$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa File: 90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa (raw, json) Hash identifier: BZoeoCypzy/9I1xiAV65ongpXU1pjx2xf5dj396ug/w= Subject key identifier: E8:5C:5A:C3:A0:80:C0:91:47:42:07:5D:63:E9:6C:84:95:10:03:24 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 062B2B28EDE71941B3669D4B5BF3696719F1E50E Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa Signing time: Sat 02 May 2026 00:10:26 +0000 ROA not before: Sat 02 May 2026 00:10:26 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:60c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2b:2b:28:ed:e7:19:41:b3:66:9d:4b:5b:f3:69:67:19:f1:e5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:10:26 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=b2ecbe6c28d4adff7e1c52d1d9ea2b4f641e67ca9d745d6bdbdfce925096967a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4f:f1:ac:4c:48:65:a8:a0:b3:48:90:ec:79: be:46:e7:4e:ef:6d:ba:9c:90:f6:fa:6e:f9:f5:a6: 44:f9:43:2b:66:2f:68:0d:17:df:e4:45:dc:f7:5c: f0:ae:5e:2e:7b:5e:42:b4:6f:fe:bc:98:d9:aa:87: 9a:42:5b:8e:63:16:c0:25:0d:f3:d0:13:b0:20:d4: 77:fa:09:58:e0:92:e9:ce:58:63:07:58:e6:86:b1: 85:bb:04:ed:63:be:64:a4:81:61:46:ae:63:1a:40: 5a:d3:08:a5:cb:de:9a:3c:12:ce:b3:39:e0:09:62: 5a:4d:37:1d:79:a0:b6:6c:72:e8:ed:34:01:8c:d1: f6:61:be:bd:d6:b0:b0:9d:eb:4c:6f:55:84:48:c5: e2:b3:9b:a9:9f:01:2e:bf:7e:83:c9:3c:15:e4:56: ce:74:7b:02:3f:3b:80:f7:80:00:31:2c:3c:29:6f: 49:81:76:ab:5f:0c:5f:9e:58:0c:8b:cc:1e:7e:e5: cf:e1:e6:de:8f:cc:76:3f:4b:8a:3d:c0:58:68:b9: f9:37:c4:5a:ec:25:1a:23:b8:5d:f3:de:f5:d3:81: 1a:94:57:08:6a:80:e0:d4:af:f6:6d:c3:ec:dd:a0: c9:c9:e2:5d:f4:3a:f3:11:d4:38:78:56:b8:24:e8: 09:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:5C:5A:C3:A0:80:C0:91:47:42:07:5D:63:E9:6C:84:95:10:03:24 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/90eb1966-b2bb-44b8-8ab4-47d1f936fc79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:60c0::/48 Signature Algorithm: sha256WithRSAEncryption 94:0f:47:86:1b:0f:91:82:16:c7:aa:d4:8b:6c:2f:31:80:7c: 38:75:f2:62:39:d8:67:3b:b3:22:4d:69:20:1c:75:48:75:14: a2:7e:20:73:05:9f:f1:1f:4b:26:76:a9:c0:a6:bc:e2:e4:77: 47:a7:69:2f:87:4b:cb:a3:fb:90:a7:da:f1:c5:af:3c:85:58: 6b:a8:47:6d:2c:89:3d:45:22:62:7a:2c:04:4e:64:3d:25:bd: 13:fb:93:1e:51:7d:f5:1f:99:86:86:75:2f:a7:0b:6c:00:99: 4e:b6:bb:9d:b1:37:6b:81:ae:52:e8:69:7c:1e:fd:3e:5d:35: 5c:b4:f8:9b:58:ff:46:d6:8b:43:a3:ac:5f:d5:50:f4:4d:b6: 52:d5:a0:a1:cd:19:a5:44:e6:a9:aa:11:6b:7d:e8:c9:8e:7c: 90:d9:59:6d:02:e1:fa:0b:c6:25:46:99:9c:4e:5a:c5:7c:a2: a2:ba:2a:96:0d:f2:73:1f:a5:dd:8b:b4:a8:e2:90:bc:76:79: 54:f8:28:1f:55:a3:ba:c2:e0:12:17:19:bc:38:31:70:04:a3: 33:b2:03:39:0a:21:0c:c2:e2:a7:57:49:4b:e2:f8:eb:cb:11: 28:76:3a:64:59:ff:6a:2f:d6:1e:7e:12:f2:b6:3c:00:d0:b8: 9f:6f:c2:dc -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBisrKO3nGUGzZp1LW/NpZxnx5Q4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMTAyNloX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAYjJlY2JlNmMyOGQ0YWRmZjdlMWM1 MmQxZDllYTJiNGY2NDFlNjdjYTlkNzQ1ZDZiZGJkZmNlOTI1MDk2OTY3YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E/xrExIZaigs0iQ7Hm+RudO7226 nJD2+m759aZE+UMrZi9oDRff5EXc91zwrl4ue15CtG/+vJjZqoeaQluOYxbAJQ3z 0BOwINR3+glY4JLpzlhjB1jmhrGFuwTtY75kpIFhRq5jGkBa0wily96aPBLOszng CWJaTTcdeaC2bHLo7TQBjNH2Yb691rCwnetMb1WESMXis5upnwEuv36DyTwV5FbO dHsCPzuA94AAMSw8KW9JgXarXwxfnlgMi8wefuXP4ebej8x2P0uKPcBYaLn5N8Ra 7CUaI7hd897104EalFcIaoDg1K/2bcPs3aDJyeJd9DrzEdQ4eFa4JOgJUQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOhcWsOggMCRR0IHXWPpbISVEAMkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzkwZWIxOTY2LWIyYmItNDRiOC04YWI0LTQ3ZDFmOTM2ZmM3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6mDAMA0GCSqGSIb3DQEBCwUAA4IBAQCUD0eGGw+RghbHqtSL bC8xgHw4dfJiOdhnO7MiTWkgHHVIdRSifiBzBZ/xH0smdqnAprzi5HdHp2kvh0vL o/uQp9rxxa88hVhrqEdtLIk9RSJieiwETmQ9Jb0T+5MeUX31H5mGhnUvpwtsAJlO trudsTdrga5S6Gl8Hv0+XTVctPibWP9G1otDo6xf1VD0TbZS1aChzRmlROapqhFr fejJjnyQ2VltAuH6C8YlRpmcTlrFfKKiuiqWDfJzH6Xdi7So4pC8dnlU+CgfVaO6 wuASFxm8ODFwBKMzsgM5CiEMwuKnV0lL4vjryxEodjpkWf9qL9YefhLytjwA0Lif b8Lc -----END CERTIFICATE-----Generated at Wed May 13 00:15:11 2026 by rpki-client