$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa File: b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa (raw, json) Hash identifier: q7uBld3iYbp8Q1Blg+xegpOiJZQrmUcmOmmoED5cCdI= Subject key identifier: 4D:D3:F9:D6:B2:07:E5:12:4D:E7:76:98:50:EF:84:1A:59:B2:5C:33 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2C8089B1AF4D9441A81527455304B6115920BF3C Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa Signing time: Sat 09 May 2026 00:00:07 +0000 ROA not before: Sat 09 May 2026 00:00:07 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:8080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:80:89:b1:af:4d:94:41:a8:15:27:45:53:04:b6:11:59:20:bf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:00:07 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=6f98c7d4a1d71950e9fb0eb74fde28a35c22e33bcefb01e6e939e01c5d979ac2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:d5:60:59:a6:e9:43:08:9b:31:03:8a:15: 77:ba:e1:e0:21:6d:2e:3a:a6:4e:10:96:d2:aa:88: bc:8a:27:c3:43:73:ba:a6:52:e5:69:0c:0c:32:a8: b7:64:95:f9:0c:6e:0f:cb:37:3c:6b:24:09:d4:9e: 89:96:a5:e8:6f:6a:25:fd:dd:cf:b9:49:b2:a6:70: 80:fb:48:e2:5d:d0:5c:e7:52:2d:c7:58:03:ec:ca: 8f:80:2b:9b:1d:f6:d9:8b:f0:5b:5e:07:be:3d:d2: 98:8f:74:5b:dd:0c:4f:4d:dc:1d:8c:46:ee:93:2c: f8:09:13:0b:06:bd:5c:7a:8b:c9:4a:0d:57:90:0d: 02:91:69:82:a0:04:81:4b:f0:1d:a4:6a:4c:d6:11: 3f:53:8d:09:98:d6:19:76:61:53:37:50:92:bc:17: b8:94:d8:20:b9:42:40:f5:81:30:49:0d:1d:ab:ae: 54:dd:80:6d:54:0a:a1:24:c3:46:1b:ba:1d:17:eb: 26:49:f3:24:03:2b:be:24:59:f4:90:18:81:e7:36: 50:b7:db:6a:0f:f3:e6:3c:7b:59:76:0f:74:73:2d: 05:3e:bc:b6:eb:7f:a5:b5:00:28:91:e2:2f:ac:82: 61:51:e3:5a:47:35:d7:c8:1e:73:3c:fb:05:1f:41: c6:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:F9:D6:B2:07:E5:12:4D:E7:76:98:50:EF:84:1A:59:B2:5C:33 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b1a24a25-9b3a-42e4-87bd-b212f7fd79c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:8080::/48 Signature Algorithm: sha256WithRSAEncryption 1e:d3:a3:ae:65:41:eb:c8:ca:03:aa:2d:d6:b1:60:91:03:2d: d5:23:93:25:2d:bc:7b:c9:06:49:20:89:bf:92:14:5a:43:a7: 6a:23:8f:e2:ce:aa:4b:2f:34:64:7c:6a:c9:4e:4b:39:ce:e4: 5c:42:bb:fa:fc:2e:5b:a0:ed:a0:1d:c1:4f:99:07:1e:c7:db: b6:2d:4d:e1:d3:3d:b9:a8:e4:91:bb:84:73:ee:2d:93:ff:32: 96:46:02:f9:09:76:bc:20:43:e3:cd:77:d8:cb:8a:64:cb:a8: 40:f6:fe:93:fe:db:b3:31:57:76:bd:9c:d1:ff:52:3f:19:7e: 3d:f3:39:cd:83:49:0e:2a:4a:53:ef:e4:fa:bb:d3:7c:ba:9a: 07:e9:61:3c:2d:6c:06:01:19:6c:18:74:47:42:e3:c0:2d:70: c8:7c:63:c4:aa:d0:ee:8c:ee:cf:75:a3:6e:87:ae:77:f9:82: df:27:42:9a:ba:a6:9d:d5:7a:f5:71:8a:21:65:cf:99:ee:82: 1d:fe:13:17:3d:f0:e5:c0:8f:f5:ee:ad:10:af:58:42:41:40: 5e:ef:40:b4:be:e8:08:da:f5:78:a5:72:ae:46:7c:30:80:56: a2:a9:ab:d2:19:5b:5e:ea:4a:fd:6a:7b:90:a2:e3:1e:c8:ba: 18:a7:0e:e9 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIULICJsa9NlEGoFSdFUwS2EVkgvzwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDAwN1oX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNANmY5OGM3ZDRhMWQ3MTk1MGU5ZmIw ZWI3NGZkZTI4YTM1YzIyZTMzYmNlZmIwMWU2ZTkzOWUwMWM1ZDk3OWFjMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWzVYFmm6UMImzEDihV3uuHgIW0u OqZOEJbSqoi8iifDQ3O6plLlaQwMMqi3ZJX5DG4Pyzc8ayQJ1J6JlqXob2ol/d3P uUmypnCA+0jiXdBc51Itx1gD7MqPgCubHfbZi/BbXge+PdKYj3Rb3QxPTdwdjEbu kyz4CRMLBr1ceovJSg1XkA0CkWmCoASBS/AdpGpM1hE/U40JmNYZdmFTN1CSvBe4 lNgguUJA9YEwSQ0dq65U3YBtVAqhJMNGG7odF+smSfMkAyu+JFn0kBiB5zZQt9tq D/PmPHtZdg90cy0FPry263+ltQAokeIvrIJhUeNaRzXXyB5zPPsFH0HG1wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE3T+dayB+USTed2mFDvhBpZslwzMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2IxYTI0YTI1LTliM2EtNDJlNC04N2JkLWIyMTJmN2ZkNzljOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8oCAMA0GCSqGSIb3DQEBCwUAA4IBAQAe06OuZUHryMoDqi3W sWCRAy3VI5MlLbx7yQZJIIm/khRaQ6dqI4/izqpLLzRkfGrJTks5zuRcQrv6/C5b oO2gHcFPmQcex9u2LU3h0z25qOSRu4Rz7i2T/zKWRgL5CXa8IEPjzXfYy4pky6hA 9v6T/tuzMVd2vZzR/1I/GX498znNg0kOKkpT7+T6u9N8upoH6WE8LWwGARlsGHRH QuPALXDIfGPEqtDujO7PdaNuh653+YLfJ0Kauqad1Xr1cYohZc+Z7oId/hMXPfDl wI/17q0Qr1hCQUBe70C0vugI2vV4pXKuRnwwgFaiqavSGVte6kr9anuQouMeyLoY pw7p -----END CERTIFICATE-----Generated at Tue May 12 23:27:21 2026 by rpki-client