$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa File: 8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa (raw, json) Hash identifier: 8ow2HEalG+lOKhYcTdcJ6urZzMoZCsN+YD24zM+ZSLM= Subject key identifier: DE:5C:F8:FF:B9:37:BE:C5:D2:8C:C6:53:BC:8B:33:73:62:BE:FF:B5 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 3A49B55D310A9BDF5ED9F56BEDF80B1002C7402B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa Signing time: Sat 02 May 2026 00:10:04 +0000 ROA not before: Sat 02 May 2026 00:10:04 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:49:b5:5d:31:0a:9b:df:5e:d9:f5:6b:ed:f8:0b:10:02:c7:40:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:10:04 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=42c9193b6eeb037c92234a95bc7d3032b0d302fe0e23dfc6849e0fa80b788838, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:b1:81:2f:52:f0:c2:69:31:2d:5d:7b:06: e9:e5:80:83:10:7d:f3:74:b1:7b:52:62:65:92:85: ad:77:78:85:5f:fa:22:ab:8a:b8:2e:57:49:45:18: fb:25:77:dd:4b:fb:1f:f3:63:7f:7d:b4:63:57:83: 1b:cd:68:ea:6e:bf:45:ab:f9:14:47:61:70:11:7e: f8:ac:6e:a1:a5:c7:61:8b:e3:61:ff:f1:da:6a:8b: 20:54:74:77:27:8d:4e:b4:49:35:d0:99:b0:02:e4: 69:94:7b:d9:f7:b4:60:75:a6:a5:24:2a:c8:f5:11: b8:3d:32:7f:cc:95:98:b4:6b:19:65:df:73:15:97: 4e:84:15:1e:f5:a7:12:cb:97:98:19:75:b0:fc:c1: aa:e1:14:98:41:bc:62:ec:15:53:0e:8f:9d:c2:06: 04:c9:24:04:6a:71:26:00:f7:43:0b:9b:c7:78:1b: 76:1d:8e:2c:d3:53:34:39:16:d7:24:c0:72:d1:a4: f5:1f:f7:49:78:37:cc:0e:64:58:5c:e8:61:f6:b5: f6:7c:d8:43:45:42:f4:d6:92:bd:9b:a0:8d:b3:d9: 0f:e9:c8:eb:d0:66:93:d5:b2:73:0a:af:96:c4:b7: 38:a9:ae:77:f6:0e:59:22:b2:0d:4a:98:03:4a:c6: 66:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5C:F8:FF:B9:37:BE:C5:D2:8C:C6:53:BC:8B:33:73:62:BE:FF:B5 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8be75f8f-1aaa-4b7a-98da-8a80278fc657.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:840::/48 Signature Algorithm: sha256WithRSAEncryption 73:b1:44:6a:e3:11:c2:bc:3a:c5:58:78:55:76:5e:8a:0b:13: 01:1d:28:55:21:f7:e4:fd:7d:58:59:e6:39:14:99:b5:e2:3d: 02:9f:cc:35:46:24:d0:07:8c:66:be:d6:a6:d2:40:7c:1b:81: 36:28:cc:38:ff:7f:90:bd:e7:4e:7b:e0:05:50:db:2e:51:95: 23:36:f4:fc:4f:fd:4b:f8:62:8f:ff:97:84:0c:c5:49:5e:67: 4a:33:6c:eb:95:e9:08:eb:d7:e1:23:d0:59:e2:e0:b8:e2:fe: 4f:69:4c:dd:4e:f3:bc:ac:64:f6:ab:be:ba:f8:9f:10:37:b3: 99:35:35:08:1f:15:dc:b9:42:31:25:46:db:8e:97:8f:9e:ab: b0:c0:a2:50:85:a4:5d:9d:c3:06:82:ce:e3:32:f8:b8:85:4f: d5:7f:55:88:95:63:89:b8:cf:3c:00:41:96:ba:44:f3:09:aa: c1:aa:ee:59:18:8b:3f:c8:37:34:22:1f:2e:38:0e:a1:60:4a: b1:9b:b1:2f:85:dc:03:d1:c6:78:6e:02:77:0a:2f:36:9a:6a: 9b:6b:37:b9:41:a8:08:43:2e:65:81:e9:44:f2:bb:6b:c3:69: 13:24:fd:9b:69:30:79:f9:1d:e1:8d:27:1a:66:ff:88:b9:46: 81:29:98:b5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUOkm1XTEKm99e2fVr7fgLEALHQCswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMTAwNFoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNANDJjOTE5M2I2ZWViMDM3YzkyMjM0 YTk1YmM3ZDMwMzJiMGQzMDJmZTBlMjNkZmM2ODQ5ZTBmYTgwYjc4ODgzODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSKxgS9S8MJpMS1dewbp5YCDEH3z dLF7UmJlkoWtd3iFX/oiq4q4LldJRRj7JXfdS/sf82N/fbRjV4MbzWjqbr9Fq/kU R2FwEX74rG6hpcdhi+Nh//HaaosgVHR3J41OtEk10JmwAuRplHvZ97RgdaalJCrI 9RG4PTJ/zJWYtGsZZd9zFZdOhBUe9acSy5eYGXWw/MGq4RSYQbxi7BVTDo+dwgYE ySQEanEmAPdDC5vHeBt2HY4s01M0ORbXJMBy0aT1H/dJeDfMDmRYXOhh9rX2fNhD RUL01pK9m6CNs9kP6cjr0GaT1bJzCq+WxLc4qa539g5ZIrINSpgDSsZmFwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFN5c+P+5N77F0ozGU7yLM3Nivv+1MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhiZTc1ZjhmLTFhYWEtNGI3YS05OGRhLThhODAyNzhmYzY1Ny5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6ghAMA0GCSqGSIb3DQEBCwUAA4IBAQBzsURq4xHCvDrFWHhV dl6KCxMBHShVIffk/X1YWeY5FJm14j0Cn8w1RiTQB4xmvtam0kB8G4E2KMw4/3+Q vedOe+AFUNsuUZUjNvT8T/1L+GKP/5eEDMVJXmdKM2zrlekI69fhI9BZ4uC44v5P aUzdTvO8rGT2q766+J8QN7OZNTUIHxXcuUIxJUbbjpePnquwwKJQhaRdncMGgs7j Mvi4hU/Vf1WIlWOJuM88AEGWukTzCarBqu5ZGIs/yDc0Ih8uOA6hYEqxm7EvhdwD 0cZ4bgJ3Ci82mmqbaze5QagIQy5lgelE8rtrw2kTJP2baTB5+R3hjScaZv+IuUaB KZi1 -----END CERTIFICATE-----Generated at Tue May 12 23:32:27 2026 by rpki-client