$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa File: c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa (raw, json) Hash identifier: wQEFcI0WfdfdEfbquraBzIpCAj+HXajF5kgGkjz70Hc= Subject key identifier: 17:9F:E8:25:61:85:27:99:3F:39:31:91:CB:50:ED:DD:EC:CF:CD:61 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 2F5CB0D818C7762C1BEB29601741F00A0212432B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa Signing time: Fri 08 May 2026 00:01:10 +0000 ROA not before: Fri 08 May 2026 00:01:10 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:a000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:5c:b0:d8:18:c7:76:2c:1b:eb:29:60:17:41:f0:0a:02:12:43:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 8 00:01:10 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=164f3fdcbbe54b68c7628cf015450ba3c430a4899ad128c191f7d8d8af3ba24e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:54:90:ba:54:07:52:77:58:2b:4e:f3:9c: 4b:d7:20:27:cd:34:06:72:99:f0:27:b9:2d:9d:6f: 4d:4f:a5:de:2e:db:57:b7:27:40:2d:59:d8:14:b9: b4:00:5d:e2:a7:cf:7f:66:4d:68:ff:d1:9a:d5:db: 79:97:25:2c:ca:fb:19:5f:fc:e4:e9:20:a2:df:57: 73:65:5c:2c:0e:c5:3d:46:59:ab:d1:1a:3b:58:d3: f4:66:c0:4c:eb:50:ed:77:e0:c2:1a:df:ca:24:3b: fc:2e:e9:10:0b:e0:cd:a2:c8:09:ec:83:30:83:de: 95:9c:0f:f9:89:f3:ae:7c:53:9a:25:36:d3:9d:7d: a7:80:ce:b2:5a:a4:67:37:7c:ea:3a:10:89:54:61: 34:b2:0a:8e:0e:bf:e9:fd:9e:f2:4c:bf:03:ea:ed: 3e:d8:15:57:a9:b8:ea:2f:d7:64:e9:fd:2b:13:8e: 85:66:b9:b8:3f:cd:67:b5:33:b6:cf:24:75:b3:4a: 3f:63:66:2a:ae:94:da:e8:17:60:4f:2c:e4:f5:ce: 53:e8:8a:ad:b6:ee:8e:ea:a0:50:6c:94:d5:3e:a2: 21:77:e7:70:2f:08:55:84:7b:2f:e8:de:e7:7e:4e: 4d:24:dd:14:d9:d9:ad:42:f9:0c:d8:a6:a0:a0:61: 5e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9F:E8:25:61:85:27:99:3F:39:31:91:CB:50:ED:DD:EC:CF:CD:61 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/c7b1c1ce-ca99-4712-96c8-2e4dc35d25f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:a000::/40 Signature Algorithm: sha256WithRSAEncryption 2f:65:98:06:89:39:7c:24:8f:f5:2f:de:60:05:65:8b:00:d2: dd:c3:c4:54:27:75:79:a5:04:a4:09:c2:d4:7f:f8:f6:68:c9: 51:4f:62:49:e3:df:e6:2e:0d:9e:2f:e6:22:34:85:9b:53:4a: 86:80:a2:8d:ac:a8:54:18:13:87:0d:ed:ab:cc:b4:89:ec:0e: be:ad:8f:02:e0:ac:d3:f4:00:ca:d0:a1:09:93:08:72:de:82: 25:e8:6e:7f:bb:56:78:6c:83:c7:b3:8e:61:f5:e3:99:55:c4: 7f:75:19:98:85:dd:c4:9b:4e:b0:17:5b:02:cf:d6:6b:9c:b4: c8:ef:12:2a:9d:4c:91:58:55:f3:49:d7:7e:f5:a3:2b:45:26: 2b:45:ec:24:e3:4e:42:e5:a4:f7:05:f9:98:f6:b2:47:7c:74: 19:f0:55:10:a7:e1:8c:db:a8:34:73:c2:d3:0d:19:5f:bb:d7: 8c:fa:ad:de:1b:82:4e:bc:d5:4a:dd:86:22:ce:87:f6:d5:7f: 5f:29:2e:73:68:b0:b1:62:79:4d:78:62:2e:62:0c:45:63:90: e8:a6:64:52:1a:cb:98:b4:fc:cd:52:50:07:9e:2d:26:08:08: 29:b4:65:52:a3:89:76:12:0d:c8:d0:64:3a:86:55:5a:9f:76: a4:e9:b5:aa -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUL1yw2BjHdiwb6ylgF0HwCgISQyswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwODAwMDExMFoX DTI2MDgwNjIzNTk1OVowejFJMEcGA1UEBRNAMTY0ZjNmZGNiYmU1NGI2OGM3NjI4 Y2YwMTU0NTBiYTNjNDMwYTQ4OTlhZDEyOGMxOTFmN2Q4ZDhhZjNiYTI0ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpdUkLpUB1J3WCtO85xL1yAnzTQG cpnwJ7ktnW9NT6XeLttXtydALVnYFLm0AF3ip89/Zk1o/9Ga1dt5lyUsyvsZX/zk 6SCi31dzZVwsDsU9Rlmr0Ro7WNP0ZsBM61Dtd+DCGt/KJDv8LukQC+DNosgJ7IMw g96VnA/5ifOufFOaJTbTnX2ngM6yWqRnN3zqOhCJVGE0sgqODr/p/Z7yTL8D6u0+ 2BVXqbjqL9dk6f0rE46FZrm4P81ntTO2zyR1s0o/Y2YqrpTa6BdgTyzk9c5T6Iqt tu6O6qBQbJTVPqIhd+dwLwhVhHsv6N7nfk5NJN0U2dmtQvkM2KagoGFeCQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFBef6CVhhSeZPzkxkctQ7d3sz81hMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2M3YjFjMWNlLWNhOTktNDcxMi05NmM4LTJlNGRjMzVkMjVmMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9KAwDQYJKoZIhvcNAQELBQADggEBAC9lmAaJOXwkj/Uv3mAF ZYsA0t3DxFQndXmlBKQJwtR/+PZoyVFPYknj3+YuDZ4v5iI0hZtTSoaAoo2sqFQY E4cN7avMtInsDr6tjwLgrNP0AMrQoQmTCHLegiXobn+7Vnhsg8ezjmH145lVxH91 GZiF3cSbTrAXWwLP1muctMjvEiqdTJFYVfNJ1371oytFJitF7CTjTkLlpPcF+Zj2 skd8dBnwVRCn4YzbqDRzwtMNGV+714z6rd4bgk681UrdhiLOh/bVf18pLnNosLFi eU14Yi5iDEVjkOimZFIay5i0/M1SUAeeLSYICCm0ZVKjiXYSDcjQZDqGVVqfdqTp tao= -----END CERTIFICATE-----Generated at Tue May 12 23:26:59 2026 by rpki-client