$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa File: 964875b1-60c6-4631-a709-ba5faa0c06e7.roa (raw, json) Hash identifier: mDm0Byyf7iQnlIMKm1xZ66yJBaby9i2V0EsAF6pnoaA= Subject key identifier: 0A:18:35:DE:00:8D:60:F6:DC:0E:E7:51:35:BF:22:34:C5:7B:6A:F7 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 77994D8E41B96E4DAF72032555781DB18CCC205D Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa Signing time: Tue 12 May 2026 00:01:33 +0000 ROA not before: Tue 12 May 2026 00:01:33 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dafb:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:99:4d:8e:41:b9:6e:4d:af:72:03:25:55:78:1d:b1:8c:cc:20:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:01:33 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=a2d29459a04e1a3d7b5fb8cfc38d6819731396d4bf919b4008ecd4bec513e73b, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bf:f2:ac:bf:a0:27:d0:40:05:f6:ef:af:be: 18:57:de:42:a1:24:c1:e8:06:38:63:62:78:0d:05: 62:b7:7d:e9:d0:44:63:72:a8:03:78:34:d7:73:51: 24:49:4d:36:9f:65:e3:87:fe:c0:1f:46:17:9e:fc: ac:cc:f5:81:eb:b2:d9:0e:c6:5c:1b:01:08:05:09: 83:5c:f9:1f:6a:72:00:6e:0f:23:ae:5d:ca:9d:9f: a8:de:74:19:94:8c:1c:77:7e:d8:7d:dd:6d:c1:17: 68:63:36:44:d8:fd:c4:2b:24:95:0b:9b:6e:32:53: ea:c4:47:1b:97:f6:38:4a:46:27:39:76:57:4d:8d: 67:ec:10:bf:ae:f5:31:e6:49:45:77:a4:ca:64:7e: 7a:a9:c6:a3:b2:20:84:30:f7:52:a6:46:19:ef:d4: 9c:1d:0e:e5:45:84:1f:93:ed:1b:b0:40:24:8d:43: 14:54:64:4d:12:70:58:30:c1:be:0f:50:37:67:65: 99:79:60:71:05:ea:14:08:53:17:81:5a:f7:40:35: da:41:58:86:10:79:c4:73:46:88:98:89:aa:4a:8d: b1:b3:a3:58:c5:14:f9:39:55:22:de:8d:61:f0:d2: ae:9e:81:5b:e9:56:20:7d:28:67:bc:f4:24:65:b3: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:18:35:DE:00:8D:60:F6:DC:0E:E7:51:35:BF:22:34:C5:7B:6A:F7 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/964875b1-60c6-4631-a709-ba5faa0c06e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dafb:2000::/40 Signature Algorithm: sha256WithRSAEncryption 9b:dd:98:0b:d5:33:e5:c7:6a:48:f7:ae:ae:71:a6:b3:fe:fd: 62:71:fb:f6:16:3e:f0:c4:ea:17:35:4f:e9:8e:b9:d3:b3:fe: 91:3e:64:29:b2:3f:4e:dd:02:59:dc:34:69:03:79:09:e7:80: 2c:35:1c:15:2e:de:5d:7e:9c:7b:ca:64:4d:2d:ff:ca:ec:1f: 32:44:bb:c2:86:37:c2:f6:b0:91:2e:3e:46:b1:63:46:ac:8c: f3:8c:f9:a8:49:31:81:cc:fc:f4:5b:e0:08:21:0d:01:d6:4e: b0:58:c3:59:7e:62:9b:b8:4f:f0:6d:27:2d:5f:4d:4f:7f:ca: ee:fe:9e:cc:05:92:d4:52:29:b0:d7:08:07:25:e9:84:ee:3d: e3:cc:d7:fc:48:66:99:e1:c3:7f:0b:eb:6a:2e:00:d7:d3:32: 0a:b8:5f:4b:b9:96:8b:59:ae:85:53:04:63:a0:bb:87:3e:45: a6:27:86:f4:a3:14:01:b4:ac:86:c6:8e:f4:3f:f4:1b:e9:d3: e2:95:e1:3d:ba:c2:74:57:30:ab:33:6d:55:57:f2:98:5d:01: c6:f7:e8:d0:7d:92:b3:56:76:44:fd:83:17:6a:67:d2:be:91: 60:e4:26:48:7c:bb:e7:09:c1:40:a3:90:61:8b:c8:80:d8:cf: cc:ed:f3:54 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUd5lNjkG5bk2vcgMlVXgdsYzMIF0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDEzM1oX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAYTJkMjk0NTlhMDRlMWEzZDdiNWZi OGNmYzM4ZDY4MTk3MzEzOTZkNGJmOTE5YjQwMDhlY2Q0YmVjNTEzZTczYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7/yrL+gJ9BABfbvr74YV95CoSTB 6AY4Y2J4DQVit33p0ERjcqgDeDTXc1EkSU02n2Xjh/7AH0YXnvyszPWB67LZDsZc GwEIBQmDXPkfanIAbg8jrl3KnZ+o3nQZlIwcd37Yfd1twRdoYzZE2P3EKySVC5tu MlPqxEcbl/Y4SkYnOXZXTY1n7BC/rvUx5klFd6TKZH56qcajsiCEMPdSpkYZ79Sc HQ7lRYQfk+0bsEAkjUMUVGRNEnBYMMG+D1A3Z2WZeWBxBeoUCFMXgVr3QDXaQViG EHnEc0aImImqSo2xs6NYxRT5OVUi3o1h8NKunoFb6VYgfShnvPQkZbPELQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFAoYNd4AjWD23A7nUTW/IjTFe2r3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx Lzk2NDg3NWIxLTYwYzYtNDYzMS1hNzA5LWJhNWZhYTBjMDZlNy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba+yAwDQYJKoZIhvcNAQELBQADggEBAJvdmAvVM+XHakj3rq5x prP+/WJx+/YWPvDE6hc1T+mOudOz/pE+ZCmyP07dAlncNGkDeQnngCw1HBUu3l1+ nHvKZE0t/8rsHzJEu8KGN8L2sJEuPkaxY0asjPOM+ahJMYHM/PRb4AghDQHWTrBY w1l+Ypu4T/BtJy1fTU9/yu7+nswFktRSKbDXCAcl6YTuPePM1/xIZpnhw38L62ou ANfTMgq4X0u5lotZroVTBGOgu4c+RaYnhvSjFAG0rIbGjvQ/9Bvp0+KV4T26wnRX MKszbVVX8phdAcb36NB9krNWdkT9gxdqZ9K+kWDkJkh8u+cJwUCjkGGLyIDYz8zt 81Q= -----END CERTIFICATE-----Generated at Wed May 13 00:42:45 2026 by rpki-client