$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa File: a47e051c-2b16-4d02-b1e0-ac267a378e13.roa (raw, json) Hash identifier: /qAKfwB60L86gywDUHz3DgiMuaqvYMH22wdLq/s8UGY= Subject key identifier: F8:55:67:15:1D:CA:05:8A:F0:BE:E7:97:F8:C5:8F:17:EF:99:99:0D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 6549603BAD63EFBA1C8109AF7D06A9BD9267D216 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa Signing time: Sat 09 May 2026 00:01:30 +0000 ROA not before: Sat 09 May 2026 00:01:30 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf6:b000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:49:60:3b:ad:63:ef:ba:1c:81:09:af:7d:06:a9:bd:92:67:d2:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:01:30 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=f652f7ff1e2471dac885d629d286fc7fa9760e0ee8877235f72c175fa3c7893d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5d:2d:de:5d:4a:fe:55:0e:4f:1e:fa:4b:6e: c1:c9:30:22:36:c5:6a:f7:fc:f9:d0:d6:45:f5:f2: 97:f1:b4:10:37:f8:9b:eb:2d:d3:33:76:7c:27:ff: e8:b5:17:21:0a:91:9e:00:a4:f4:c8:01:fc:ca:74: a0:db:88:ce:63:3b:b5:87:e6:2f:ad:d5:7d:f9:86: e3:ec:f4:d7:96:65:1d:af:ef:72:cc:12:cf:87:de: 45:39:67:c6:50:7b:47:83:db:2c:68:2a:ad:93:72: 0a:f5:a2:54:56:bb:52:f4:e4:cd:a9:52:6d:01:89: 68:21:44:44:d7:41:95:04:b4:b6:85:5c:95:17:ed: 11:51:64:eb:a0:7e:fd:3a:b3:56:e4:e1:5a:72:06: fa:42:ce:e7:aa:94:e5:18:27:27:f3:ae:b1:ce:cc: 36:5c:59:17:d2:22:71:26:c5:bb:38:6c:c2:37:ca: 6d:bd:0f:45:3e:8c:78:3a:33:47:fc:f3:a5:a6:e0: 17:9e:97:77:65:1b:21:53:dd:ba:0d:bc:1a:9f:ff: f9:3e:12:d6:f4:68:f6:26:b7:ee:bc:af:9c:97:3a: 54:86:ca:f8:80:06:52:05:97:06:84:99:f2:9d:20: 86:72:62:35:fb:7a:3d:d8:14:14:5c:a4:53:fa:73: 77:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:55:67:15:1D:CA:05:8A:F0:BE:E7:97:F8:C5:8F:17:EF:99:99:0D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a47e051c-2b16-4d02-b1e0-ac267a378e13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf6:b000::/48 Signature Algorithm: sha256WithRSAEncryption 8c:ca:6e:bd:6d:b6:6b:da:39:5c:73:69:ae:9a:34:4a:6a:54: d3:69:0e:56:05:e8:d2:52:83:ec:7b:20:a3:05:59:c0:82:56: 11:72:04:43:da:59:5d:ff:c0:0c:9c:32:47:92:de:87:54:96: c8:d8:00:45:4b:ab:c9:72:b5:0f:ac:90:4e:be:f5:ac:db:dd: d9:f4:ac:24:68:ea:c0:bf:02:de:8b:ae:7b:44:c2:47:85:97: b5:bc:80:8c:60:c0:9a:c5:dd:3a:76:b1:57:81:1f:34:fb:dd: ac:73:3b:1c:77:ca:79:42:83:94:e1:67:3f:b5:e3:44:a9:6a: 4b:7e:00:84:9e:85:ae:81:49:39:24:b5:9f:92:13:14:15:5f: 88:6d:3c:80:cb:57:70:0c:29:b7:dc:b2:cb:4f:d8:40:ff:51: 6f:9d:3a:15:69:6d:63:c7:79:49:e8:d5:96:73:13:2c:b3:cf: ac:51:7f:5c:0e:03:5d:af:7f:6c:48:8d:85:7a:60:8a:1a:d3: b8:61:9f:a6:a1:cb:ef:26:c0:97:bb:29:db:da:87:e1:7a:ea: e1:c1:da:14:b5:3a:17:6a:f0:fc:ee:58:f6:42:34:dd:a3:a6: d9:ef:2e:75:e3:20:56:90:28:74:ea:47:0b:98:b1:69:2d:4b: 59:a7:cb:44 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUZUlgO61j77ocgQmvfQapvZJn0hYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDEzMFoX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAZjY1MmY3ZmYxZTI0NzFkYWM4ODVk NjI5ZDI4NmZjN2ZhOTc2MGUwZWU4ODc3MjM1ZjcyYzE3NWZhM2M3ODkzZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq10t3l1K/lUOTx76S27ByTAiNsVq 9/z50NZF9fKX8bQQN/ib6y3TM3Z8J//otRchCpGeAKT0yAH8ynSg24jOYzu1h+Yv rdV9+Ybj7PTXlmUdr+9yzBLPh95FOWfGUHtHg9ssaCqtk3IK9aJUVrtS9OTNqVJt AYloIURE10GVBLS2hVyVF+0RUWTroH79OrNW5OFacgb6Qs7nqpTlGCcn866xzsw2 XFkX0iJxJsW7OGzCN8ptvQ9FPox4OjNH/POlpuAXnpd3ZRshU926Dbwan//5PhLW 9Gj2JrfuvK+clzpUhsr4gAZSBZcGhJnynSCGcmI1+3o92BQUXKRT+nN3RwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPhVZxUdygWK8L7nl/jFjxfvmZkNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E0N2UwNTFjLTJiMTYtNGQwMi1iMWUwLWFjMjY3YTM3OGUxMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba9rAAMA0GCSqGSIb3DQEBCwUAA4IBAQCMym69bbZr2jlcc2mu mjRKalTTaQ5WBejSUoPseyCjBVnAglYRcgRD2lld/8AMnDJHkt6HVJbI2ABFS6vJ crUPrJBOvvWs293Z9KwkaOrAvwLei657RMJHhZe1vICMYMCaxd06drFXgR80+92s czscd8p5QoOU4Wc/teNEqWpLfgCEnoWugUk5JLWfkhMUFV+IbTyAy1dwDCm33LLL T9hA/1FvnToVaW1jx3lJ6NWWcxMss8+sUX9cDgNdr39sSI2FemCKGtO4YZ+mocvv JsCXuynb2ofheurhwdoUtToXavD87lj2QjTdo6bZ7y514yBWkCh06kcLmLFpLUtZ p8tE -----END CERTIFICATE-----Generated at Tue May 12 23:34:18 2026 by rpki-client