYTRlNTdiZTZiZTMwYTkx NjM4NjVjYzIxM2E0ZGI4NGM3NjE2Y2E2NWNmMmY3NzZmYTVjMTY4MzI1MjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtagOTJj11+6gwsyVXLylq/4WPKTH 6ld/FqK997aGbYkffl4VCqKmHWSrJhU5M50mCyz7seLD5Zw+UuHP0xCAuXychInd J7OWfk2jltK9MX3Dqjbq1jlyRZnV6umyNalofpJR52EHbpQVo/9WvY/9uu1ymPax ZO0pRN6M8aTLLjyQ3bKCbkvVEVLx8g9DO9CHhOUafMVmyAlrmLwbA1UN4UvnesFT jCZf8HRHADNKqxwjYCIpwUmCP8UwfvmH8LRxjMhzuO2rIKxLmBtrROGD/X+Ld8W6 UDTk/sQJljIzsN0lFMPZTS679TuTA7no+pMCq0bC8zpMEolM6JIkLRgXVQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFNlXeC0RaKKXiCPlQJUVnHVZEfoEMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzdhYzUwOGI4LTMzYzMtNDdkNC1hYzhhLTFjMjVmMzdkYjNjMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xCAMA0GCSqGSIb3DQEBCwUAA4IBAQBOadhoKoxjH5pjs7Te HLpB/LJekxUlPPi8U24qLKr0AzENuA0e73VQxmI3fgLQ7FESFEg4Azkn04gdzL4T C6bYNNAITpjNXGAvI8YrLjqppU5U2Wlvd7qzsGpQ651xgFRFDjEpqKxwAVg8XA3I MSvqpqOF7Mybm0T1F43Qiy5nQkAd9sy9pYkKH6lG5q0DgM++dLk34Eo0gP0iQX1H q7r1lFvFi3SpHb1H3RLPWKvYrb4EG9EvICUz/V/LsC1xSR3YuU/z1Iz6I13VvlsL lkoxFIVxL7syJRCpcKCdOAjTk5vRZdEcSEcaqvOXiQHGkszB+2x+vakBZFoO1NYt 0Stz -----END CERTIFICATE-----Generated at Tue May 12 23:37:36 2026 by rpki-client