$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa File: b82c715e-5b6d-400a-a87e-497b43db313b.roa (raw, json) Hash identifier: ZTZ+b9itjg3ZoTKOr4Fp8Cf7NXWORPqYYCoXrubKfVY= Subject key identifier: 42:DE:3B:B4:71:DD:E3:CD:EB:59:BF:5C:84:DB:DB:2E:52:35:4A:5B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5FF2A85C09540F95A046207F1DCDEA9A88C43B7F Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa Signing time: Mon 11 May 2026 00:01:03 +0000 ROA not before: Mon 11 May 2026 00:01:03 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:28c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:f2:a8:5c:09:54:0f:95:a0:46:20:7f:1d:cd:ea:9a:88:c4:3b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:01:03 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=121834371710529b4fa0232883488efb4a97a78797feede1aa56ff3e007e5f5a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c9:ed:ec:c4:85:75:27:a3:54:bd:2d:0a:4c: 9d:c3:ef:13:5c:f4:68:25:6e:32:fb:12:ed:1a:68: 8f:54:cb:dc:95:c0:c8:ec:b4:1b:39:d4:9b:5b:3d: 64:be:05:c3:63:83:c5:70:fa:a8:ac:b7:09:ed:3f: ec:8b:aa:ea:7b:45:fe:e1:96:aa:47:d3:d1:84:e7: 83:f2:1e:27:8e:f0:f9:8a:1b:aa:06:af:26:36:9b: de:4e:d9:26:0e:b5:0c:aa:cc:8a:d7:8a:70:7a:03: 19:4d:80:2e:37:1f:4e:c3:29:a9:13:b9:34:25:2d: 4a:0b:cb:67:0d:60:b7:7d:92:64:65:bb:ba:e8:ef: 1e:d3:00:37:ff:ce:65:f0:ff:e5:77:b9:38:91:a3: c6:e8:15:af:4e:9c:af:c3:b2:dc:11:8c:56:56:bb: d5:ff:e0:c1:c2:a0:38:1f:56:43:17:d5:f0:66:91: 7c:3b:b9:4c:4a:04:eb:06:05:fb:ae:38:f3:23:78: 90:13:d5:82:8d:a6:59:58:b4:1a:e1:d6:94:0b:5e: 67:a8:ac:56:a9:12:47:cb:18:90:87:33:47:81:64: 41:37:1a:33:9b:c4:ea:4b:8e:53:9f:12:92:0c:30: f0:82:54:56:0d:b1:58:0e:1d:ef:1c:58:18:81:79: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DE:3B:B4:71:DD:E3:CD:EB:59:BF:5C:84:DB:DB:2E:52:35:4A:5B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/b82c715e-5b6d-400a-a87e-497b43db313b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:28c0::/48 Signature Algorithm: sha256WithRSAEncryption 81:04:ea:a5:df:b5:af:5d:38:62:d2:33:aa:65:4f:96:87:bc: e6:eb:8f:f5:d7:03:19:0a:b6:5e:49:49:e5:ba:6c:a6:14:c6: 6d:41:65:6a:b8:0f:13:26:20:92:65:d1:fc:75:ce:9b:5c:61: f3:df:ef:ea:07:93:2e:d5:33:2a:7e:6d:15:45:e4:ec:77:b2: 07:6a:81:db:dd:6a:f8:56:5c:0b:8a:93:5a:ee:8c:83:f6:7c: a3:5f:46:ab:48:33:66:90:e5:64:31:b5:57:4e:e4:03:36:ce: 83:ad:31:b9:54:e2:06:6e:ac:13:f7:5d:d0:44:90:5c:ca:b3: ce:ab:9c:90:66:ee:78:ed:8b:94:bb:23:01:c3:d4:c7:3a:27: 6c:e5:ca:c6:4b:20:a4:75:df:14:80:97:b2:81:a5:d5:71:5a: f9:38:d4:73:50:29:ec:4a:fd:c9:21:bd:f4:c1:42:25:6d:4d: 7f:68:f0:06:9c:2d:72:17:28:63:e5:95:9c:be:d8:30:24:dc: dd:28:f2:41:6b:0e:28:38:99:de:3a:39:46:bc:8d:db:fd:0b: d3:f1:74:d5:25:6a:68:94:8e:96:ea:02:77:4f:58:e1:6a:bf: d6:57:7e:ba:dc:26:ab:53:68:66:22:5d:c7:11:91:e1:b9:7f: ba:c8:f3:e3 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUX/KoXAlUD5WgRiB/Hc3qmojEO38wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMDEwM1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAMTIxODM0MzcxNzEwNTI5YjRmYTAy MzI4ODM0ODhlZmI0YTk3YTc4Nzk3ZmVlZGUxYWE1NmZmM2UwMDdlNWY1YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcnt7MSFdSejVL0tCkydw+8TXPRo JW4y+xLtGmiPVMvclcDI7LQbOdSbWz1kvgXDY4PFcPqorLcJ7T/si6rqe0X+4Zaq R9PRhOeD8h4njvD5ihuqBq8mNpveTtkmDrUMqsyK14pwegMZTYAuNx9OwympE7k0 JS1KC8tnDWC3fZJkZbu66O8e0wA3/85l8P/ld7k4kaPG6BWvTpyvw7LcEYxWVrvV /+DBwqA4H1ZDF9XwZpF8O7lMSgTrBgX7rjjzI3iQE9WCjaZZWLQa4daUC15nqKxW qRJHyxiQhzNHgWRBNxozm8TqS45TnxKSDDDwglRWDbFYDh3vHFgYgXlUSwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFELeO7Rx3ePN61m/XITb2y5SNUpbMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2I4MmM3MTVlLTViNmQtNDAwYS1hODdlLTQ5N2I0M2RiMzEzYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8ijAMA0GCSqGSIb3DQEBCwUAA4IBAQCBBOql37WvXThi0jOq ZU+Wh7zm64/11wMZCrZeSUnlumymFMZtQWVquA8TJiCSZdH8dc6bXGHz3+/qB5Mu 1TMqfm0VReTsd7IHaoHb3Wr4VlwLipNa7oyD9nyjX0arSDNmkOVkMbVXTuQDNs6D rTG5VOIGbqwT913QRJBcyrPOq5yQZu547YuUuyMBw9THOids5crGSyCkdd8UgJey gaXVcVr5ONRzUCnsSv3JIb30wUIlbU1/aPAGnC1yFyhj5ZWcvtgwJNzdKPJBaw4o OJneOjlGvI3b/QvT8XTVJWpolI6W6gJ3T1jhar/WV3663CarU2hmIl3HEZHhuX+6 yPPj -----END CERTIFICATE-----Generated at Wed May 13 00:27:54 2026 by rpki-client