$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a41ae715-9e63-4e83-af61-a9364bcaac32.roa File: a41ae715-9e63-4e83-af61-a9364bcaac32.roa (raw, json) Hash identifier: /QOFaICD03xW0bUPptQiZlhgZRH11YnZi4Fe7ZralNA= Subject key identifier: 6E:08:07:63:C2:43:71:5D:49:AA:92:E7:1D:58:DD:65:54:AE:F7:C8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5259395E1088885794B8C24F232FE86A86E90796 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a41ae715-9e63-4e83-af61-a9364bcaac32.roa Signing time: Wed 06 May 2026 00:00:37 +0000 ROA not before: Wed 06 May 2026 00:00:37 +0000 ROA not after: Tue 04 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:59:39:5e:10:88:88:57:94:b8:c2:4f:23:2f:e8:6a:86:e9:07:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 6 00:00:37 2026 GMT Not After : Aug 4 23:59:59 2026 GMT Subject: serialNumber=cbd221a908c130ddfda3f085d3fc22d196bc25ea41ed0f2f0dfd14f9c9ca9b60, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:40:a1:10:65:40:20:14:87:79:bc:5c:a0:5a: 86:d3:cb:b5:ba:32:03:47:a0:9b:f6:f1:33:9c:6e: 61:5f:bf:55:45:fa:5a:a6:96:2e:ee:a7:8a:7c:e2: c9:f1:4e:12:d4:8c:3c:df:9d:2a:ef:d3:25:b5:f1: e1:fb:f7:f6:e8:b2:2f:d7:bf:ee:4e:85:5d:16:fe: ca:b0:77:92:fb:83:a4:cf:90:09:84:11:26:43:78: 85:82:df:a9:d6:4b:9d:5e:5e:bc:10:98:9a:65:15: e4:7f:a0:f2:60:c1:a9:87:60:48:ec:c7:6d:8c:e7: e6:e3:c3:f4:c6:7d:5f:0b:58:f6:02:41:e0:bc:e9: d5:a7:46:f8:9f:0d:10:a2:72:f8:90:80:84:a8:e9: ce:8b:3f:3b:53:16:12:db:59:1e:5a:5b:13:1e:e2: 07:89:ab:4d:de:ad:3f:0c:0a:9d:f4:cb:0a:9f:bb: c3:fa:b9:37:b3:ef:57:0b:1e:7c:bd:10:71:b2:87: a3:fb:a8:71:23:21:0f:8d:06:ef:88:09:d6:58:fc: 69:b1:e3:93:9e:84:9e:a6:14:7b:a5:e4:59:90:14: 42:02:52:f2:3f:8f:b6:39:5a:3a:c7:79:91:3e:cc: 8d:36:57:41:61:01:89:35:7d:c8:67:6e:83:a5:93: 67:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:08:07:63:C2:43:71:5D:49:AA:92:E7:1D:58:DD:65:54:AE:F7:C8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a41ae715-9e63-4e83-af61-a9364bcaac32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da60::/32 Signature Algorithm: sha256WithRSAEncryption 93:9e:b2:d8:fd:ee:c8:87:38:74:15:1f:f6:ef:ce:50:19:15: 58:9b:22:d2:83:75:2c:87:50:d5:aa:6e:a1:ac:f0:b6:9d:c4: b2:aa:ff:9e:e8:f1:79:e2:a1:fd:b8:50:99:ac:9e:ff:3f:1a: 77:2d:1a:94:89:99:23:7f:dc:78:44:45:6b:94:c2:1e:e9:fa: e4:0d:36:1a:21:d8:90:1d:7e:74:6c:df:33:6a:1c:e4:62:b1: 76:30:3e:a2:20:44:7f:d9:e7:34:cf:04:56:71:5c:80:cc:3e: d9:4f:1a:58:df:7a:fd:67:ce:0d:59:c0:aa:26:30:a1:7c:9f: f4:68:02:57:96:d3:3f:c6:14:78:c4:77:c8:da:d0:77:02:3d: 54:26:1d:ef:d8:87:07:d7:ff:c1:2b:7d:cd:39:42:e6:d8:67: 8e:74:00:52:e9:71:38:2a:a0:af:c8:b5:72:f9:15:86:40:51: 77:0e:6f:a3:ae:16:fa:57:ac:4f:51:32:2b:b2:3f:4e:08:73: fe:e2:c7:fd:d3:68:64:b3:fc:8c:ce:ec:bf:51:37:7e:b0:a7: d1:9c:7b:2b:69:1c:35:b7:50:33:6a:07:e7:0e:5e:28:ea:a7: c4:44:57:47:e1:46:8f:e9:69:cd:47:5d:e6:aa:0a:29:99:bc: ec:70:d7:8e -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgIUUlk5XhCIiFeUuMJPIy/oaobpB5YwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNjAwMDAzN1oX DTI2MDgwNDIzNTk1OVowejFJMEcGA1UEBRNAY2JkMjIxYTkwOGMxMzBkZGZkYTNm MDg1ZDNmYzIyZDE5NmJjMjVlYTQxZWQwZjJmMGRmZDE0ZjljOWNhOWI2MDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEChEGVAIBSHebxcoFqG08u1ujID R6Cb9vEznG5hX79VRfpappYu7qeKfOLJ8U4S1Iw8350q79MltfHh+/f26LIv17/u ToVdFv7KsHeS+4Okz5AJhBEmQ3iFgt+p1kudXl68EJiaZRXkf6DyYMGph2BI7Mdt jOfm48P0xn1fC1j2AkHgvOnVp0b4nw0QonL4kICEqOnOiz87UxYS21keWlsTHuIH iatN3q0/DAqd9MsKn7vD+rk3s+9XCx58vRBxsoej+6hxIyEPjQbviAnWWPxpseOT noSephR7peRZkBRCAlLyP4+2OVo6x3mRPsyNNldBYQGJNX3IZ26DpZNnewIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFG4IB2PCQ3FdSaqS5x1Y3WVUrvfIMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0MWFlNzE1LTllNjMtNGU4My1hZjYxLWE5MzY0YmNhYWMzMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzAN BAIAAjAHAwUAJAbaYDANBgkqhkiG9w0BAQsFAAOCAQEAk56y2P3uyIc4dBUf9u/O UBkVWJsi0oN1LIdQ1apuoazwtp3Esqr/nujxeeKh/bhQmaye/z8ady0alImZI3/c eERFa5TCHun65A02GiHYkB1+dGzfM2oc5GKxdjA+oiBEf9nnNM8EVnFcgMw+2U8a WN96/WfODVnAqiYwoXyf9GgCV5bTP8YUeMR3yNrQdwI9VCYd79iHB9f/wSt9zTlC 5thnjnQAUulxOCqgr8i1cvkVhkBRdw5vo64W+lesT1EyK7I/Tghz/uLH/dNoZLP8 jM7sv1E3frCn0Zx7K2kcNbdQM2oH5w5eKOqnxERXR+FGj+lpzUdd5qoKKZm87HDX jg== -----END CERTIFICATE-----Generated at Wed May 13 00:09:03 2026 by rpki-client