$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa File: a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa (raw, json) Hash identifier: zNm7CHWc5Q3WmS0d7FmI4ZwsUELCafyr+fwEjBX+lQQ= Subject key identifier: BD:85:F5:72:9E:1A:02:3C:A2:13:BC:FE:7F:53:8B:65:23:1E:DE:8D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78B86F64897F1992733361B12052DD0175A3888C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa Signing time: Tue 05 May 2026 00:01:17 +0000 ROA not before: Tue 05 May 2026 00:01:17 +0000 ROA not after: Mon 03 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daf4:4800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b8:6f:64:89:7f:19:92:73:33:61:b1:20:52:dd:01:75:a3:88:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 5 00:01:17 2026 GMT Not After : Aug 3 23:59:59 2026 GMT Subject: serialNumber=7c69a51cea39e3683ab24e65d3f1cab99d783532e9662b9449317c71803f78b2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5a:eb:e8:da:c5:22:99:cf:7f:73:46:54:f0: 47:ba:2a:55:86:59:47:7a:f1:ff:95:09:b2:3e:9f: 75:60:df:77:41:7b:99:01:d6:69:15:ec:5e:0f:31: 8e:68:e2:ae:5c:95:b2:bc:26:c8:23:04:de:2f:c9: b1:c5:c0:31:de:e3:c2:0b:73:bd:52:9a:66:87:2c: fe:17:70:17:fe:ac:19:06:97:8c:c6:f8:3f:59:6e: 8e:c9:a6:78:4a:a2:2f:ea:89:c8:92:da:6a:f3:45: 49:9f:59:ba:ba:02:2d:4a:84:18:37:a8:7e:ee:9d: 65:54:c0:36:56:f6:6d:dc:e1:a6:18:53:41:36:f4: e9:f3:6d:fa:ab:f4:af:7f:af:bd:73:ae:27:fb:5e: 8a:da:d8:6b:aa:75:9a:61:f6:d5:cc:31:84:fa:b7: cd:24:ba:a8:1f:0b:e4:23:fd:44:f7:89:e4:d2:27: 4b:e0:de:0c:da:6a:dc:db:e9:b1:5b:7d:31:40:e8: d4:f6:47:aa:b9:40:c4:eb:c6:39:7b:e5:a4:de:b7: 94:b6:e0:b4:f8:d7:bf:b4:c9:b4:b9:dd:44:86:99: 93:e6:f4:c4:b7:ab:00:60:23:ff:3b:39:4e:5d:67: 0c:c3:c2:60:95:da:01:f4:ee:07:4d:5e:0a:98:ac: 32:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:85:F5:72:9E:1A:02:3C:A2:13:BC:FE:7F:53:8B:65:23:1E:DE:8D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a98280ac-f6cb-4ddb-87c8-1ff6f5054f79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:4800::/40 Signature Algorithm: sha256WithRSAEncryption 14:6b:41:98:76:81:a4:45:43:c9:60:48:90:16:89:4c:dc:4e: c0:5a:3c:7f:47:60:f1:ec:1f:9d:df:2f:f8:0c:5e:b0:ce:4e: 5d:24:38:39:55:f7:8c:38:29:f6:40:57:4d:6b:0b:ef:e1:16: 9b:32:75:fa:b3:dc:06:95:08:0f:c8:f7:47:56:f5:ca:fa:2e: 54:54:ce:b3:5a:6d:ed:4b:37:99:ec:6e:c6:d9:46:a4:48:67: 7c:50:fb:b7:86:ed:e5:96:71:16:f0:ea:81:14:73:fb:a0:30: 18:d8:f9:e3:62:25:35:4d:9c:f5:a9:2e:2c:6b:a3:2b:87:f3: de:e4:8c:32:05:e3:d9:9f:d8:15:bf:f3:71:02:c0:81:a3:d5: de:5c:24:77:36:56:27:b6:9b:16:b7:00:08:e6:c4:d1:ca:f6: 49:50:2f:ab:2c:c0:2c:13:d7:85:14:51:28:e3:43:74:21:7d: 16:c4:ac:a7:55:48:64:6d:61:30:65:16:01:3a:ff:c6:c7:27: 3c:d1:03:d3:9a:f8:3b:9a:04:6b:d2:f4:10:4a:fd:bd:2e:db: 3a:fa:46:62:1b:4a:ee:37:70:00:48:43:cb:2c:a8:12:43:a4: 29:25:ec:96:17:8b:a5:d6:0b:15:15:ae:22:b4:00:4b:5b:49: 29:a5:dd:b7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeLhvZIl/GZJzM2GxIFLdAXWjiIwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwNTAwMDExN1oX DTI2MDgwMzIzNTk1OVowejFJMEcGA1UEBRNAN2M2OWE1MWNlYTM5ZTM2ODNhYjI0 ZTY1ZDNmMWNhYjk5ZDc4MzUzMmU5NjYyYjk0NDkzMTdjNzE4MDNmNzhiMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lrr6NrFIpnPf3NGVPBHuipVhllH evH/lQmyPp91YN93QXuZAdZpFexeDzGOaOKuXJWyvCbIIwTeL8mxxcAx3uPCC3O9 Uppmhyz+F3AX/qwZBpeMxvg/WW6OyaZ4SqIv6onIktpq80VJn1m6ugItSoQYN6h+ 7p1lVMA2VvZt3OGmGFNBNvTp8236q/Svf6+9c64n+16K2thrqnWaYfbVzDGE+rfN JLqoHwvkI/1E94nk0idL4N4M2mrc2+mxW30xQOjU9kequUDE68Y5e+Wk3reUtuC0 +Ne/tMm0ud1EhpmT5vTEt6sAYCP/OzlOXWcMw8JgldoB9O4HTV4KmKwyRwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFL2F9XKeGgI8ohO8/n9Ti2UjHt6NMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2E5ODI4MGFjLWY2Y2ItNGRkYi04N2M4LTFmZjZmNTA1NGY3OS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9EgwDQYJKoZIhvcNAQELBQADggEBABRrQZh2gaRFQ8lgSJAW iUzcTsBaPH9HYPHsH53fL/gMXrDOTl0kODlV94w4KfZAV01rC+/hFpsydfqz3AaV CA/I90dW9cr6LlRUzrNabe1LN5nsbsbZRqRIZ3xQ+7eG7eWWcRbw6oEUc/ugMBjY +eNiJTVNnPWpLixroyuH897kjDIF49mf2BW/83ECwIGj1d5cJHc2Vie2mxa3AAjm xNHK9klQL6sswCwT14UUUSjjQ3QhfRbErKdVSGRtYTBlFgE6/8bHJzzRA9Oa+Dua BGvS9BBK/b0u2zr6RmIbSu43cABIQ8ssqBJDpCkl7JYXi6XWCxUVriK0AEtbSSml 3bc= -----END CERTIFICATE-----Generated at Wed May 13 00:42:10 2026 by rpki-client