$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa File: d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa (raw, json) Hash identifier: crYulumciwaQHiihjdqXwqO7CD1sGsiaeMz+I7Xi/7Y= Subject key identifier: 51:69:BE:2E:0E:A1:39:0D:9B:E4:0D:57:9B:76:56:47:2C:D3:5D:D0 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7000FB57B7E4ACC1F3E642C4C4E3955506042087 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa Signing time: Mon 11 May 2026 00:21:37 +0000 ROA not before: Mon 11 May 2026 00:21:37 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:8880::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:00:fb:57:b7:e4:ac:c1:f3:e6:42:c4:c4:e3:95:55:06:04:20:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:21:37 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=a5fd44f25fcbfc4c5578892b7227b4827073f4f0174c7bb17d1f89d741291dd8, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0f:74:64:df:2e:c2:27:fc:56:fd:46:7f:e6: 4b:91:58:71:7c:34:28:2b:ed:0b:85:5b:41:b6:4d: 2c:ee:28:ca:79:a0:46:c6:cd:59:de:8b:ff:74:6b: 51:42:25:75:b5:51:38:54:30:fd:5d:c6:a6:e2:dc: 08:29:30:db:3d:24:99:3a:5e:42:6e:21:53:b1:5e: 96:74:b6:c5:46:f8:84:d6:96:2b:ba:4b:eb:55:a3: dd:a4:78:0d:f8:b7:76:ba:51:0b:52:2c:37:d4:68: 51:14:9a:68:7f:0c:19:10:1e:a1:44:a1:f6:7c:19: f4:29:c9:2c:b8:72:7d:81:45:3e:55:60:2c:4c:08: 15:bd:3b:26:88:ab:f8:7b:2c:44:6b:07:7b:71:f7: 47:e8:d9:ea:5e:71:1f:e1:83:92:f1:0f:48:91:d9: d1:ef:0d:51:42:19:11:08:8f:eb:46:70:6c:a8:8c: 57:02:84:04:e8:1a:b6:d9:8f:d4:67:86:66:23:0e: 38:1b:3a:0f:e5:33:f9:c2:a6:69:d8:f4:ce:93:ff: 48:37:51:e0:81:4b:b7:1b:c9:55:cb:1d:8b:18:80: 6b:2a:eb:77:38:e9:02:69:90:60:51:7e:22:41:15: 1f:8a:1d:7e:57:2e:85:01:11:5e:fc:28:35:14:03: f4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:69:BE:2E:0E:A1:39:0D:9B:E4:0D:57:9B:76:56:47:2C:D3:5D:D0 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/d51f6a86-d3e3-446c-a538-46f2a7e7724a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:8880::/48 Signature Algorithm: sha256WithRSAEncryption 92:6d:f6:15:62:ad:68:c6:8a:44:8e:3c:a9:cc:2d:36:ca:74: f4:9f:01:c4:72:81:37:2c:66:69:ce:ce:35:b2:f2:5e:24:67: 4c:d2:42:86:cc:ba:4b:ad:fb:ec:54:51:e0:94:88:7d:70:9a: e1:e1:37:6a:d0:f8:6b:36:a9:eb:09:e6:46:23:df:cc:e4:c3: f1:84:b2:fd:fd:30:2c:0b:f0:35:b3:3d:19:03:5d:b5:ad:c2: 58:29:d2:43:69:b5:6c:c3:7c:b9:e6:9f:bb:6d:df:31:64:d3: 49:e1:d2:33:42:88:7f:17:b8:43:0d:f5:92:5e:5a:55:58:da: 2f:11:68:16:94:55:3b:b3:57:52:4d:3a:db:51:2b:b3:f1:d1: fd:fa:09:2a:4c:09:1e:58:34:87:3e:35:76:8c:8c:0d:b8:cf: f5:37:05:d9:06:17:d0:e2:b6:ba:1f:b3:ae:2e:c2:15:40:75: 5d:58:38:60:6c:86:b0:0e:93:79:f8:90:e7:11:0e:7c:65:4e: 6b:3a:01:b6:1e:90:96:9b:ea:fa:21:4b:a2:a4:46:a3:fd:2c: 8a:88:1b:34:68:7e:10:5a:e5:05:5b:ea:de:39:c9:3c:fe:30: 68:3b:83:e5:d5:7b:d4:1d:bd:c6:bc:7c:e6:24:69:c9:d7:be: 0f:d0:05:73 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUcAD7V7fkrMHz5kLExOOVVQYEIIcwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMjEzN1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAYTVmZDQ0ZjI1ZmNiZmM0YzU1Nzg4 OTJiNzIyN2I0ODI3MDczZjRmMDE3NGM3YmIxN2QxZjg5ZDc0MTI5MWRkODEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtg90ZN8uwif8Vv1Gf+ZLkVhxfDQo K+0LhVtBtk0s7ijKeaBGxs1Z3ov/dGtRQiV1tVE4VDD9Xcam4twIKTDbPSSZOl5C biFTsV6WdLbFRviE1pYrukvrVaPdpHgN+Ld2ulELUiw31GhRFJpofwwZEB6hRKH2 fBn0KcksuHJ9gUU+VWAsTAgVvTsmiKv4eyxEawd7cfdH6NnqXnEf4YOS8Q9IkdnR 7w1RQhkRCI/rRnBsqIxXAoQE6Bq22Y/UZ4ZmIw44GzoP5TP5wqZp2PTOk/9IN1Hg gUu3G8lVyx2LGIBrKut3OOkCaZBgUX4iQRUfih1+Vy6FARFe/Cg1FAP0QwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFFpvi4OoTkNm+QNV5t2Vkcs013QMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2Q1MWY2YTg2LWQzZTMtNDQ2Yy1hNTM4LTQ2ZjJhN2U3NzI0YS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaYYiAMA0GCSqGSIb3DQEBCwUAA4IBAQCSbfYVYq1oxopEjjyp zC02ynT0nwHEcoE3LGZpzs41svJeJGdM0kKGzLpLrfvsVFHglIh9cJrh4Tdq0Phr NqnrCeZGI9/M5MPxhLL9/TAsC/A1sz0ZA121rcJYKdJDabVsw3y55p+7bd8xZNNJ 4dIzQoh/F7hDDfWSXlpVWNovEWgWlFU7s1dSTTrbUSuz8dH9+gkqTAkeWDSHPjV2 jIwNuM/1NwXZBhfQ4ra6H7OuLsIVQHVdWDhgbIawDpN5+JDnEQ58ZU5rOgG2HpCW m+r6IUuipEaj/SyKiBs0aH4QWuUFW+reOck8/jBoO4Pl1XvUHb3GvHzmJGnJ174P 0AVz -----END CERTIFICATE-----Generated at Tue May 12 23:53:09 2026 by rpki-client