$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd615635-78d1-4128-b9c0-875d0c12c31d.roa File: dd615635-78d1-4128-b9c0-875d0c12c31d.roa (raw, json) Hash identifier: u/67S9mePl4HY+YLthUgeq40LySKB2QSyEDrxQdVSEw= Subject key identifier: EA:1C:3C:26:7A:C7:67:4D:C7:8F:E8:02:2C:E0:CE:62:B7:98:E6:58 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7FB0283D8308C76E5AAA365227066B698687C1E3 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd615635-78d1-4128-b9c0-875d0c12c31d.roa Signing time: Tue 12 May 2026 00:01:33 +0000 ROA not before: Tue 12 May 2026 00:01:33 +0000 ROA not after: Mon 10 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf2:a000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b0:28:3d:83:08:c7:6e:5a:aa:36:52:27:06:6b:69:86:87:c1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 12 00:01:33 2026 GMT Not After : Aug 10 23:59:59 2026 GMT Subject: serialNumber=df56bf6468216399216dad58219f0b74b44b4f1f8d134745829104f11f1b53bf, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:41:67:20:bf:45:a7:8e:34:dd:fc:bb:19:28: c6:87:11:c0:a6:0f:93:0a:f6:84:3d:7d:83:6c:83: 83:33:31:4b:31:31:6e:27:99:a7:25:aa:bd:56:ef: c0:df:6b:f8:3c:14:8e:00:15:05:5b:11:f1:8d:42: 63:5c:d8:73:cb:7a:bd:ee:25:cb:76:13:72:08:af: 42:e0:b6:74:45:df:50:94:0d:7d:8a:55:3f:3c:f9: 3b:c8:bb:8b:39:6c:e1:03:9f:1b:cb:bc:ae:bc:53: be:79:cd:c5:c8:d7:24:26:87:38:5d:c3:ec:2d:05: d8:bc:e3:9d:b4:db:dd:d5:26:f1:88:2c:87:bc:e3: e0:cd:06:40:65:64:b1:9b:a6:3c:11:ba:ed:33:c6: e2:aa:40:30:b7:7d:3e:23:c5:e4:3c:68:60:27:2e: d4:dd:c4:13:88:eb:16:10:cf:27:d0:8d:be:47:f1: 96:08:d3:6d:d1:f3:d2:6f:1f:ac:e4:11:22:d2:05: f5:47:65:42:b2:c4:07:fd:86:86:d0:db:67:9f:d7: b2:97:94:81:20:41:6e:52:8d:76:95:65:7d:0c:7c: a6:8a:58:dc:6b:6a:93:61:1d:f4:f9:a4:9c:5f:d0: 9d:b1:20:e7:11:e2:ac:34:5f:4e:2b:8e:2e:99:ae: 5f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1C:3C:26:7A:C7:67:4D:C7:8F:E8:02:2C:E0:CE:62:B7:98:E6:58 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dd615635-78d1-4128-b9c0-875d0c12c31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf2:a000::/40 Signature Algorithm: sha256WithRSAEncryption 26:0a:68:45:a2:ca:2b:49:70:ec:0f:b7:f9:c6:53:e9:61:b1: cf:01:18:f4:9b:00:58:eb:12:6e:76:78:76:34:2d:e7:97:87: 15:6a:ad:86:00:ab:f7:f4:9f:75:ef:96:6b:a6:c7:4c:dd:f7: c7:88:5d:44:0d:f5:c2:81:f2:74:f7:22:92:bf:0f:06:e1:5b: 59:78:d8:3a:73:c8:3e:bd:a8:8a:b1:83:fe:0f:28:15:b9:83: 17:60:9b:11:51:e0:db:64:f3:90:0a:01:f0:69:ed:2d:ce:d9: 02:79:1b:25:66:5a:13:ec:5c:6e:3f:0d:f8:ce:3a:03:24:15: 4d:05:f6:5f:85:23:ec:d5:18:18:3c:a2:f0:e6:4c:c3:ff:1a: a1:5d:d1:9a:49:8c:29:07:c3:04:01:1c:ea:d0:c1:30:7f:e7: 4a:5d:07:bb:bd:b7:f3:7e:13:be:ce:bf:4f:f1:c5:46:9b:67: 88:a5:96:92:83:6f:bb:ba:34:33:aa:fd:57:67:07:b7:c6:e3: 23:f9:80:d5:ce:60:00:f8:e7:70:ed:26:75:6d:ce:7f:46:56: 48:f9:e1:f5:0a:45:66:84:a7:bf:1c:f3:8d:c3:15:1a:c4:2b: 55:e8:b5:3e:11:83:83:c4:2f:4f:ec:03:d1:1e:86:e9:df:0c: a8:04:a2:25 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUf7AoPYMIx25aqjZSJwZraYaHweMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMjAwMDEzM1oX DTI2MDgxMDIzNTk1OVowejFJMEcGA1UEBRNAZGY1NmJmNjQ2ODIxNjM5OTIxNmRh ZDU4MjE5ZjBiNzRiNDRiNGYxZjhkMTM0NzQ1ODI5MTA0ZjExZjFiNTNiZjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUFnIL9Fp4403fy7GSjGhxHApg+T CvaEPX2DbIODMzFLMTFuJ5mnJaq9Vu/A32v4PBSOABUFWxHxjUJjXNhzy3q97iXL dhNyCK9C4LZ0Rd9QlA19ilU/PPk7yLuLOWzhA58by7yuvFO+ec3FyNckJoc4XcPs LQXYvOOdtNvd1SbxiCyHvOPgzQZAZWSxm6Y8EbrtM8biqkAwt30+I8XkPGhgJy7U 3cQTiOsWEM8n0I2+R/GWCNNt0fPSbx+s5BEi0gX1R2VCssQH/YaG0Ntnn9eyl5SB IEFuUo12lWV9DHymiljca2qTYR30+aScX9CdsSDnEeKsNF9OK44uma5f6QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOocPCZ6x2dNx4/oAizgzmK3mOZYMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2RkNjE1NjM1LTc4ZDEtNDEyOC1iOWMwLTg3NWQwYzEyYzMxZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba8qAwDQYJKoZIhvcNAQELBQADggEBACYKaEWiyitJcOwPt/nG U+lhsc8BGPSbAFjrEm52eHY0LeeXhxVqrYYAq/f0n3Xvlmumx0zd98eIXUQN9cKB 8nT3IpK/DwbhW1l42DpzyD69qIqxg/4PKBW5gxdgmxFR4Ntk85AKAfBp7S3O2QJ5 GyVmWhPsXG4/DfjOOgMkFU0F9l+FI+zVGBg8ovDmTMP/GqFd0ZpJjCkHwwQBHOrQ wTB/50pdB7u9t/N+E77Ov0/xxUabZ4illpKDb7u6NDOq/VdnB7fG4yP5gNXOYAD4 53DtJnVtzn9GVkj54fUKRWaEp78c843DFRrEK1XotT4Rg4PEL0/sA9EehunfDKgE oiU= -----END CERTIFICATE-----Generated at Wed May 13 00:39:52 2026 by rpki-client