$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa File: dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa (raw, json) Hash identifier: 21XtzlSOLPQ6ngwWlIzbSfFfa293GlS6UIrcoY1SDWE= Subject key identifier: B2:2C:D2:AC:AF:7F:EB:DE:2A:06:F7:96:57:29:83:60:E0:C3:04:37 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 68581B17C38602C42678EC645D1AC0CDE9A91E2B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa Signing time: Mon 11 May 2026 00:11:05 +0000 ROA not before: Mon 11 May 2026 00:11:05 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:2080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:58:1b:17:c3:86:02:c4:26:78:ec:64:5d:1a:c0:cd:e9:a9:1e:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:11:05 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=c0b4e562ca3d1bd71c516513a5beff1e4f167210e42873c11ab7ec18f54f93d1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:71:34:61:12:d2:95:a3:6c:25:64:de:ef:5b: 00:3b:aa:2f:d2:ba:45:7e:4f:fd:d9:e4:58:cc:86: 6b:3f:55:02:67:38:e0:eb:b2:51:69:d2:2e:50:e5: 61:56:c4:62:ee:f1:f3:e0:29:63:8a:fd:bd:4c:9c: 89:f5:eb:0e:32:80:8c:1c:48:e6:e5:ef:44:28:3d: 9e:0f:44:6d:31:03:9b:78:f3:82:8a:5d:f9:d5:4e: 71:dd:d0:01:81:17:ea:5d:d8:95:37:45:b6:83:1c: 93:9c:68:69:11:b1:36:5d:26:4f:3c:a4:8b:7a:60: 29:bf:da:01:ad:62:cb:a7:aa:0a:e4:ba:dd:20:c4: 52:bb:7c:e1:3d:66:11:e8:dc:fd:8c:74:87:40:69: da:05:31:4c:b2:ee:12:78:ab:24:32:f9:82:ba:53: 00:ab:62:48:e7:9c:62:db:9a:8e:80:f3:9d:45:c6: 87:da:1d:39:e0:6e:72:92:d4:bf:38:71:d1:93:cd: cf:f5:a8:91:52:18:de:bb:3c:56:93:21:d8:94:44: b2:ef:82:6c:84:1a:e0:55:92:a8:9a:7c:b1:95:65: 19:4f:29:ef:fc:ba:c2:5a:4b:db:e4:49:19:2e:d8: 53:89:83:4f:27:b7:2d:f2:2e:15:6e:ba:f1:5e:e1: ff:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2C:D2:AC:AF:7F:EB:DE:2A:06:F7:96:57:29:83:60:E0:C3:04:37 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dcaf212a-4300-4cf6-8cda-ee2d474aa5ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:2080::/48 Signature Algorithm: sha256WithRSAEncryption 17:65:71:b6:5e:e4:26:a9:8f:19:d2:5a:d4:23:b4:c1:5c:93: b8:88:7d:8f:2c:67:03:f9:a4:c1:3e:a0:40:4f:11:4c:25:6d: 1f:da:16:30:c6:4a:61:d9:03:49:52:68:19:69:33:cb:19:01: 5e:ad:be:73:a9:28:b2:7f:2c:64:80:02:91:da:3e:85:34:57: e2:af:2f:01:85:15:0c:c3:60:ca:ab:a9:b7:43:9a:17:04:7f: f6:29:1d:4e:ca:7b:26:3f:fd:63:cb:fb:91:35:79:75:3e:8e: 3e:e2:14:b6:06:04:a0:9f:38:d6:c8:a6:1b:ba:41:87:75:28: 68:bf:a6:45:20:0d:13:cf:8f:b5:1b:3d:d0:f5:0b:95:9e:7a: 90:c3:a4:fc:5f:1f:d6:dd:b4:c2:c9:d0:0c:59:da:2b:00:e5: 47:2b:9e:c6:16:97:76:87:d9:fd:d9:98:92:01:2f:7e:92:8c: 19:7a:cf:d5:36:78:84:34:58:cc:67:f1:8c:97:7c:e0:eb:85: 6d:2e:6b:f9:8f:59:35:6f:5f:f5:23:8f:c7:3a:63:52:ec:8e: 49:ef:3d:ce:4e:e9:18:bc:48:e8:cb:db:ba:90:27:0e:30:7d: 29:76:a2:c0:ec:b5:6c:10:3c:e4:69:72:06:0f:57:13:6e:8e: e9:0a:96:ec -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUaFgbF8OGAsQmeOxkXRrAzempHiswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMTEwNVoX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAYzBiNGU1NjJjYTNkMWJkNzFjNTE2 NTEzYTViZWZmMWU0ZjE2NzIxMGU0Mjg3M2MxMWFiN2VjMThmNTRmOTNkMTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHE0YRLSlaNsJWTe71sAO6ov0rpF fk/92eRYzIZrP1UCZzjg67JRadIuUOVhVsRi7vHz4Cljiv29TJyJ9esOMoCMHEjm 5e9EKD2eD0RtMQObePOCil351U5x3dABgRfqXdiVN0W2gxyTnGhpEbE2XSZPPKSL emApv9oBrWLLp6oK5LrdIMRSu3zhPWYR6Nz9jHSHQGnaBTFMsu4SeKskMvmCulMA q2JI55xi25qOgPOdRcaH2h054G5yktS/OHHRk83P9aiRUhjeuzxWkyHYlESy74Js hBrgVZKomnyxlWUZTynv/LrCWkvb5EkZLthTiYNPJ7ct8i4VbrrxXuH/rwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLIs0qyvf+veKgb3llcpg2DgwwQ3MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RjYWYyMTJhLTQzMDAtNGNmNi04Y2RhLWVlMmQ0NzRhYTVhYi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba8iCAMA0GCSqGSIb3DQEBCwUAA4IBAQAXZXG2XuQmqY8Z0lrU I7TBXJO4iH2PLGcD+aTBPqBATxFMJW0f2hYwxkph2QNJUmgZaTPLGQFerb5zqSiy fyxkgAKR2j6FNFfiry8BhRUMw2DKq6m3Q5oXBH/2KR1OynsmP/1jy/uRNXl1Po4+ 4hS2BgSgnzjWyKYbukGHdShov6ZFIA0Tz4+1Gz3Q9QuVnnqQw6T8Xx/W3bTCydAM WdorAOVHK57GFpd2h9n92ZiSAS9+kowZes/VNniENFjMZ/GMl3zg64VtLmv5j1k1 b1/1I4/HOmNS7I5J7z3OTukYvEjoy9u6kCcOMH0pdqLA7LVsEDzkaXIGD1cTbo7p Cpbs -----END CERTIFICATE-----Generated at Wed May 13 00:58:14 2026 by rpki-client