$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa File: 8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa (raw, json) Hash identifier: 0Zdv/RerlWJZidvOJF4HtUKVjVV0HuNzSYrQgjDrwDw= Subject key identifier: 82:D7:3E:99:1F:C6:D5:67:EC:A2:D2:E2:34:2D:25:B5:CE:BE:10:39 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 1968F438799B4DB14DB6FE1D10DDABA4CE7C1244 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa Signing time: Mon 11 May 2026 00:30:13 +0000 ROA not before: Mon 11 May 2026 00:30:13 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da00:8020::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:68:f4:38:79:9b:4d:b1:4d:b6:fe:1d:10:dd:ab:a4:ce:7c:12:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:30:13 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=240ee4130cd279339f58c5a51aa973d9b5c351a319ce8ece26322e9eec8f0dbc, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:d7:a6:ce:17:57:c4:36:bd:47:f4:7d:0e: 43:ad:57:39:48:1f:66:a8:a8:93:2e:b2:7d:5a:9e: f5:d6:b2:e3:dc:00:b5:c4:ae:3a:ad:65:65:d3:e2: 7b:1f:94:8d:54:08:3a:92:13:36:6c:21:4f:58:f0: d7:36:43:f3:a9:e8:2f:4b:0b:26:b0:1e:55:03:ed: 51:93:f0:c1:aa:62:7c:db:0c:f5:4f:80:ba:39:a9: 3f:27:e3:8f:c2:20:41:77:60:80:61:b5:3e:f5:51: 95:9b:bd:7e:17:fb:9e:d4:77:dd:e7:98:d9:3a:c0: 54:b5:1d:fb:4f:53:bd:b5:a8:dd:59:6d:9e:53:29: 3a:87:c7:a3:f0:26:ce:bb:c0:3c:5d:7e:87:19:45: 56:79:45:94:58:78:e8:f6:38:64:26:48:78:7b:e8: c0:3b:83:db:b0:1f:06:73:5b:4a:c2:c8:9a:22:52: 78:92:d4:c6:37:2f:d0:47:7e:3f:1e:3e:fe:9b:ee: 10:40:dd:5a:aa:8c:f9:e7:d3:f0:ff:0c:30:15:21: 78:9c:89:71:43:a6:88:9a:35:7d:ff:1b:19:7f:bf: e8:2d:d4:4e:e8:40:74:b9:dc:96:2e:f4:a2:ed:f9: bc:c2:c1:63:b8:3c:e3:64:86:9e:14:58:89:52:38: 34:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D7:3E:99:1F:C6:D5:67:EC:A2:D2:E2:34:2D:25:B5:CE:BE:10:39 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8ca371d9-2153-4053-99ac-1bdc0c4294ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da00:8020::/48 Signature Algorithm: sha256WithRSAEncryption 80:ee:a8:b4:cf:90:55:a4:ba:29:b9:92:6a:aa:44:5c:2a:19: 45:22:2e:e0:25:00:8c:3f:02:05:19:52:24:71:cc:7f:8d:1a: 23:2f:eb:63:dd:ad:52:7d:e4:26:10:f3:7d:2b:ee:07:8e:67: eb:c3:cf:5a:84:8c:fb:4b:9a:01:4b:c6:52:9e:2b:40:36:fd: 17:ff:72:5a:36:d1:31:ee:0e:00:26:39:e1:60:b4:eb:22:2e: 40:d6:88:ab:55:e3:af:ab:3c:46:9b:5c:2a:aa:46:5f:f9:f6: 57:6f:4c:e4:39:3f:64:81:d4:4d:ac:ab:fd:ee:88:47:0f:73: 5d:27:e0:f5:cc:e3:78:d5:ea:47:82:32:e1:3b:56:0d:32:4f: 60:85:a8:84:5f:56:25:93:30:db:b0:0c:1b:e5:ae:af:96:24: 66:46:ae:cf:d5:e4:e6:3b:82:75:7c:65:3f:c3:13:7d:3f:e9: c2:66:f0:af:36:a6:27:8c:8e:d7:9d:c7:8f:a1:2b:6b:dd:a4: 5c:c5:74:2b:00:4d:70:33:d4:ef:f5:4e:9e:38:c2:af:0f:f4: 32:7b:52:6b:64:a9:1c:1a:89:e5:d4:3a:64:31:49:be:43:7b: 8b:c5:77:bc:d8:bc:46:87:f9:53:a5:4a:12:2a:24:36:09:a5: e2:da:7a:2a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGWj0OHmbTbFNtv4dEN2rpM58EkQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMzAxM1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAMjQwZWU0MTMwY2QyNzkzMzlmNThj NWE1MWFhOTczZDliNWMzNTFhMzE5Y2U4ZWNlMjYzMjJlOWVlYzhmMGRiYzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCLXps4XV8Q2vUf0fQ5DrVc5SB9m qKiTLrJ9Wp711rLj3AC1xK46rWVl0+J7H5SNVAg6khM2bCFPWPDXNkPzqegvSwsm sB5VA+1Rk/DBqmJ82wz1T4C6Oak/J+OPwiBBd2CAYbU+9VGVm71+F/ue1Hfd55jZ OsBUtR37T1O9tajdWW2eUyk6h8ej8CbOu8A8XX6HGUVWeUWUWHjo9jhkJkh4e+jA O4PbsB8Gc1tKwsiaIlJ4ktTGNy/QR34/Hj7+m+4QQN1aqoz559Pw/wwwFSF4nIlx Q6aImjV9/xsZf7/oLdRO6EB0udyWLvSi7fm8wsFjuDzjZIaeFFiJUjg0yQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFILXPpkfxtVn7KLS4jQtJbXOvhA5MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzhjYTM3MWQ5LTIxNTMtNDA1My05OWFjLTFiZGMwYzQyOTRhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaAIAgMA0GCSqGSIb3DQEBCwUAA4IBAQCA7qi0z5BVpLopuZJq qkRcKhlFIi7gJQCMPwIFGVIkccx/jRojL+tj3a1SfeQmEPN9K+4Hjmfrw89ahIz7 S5oBS8ZSnitANv0X/3JaNtEx7g4AJjnhYLTrIi5A1oirVeOvqzxGm1wqqkZf+fZX b0zkOT9kgdRNrKv97ohHD3NdJ+D1zON41epHgjLhO1YNMk9ghaiEX1YlkzDbsAwb 5a6vliRmRq7P1eTmO4J1fGU/wxN9P+nCZvCvNqYnjI7XncePoStr3aRcxXQrAE1w M9Tv9U6eOMKvD/Qye1JrZKkcGonl1DpkMUm+Q3uLxXe82LxGh/lTpUoSKiQ2CaXi 2noq -----END CERTIFICATE-----Generated at Wed May 13 00:07:35 2026 by rpki-client