$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa File: cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa (raw, json) Hash identifier: Ylg6RsykJZoVdsZOOCRWJBjkPudgg/3JGzrlafhBJDU= Subject key identifier: 3D:16:20:65:78:8D:B1:AA:63:A5:DC:77:94:2D:77:54:00:5E:A0:6B Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 19FB1AEC81B11FE14F6A76595F6097887CE34E64 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa Signing time: Sat 09 May 2026 00:00:42 +0000 ROA not before: Sat 09 May 2026 00:00:42 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:10c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:fb:1a:ec:81:b1:1f:e1:4f:6a:76:59:5f:60:97:88:7c:e3:4e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 9 00:00:42 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=d547404a040560188e18aac97ef4c00087124cd9b41a023a5ac8602c8948496f, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d6:c3:56:1d:c8:fc:5c:36:fd:57:5e:72:ea: 01:b9:a5:3b:c7:41:ec:7c:b7:a8:fa:04:21:fc:31: a7:60:67:71:48:ed:dd:be:1b:0b:a8:c8:73:ff:15: 1f:6f:86:5a:f3:e0:a5:ca:13:32:5a:4b:4b:dd:c3: 23:b9:ff:9e:57:34:5c:14:0a:4f:ca:fb:86:74:3e: e4:4c:81:6b:91:49:6a:ac:73:a2:78:8c:95:12:ae: 1f:91:36:4d:fa:6a:c0:8a:af:e4:f2:33:8f:c7:11: 56:87:48:66:fe:e6:8a:2e:55:9a:82:f2:5f:12:53: 19:82:b1:a9:cf:40:e9:79:de:58:28:36:3a:97:b6: 0b:f1:00:5e:6d:f3:4d:af:dc:b5:37:c2:b8:21:f5: 22:f8:15:92:86:09:97:a0:c9:9f:b5:70:11:d4:1b: e2:72:c7:7b:36:1d:78:20:e0:57:0e:03:76:6b:fb: b9:6f:66:76:3f:b8:d6:2a:aa:74:12:bd:d4:13:40: 3a:3d:1b:69:b9:13:5d:78:11:45:ad:7b:73:f0:86: 06:40:93:59:ef:83:9f:71:26:72:62:4f:da:2e:6d: 59:8f:6b:ac:ca:54:43:9e:ec:bd:2c:e2:7a:a3:cc: d3:57:53:63:f2:2a:32:73:25:f4:e3:da:70:9a:e5: 93:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:16:20:65:78:8D:B1:AA:63:A5:DC:77:94:2D:77:54:00:5E:A0:6B X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/cfa7acf8-0069-4fb1-819a-a46d2352ce03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:10c0::/48 Signature Algorithm: sha256WithRSAEncryption 6b:e3:c4:4d:6f:39:c1:1c:95:7b:e6:98:59:44:e4:69:f6:3a: 72:77:3e:5b:fe:ea:43:c2:41:49:03:fc:e0:19:92:3a:01:ae: 4b:87:cf:b6:47:2f:2b:fb:c6:26:c1:17:ac:d2:2f:87:95:d1: 89:8e:10:6d:da:5e:80:92:96:ec:44:16:b6:93:12:52:98:82: a9:d7:08:d3:21:ca:d7:73:98:5b:74:43:e6:53:e4:5b:34:dd: a5:f7:20:04:9e:d0:07:3f:09:92:a3:f0:f6:7f:61:3f:80:8d: 95:85:ed:1a:19:d7:7d:6e:d5:e9:49:60:c3:b7:ad:28:08:ba: a6:ed:58:70:a0:1e:40:49:18:dc:e2:73:6a:bc:41:8a:88:09: 3b:8d:92:6e:3a:b2:e9:af:de:cb:3a:29:f0:d1:b3:b8:a2:ae: 9c:13:3a:93:49:c6:9f:c8:28:92:d3:d7:da:f3:72:f0:ec:90: fa:fd:af:a2:be:09:f4:61:28:9c:eb:45:79:6d:dd:cc:10:55: 03:f2:f0:bd:d0:ee:88:90:92:14:a2:4b:af:e6:63:0a:23:5e: f8:ce:51:06:74:65:df:c8:aa:99:d0:9b:7f:dd:97:8d:b5:3d: 87:2d:2c:17:be:cc:77:08:53:8f:de:ce:20:fe:d3:8a:9d:ea: 01:2c:31:c8 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUGfsa7IGxH+FPanZZX2CXiHzjTmQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwOTAwMDA0MloX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAZDU0NzQwNGEwNDA1NjAxODhlMThh YWM5N2VmNGMwMDA4NzEyNGNkOWI0MWEwMjNhNWFjODYwMmM4OTQ4NDk2ZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39bDVh3I/Fw2/VdecuoBuaU7x0Hs fLeo+gQh/DGnYGdxSO3dvhsLqMhz/xUfb4Za8+ClyhMyWktL3cMjuf+eVzRcFApP yvuGdD7kTIFrkUlqrHOieIyVEq4fkTZN+mrAiq/k8jOPxxFWh0hm/uaKLlWagvJf ElMZgrGpz0Dped5YKDY6l7YL8QBebfNNr9y1N8K4IfUi+BWShgmXoMmftXAR1Bvi csd7Nh14IOBXDgN2a/u5b2Z2P7jWKqp0Er3UE0A6PRtpuRNdeBFFrXtz8IYGQJNZ 74OfcSZyYk/aLm1Zj2usylRDnuy9LOJ6o8zTV1Nj8ioycyX049pwmuWTGQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFD0WIGV4jbGqY6Xcd5Qtd1QAXqBrMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2NmYTdhY2Y4LTAwNjktNGZiMS04MTlhLWE0NmQyMzUyY2UwMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/xDAMA0GCSqGSIb3DQEBCwUAA4IBAQBr48RNbznBHJV75phZ RORp9jpydz5b/upDwkFJA/zgGZI6Aa5Lh8+2Ry8r+8YmwRes0i+HldGJjhBt2l6A kpbsRBa2kxJSmIKp1wjTIcrXc5hbdEPmU+RbNN2l9yAEntAHPwmSo/D2f2E/gI2V he0aGdd9btXpSWDDt60oCLqm7VhwoB5ASRjc4nNqvEGKiAk7jZJuOrLpr97LOinw 0bO4oq6cEzqTScafyCiS09fa83Lw7JD6/a+ivgn0YSic60V5bd3MEFUD8vC90O6I kJIUokuv5mMKI174zlEGdGXfyKqZ0Jt/3ZeNtT2HLSwXvsx3CFOP3s4g/tOKneoB LDHI -----END CERTIFICATE-----Generated at Tue May 12 23:33:56 2026 by rpki-client