$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa File: 95769528-fe79-42fd-bbc3-1d9507dfe45c.roa (raw, json) Hash identifier: ftyXeqlL1ifHgf7MGfoxD6pdToP33zxOSntgw2iVOTM= Subject key identifier: D2:AA:42:23:AF:A9:FE:32:A5:FF:77:86:96:9F:B1:1E:33:10:31:29 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 49DB5285C2C5F4AF82ED72DA1FE0D27F1D5F87F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa Signing time: Tue 12 May 2026 00:01:38 +0000 ROA not before: Tue 12 May 2026 00:01:38 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:db:52:85:c2:c5:f4:af:82:ed:72:da:1f:e0:d2:7f:1d:5f:87:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:01:38 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=9757b9dc443c64cb8b9660acf3a2ba1d876cd558d3a1e96938735732e00ca37c, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:cb:ec:62:e1:36:da:4e:b3:f7:8d:da:7f:b7: 4d:11:6f:3d:9b:b8:35:bf:3b:1d:58:32:57:05:db: 36:16:d7:20:3b:21:02:1b:d6:62:54:cc:b5:a7:0f: 53:8b:2c:31:6c:ca:4e:d4:97:91:0e:3e:3c:cd:ee: 9a:66:6a:18:70:94:3a:8c:0d:6b:79:ad:06:34:f4: 07:a3:c4:48:fd:09:79:e6:94:1d:63:ec:2e:3c:b8: ce:93:f7:6f:2b:20:6f:fa:94:8f:4f:06:67:29:61: d0:46:51:99:01:54:26:ad:5d:59:f4:6b:37:5d:d7: f6:95:f5:02:4f:2f:57:3b:4b:31:4a:fd:bc:20:f2: 9d:7e:05:92:ab:5b:cf:83:dc:65:84:96:e8:ea:95: 10:46:7f:8f:27:cb:be:48:72:ac:30:ac:89:ee:2d: 51:bd:dc:9f:46:fd:25:2a:6e:6a:15:f6:2d:b3:45: f6:02:19:c7:a5:11:9c:c4:20:9d:8f:bc:ba:b3:07: 59:24:c9:78:2f:84:66:07:bc:00:b6:b7:70:98:82: f4:ca:60:b2:1f:d2:82:d9:67:da:05:7c:ad:57:9d: 95:bf:4f:ab:b4:89:fc:f0:ba:f8:ff:40:02:7b:74: 2e:ea:7d:de:0d:6f:65:7e:0e:22:c5:a1:13:6f:9e: 88:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AA:42:23:AF:A9:FE:32:A5:FF:77:86:96:9F:B1:1E:33:10:31:29 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/95769528-fe79-42fd-bbc3-1d9507dfe45c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:800::/40 Signature Algorithm: sha256WithRSAEncryption 58:8b:5c:0b:28:d4:1a:38:15:7c:cf:5c:c8:32:7e:a9:48:ba: 08:53:2f:3a:c0:b5:4a:fb:bd:8a:6c:3a:7b:ce:30:a1:dc:9a: f3:7f:25:44:35:9b:7e:c7:dd:d5:24:f6:61:e8:5e:30:21:8a: 3a:5b:58:f3:63:ce:ba:82:95:22:5c:ff:0a:71:f5:dc:f5:13: 31:38:5e:10:8f:0d:c1:a6:6c:02:ee:a2:da:ac:dc:19:e1:2d: b0:c4:3a:f1:97:03:14:69:e1:00:4f:d3:1b:d8:32:ea:d4:3a: 8d:2d:fd:a5:a9:a5:c0:49:ca:34:3b:ac:30:88:74:a0:c0:1f: af:e0:e1:97:03:d7:b9:eb:66:8f:82:4a:14:af:9d:0f:fc:31: fe:d0:69:76:b0:c7:82:d9:b4:e3:61:ca:19:e5:16:29:80:0b: 24:0c:2e:6d:00:c3:73:53:0b:06:d7:d4:79:4e:a3:af:5f:dc: 3b:d0:26:67:b7:72:58:ee:48:cf:56:67:78:85:4b:50:39:0b: e5:28:30:75:ea:55:25:0c:6b:ca:55:c2:00:41:b3:62:f2:c1: 1e:e5:c3:6a:96:18:63:ae:4c:12:d7:92:54:cf:51:58:24:79: 2e:c8:d5:31:4e:02:b8:d5:e4:56:a3:61:15:2b:4d:32:31:c7: c6:8e:98:99 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUSdtShcLF9K+C7XLaH+DSfx1fh/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDEzOFoX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAOTc1N2I5ZGM0NDNjNjRjYjhiOTY2 MGFjZjNhMmJhMWQ4NzZjZDU1OGQzYTFlOTY5Mzg3MzU3MzJlMDBjYTM3YzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8vsYuE22k6z943af7dNEW89m7g1 vzsdWDJXBds2FtcgOyECG9ZiVMy1pw9TiywxbMpO1JeRDj48ze6aZmoYcJQ6jA1r ea0GNPQHo8RI/Ql55pQdY+wuPLjOk/dvKyBv+pSPTwZnKWHQRlGZAVQmrV1Z9Gs3 Xdf2lfUCTy9XO0sxSv28IPKdfgWSq1vPg9xlhJbo6pUQRn+PJ8u+SHKsMKyJ7i1R vdyfRv0lKm5qFfYts0X2AhnHpRGcxCCdj7y6swdZJMl4L4RmB7wAtrdwmIL0ymCy H9KC2WfaBXytV52Vv0+rtIn88Lr4/0ACe3Qu6n3eDW9lfg4ixaETb56IMQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFNKqQiOvqf4ypf93hpafsR4zEDEpMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk1NzY5NTI4LWZlNzktNDJmZC1iYmMzLTFkOTUwN2RmZTQ1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba/wgwDQYJKoZIhvcNAQELBQADggEBAFiLXAso1Bo4FXzPXMgy fqlIughTLzrAtUr7vYpsOnvOMKHcmvN/JUQ1m37H3dUk9mHoXjAhijpbWPNjzrqC lSJc/wpx9dz1EzE4XhCPDcGmbALuotqs3BnhLbDEOvGXAxRp4QBP0xvYMurUOo0t /aWppcBJyjQ7rDCIdKDAH6/g4ZcD17nrZo+CShSvnQ/8Mf7QaXawx4LZtONhyhnl FimACyQMLm0Aw3NTCwbX1HlOo69f3DvQJme3cljuSM9WZ3iFS1A5C+UoMHXqVSUM a8pVwgBBs2LywR7lw2qWGGOuTBLXklTPUVgkeS7I1TFOArjV5FajYRUrTTIxx8aO mJk= -----END CERTIFICATE-----Generated at Tue May 12 23:29:43 2026 by rpki-client