$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adb134df-976a-4bce-8390-41bf4647159d.roa File: adb134df-976a-4bce-8390-41bf4647159d.roa (raw, json) Hash identifier: gARS+nd6TbS8f6nICH9otE06gqB0ahP/PSbEwMG1oX8= Subject key identifier: 35:11:C1:8E:3B:3E:33:F5:D3:D2:B8:2E:78:12:F5:2A:30:D5:62:4B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 064789C4E9AF51A3B6082B2C20B7500A77DE816B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adb134df-976a-4bce-8390-41bf4647159d.roa Signing time: Sat 02 May 2026 00:20:04 +0000 ROA not before: Sat 02 May 2026 00:20:04 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:2880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:47:89:c4:e9:af:51:a3:b6:08:2b:2c:20:b7:50:0a:77:de:81:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:20:04 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=fedef5ee6af4696a97446e7f5a152fb4860b09ceaca229a62835f238942c8378, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1f:90:ef:2d:f0:fd:c6:86:38:2b:0c:85:5d: 6e:b5:fb:ae:45:8e:cc:eb:1e:3b:2d:7c:76:38:b9: 50:8f:1d:48:63:73:87:0b:f0:2f:34:00:1c:c9:f2: b1:7d:ae:51:b2:de:8e:3a:43:d0:03:ac:b1:f0:9b: 7c:83:ec:d7:7e:f4:68:1a:dd:e0:be:d1:13:d9:42: 2a:b5:e0:b9:02:c4:bb:b5:72:31:60:7b:ca:6a:e1: 0c:4b:f8:55:b7:52:76:aa:e5:d8:85:2b:b2:4f:6d: 43:24:bf:fc:d5:f4:42:3b:24:36:d9:1d:2d:91:c5: 99:c6:e2:7c:db:c2:dd:f8:5c:df:3c:81:5b:64:8b: 95:9b:5e:ff:09:49:99:73:18:64:98:79:23:48:57: 7a:3a:e5:18:3b:8e:06:5a:3a:6b:c3:2e:10:7f:59: 23:88:05:a3:4a:3d:c3:af:de:1c:f5:39:83:ad:2d: 95:35:bd:5d:c7:40:5a:21:e3:d9:2b:0b:07:0d:23: 1a:f4:b5:6b:50:52:4d:e2:a0:39:19:e7:b4:d9:59: f5:d5:f9:df:7b:e8:c4:dc:1d:43:dc:1a:83:de:21: 9a:34:f9:b2:03:9e:dd:19:db:75:6c:d2:77:4e:2f: 43:cc:98:38:08:c9:c7:ce:d7:12:7c:4a:33:b6:62: 5f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:11:C1:8E:3B:3E:33:F5:D3:D2:B8:2E:78:12:F5:2A:30:D5:62:4B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/adb134df-976a-4bce-8390-41bf4647159d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:2880::/48 Signature Algorithm: sha256WithRSAEncryption 5f:37:7c:4e:de:83:b2:ca:b3:1c:c6:16:33:d9:43:0b:a9:b5: c0:39:07:da:db:3c:1a:dc:3e:22:0d:5a:32:4f:4f:35:b4:cb: f4:13:54:ff:76:2d:65:4a:4e:be:c5:ff:8b:dc:39:36:c5:a5: cf:b2:4b:0d:36:79:46:11:09:c8:59:5d:68:65:26:5a:35:db: aa:bd:11:90:40:35:e9:76:9d:a5:c7:7d:5f:d4:2f:f0:b6:c8: 4d:44:63:51:c0:a9:14:92:4e:0f:76:e6:fd:58:9a:cf:0d:d8: ad:78:12:ac:ad:22:64:e7:2f:09:d4:45:bb:2d:95:1c:8f:55: 75:46:4d:b2:f4:cb:31:16:e5:ae:69:c2:84:44:1b:b9:b9:e1: 69:df:db:da:5b:5e:50:f4:b6:b8:9a:d5:f2:6f:ef:cd:94:22: 3a:37:f5:b4:99:6b:5f:c1:31:0f:56:b5:38:74:ab:7d:5b:4d: 68:59:87:92:84:d3:ea:67:80:9b:3c:ba:f1:97:dd:d6:94:73: de:f7:27:be:7b:3f:f2:77:2c:bb:e3:d6:3b:05:cd:31:82:e4: a5:1e:ea:51:9a:2d:68:53:3a:19:2c:5b:67:2a:1c:ba:43:02: a1:cc:1c:75:a8:97:3b:a0:b2:68:06:3b:cf:34:b9:90:08:a7: e3:b4:97:b1 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBkeJxOmvUaO2CCssILdQCnfegWswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMjAwNFoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNAZmVkZWY1ZWU2YWY0Njk2YTk3NDQ2 ZTdmNWExNTJmYjQ4NjBiMDljZWFjYTIyOWE2MjgzNWYyMzg5NDJjODM3ODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR+Q7y3w/caGOCsMhV1utfuuRY7M 6x47LXx2OLlQjx1IY3OHC/AvNAAcyfKxfa5Rst6OOkPQA6yx8Jt8g+zXfvRoGt3g vtET2UIqteC5AsS7tXIxYHvKauEMS/hVt1J2quXYhSuyT21DJL/81fRCOyQ22R0t kcWZxuJ828Ld+FzfPIFbZIuVm17/CUmZcxhkmHkjSFd6OuUYO44GWjprwy4Qf1kj iAWjSj3Dr94c9TmDrS2VNb1dx0BaIePZKwsHDSMa9LVrUFJN4qA5Gee02Vn11fnf e+jE3B1D3BqD3iGaNPmyA57dGdt1bNJ3Ti9DzJg4CMnHztcSfEoztmJf0wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFDURwY47PjP109K4LngS9Sow1WJLMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2FkYjEzNGRmLTk3NmEtNGJjZS04MzkwLTQxYmY0NjQ3MTU5ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6iiAMA0GCSqGSIb3DQEBCwUAA4IBAQBfN3xO3oOyyrMcxhYz 2UMLqbXAOQfa2zwa3D4iDVoyT081tMv0E1T/di1lSk6+xf+L3Dk2xaXPsksNNnlG EQnIWV1oZSZaNduqvRGQQDXpdp2lx31f1C/wtshNRGNRwKkUkk4Pdub9WJrPDdit eBKsrSJk5y8J1EW7LZUcj1V1Rk2y9MsxFuWuacKERBu5ueFp39vaW15Q9La4mtXy b+/NlCI6N/W0mWtfwTEPVrU4dKt9W01oWYeShNPqZ4CbPLrxl93WlHPe9ye+ez/y dyy749Y7Bc0xguSlHupRmi1oUzoZLFtnKhy6QwKhzBx1qJc7oLJoBjvPNLmQCKfj tJex -----END CERTIFICATE-----Generated at Tue May 12 23:57:10 2026 by rpki-client