$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e31e6f28-4b42-4020-ac8d-ce7be79b94c3.roa File: e31e6f28-4b42-4020-ac8d-ce7be79b94c3.roa (raw, json) Hash identifier: huC4prFb6NwBufNdhZGJ7SEyRMKJdPYQpGUbaAalGj0= Subject key identifier: B5:D4:80:7A:3F:78:6A:74:03:C6:DC:1C:BA:59:1D:A9:67:66:64:52 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7F4CB176328E6AC0B3E3E842AEDFCB0AB6778428 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e31e6f28-4b42-4020-ac8d-ce7be79b94c3.roa Signing time: Sat 02 May 2026 00:10:49 +0000 ROA not before: Sat 02 May 2026 00:10:49 +0000 ROA not after: Fri 31 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daea:b0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:4c:b1:76:32:8e:6a:c0:b3:e3:e8:42:ae:df:cb:0a:b6:77:84:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 2 00:10:49 2026 GMT Not After : Jul 31 23:59:59 2026 GMT Subject: serialNumber=49601aa4e330c1d12819381a51dbd8cd09438d2a25e37c53ab9cd6dafe7d69e2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c1:70:99:b9:1d:ee:f1:fe:40:5c:9c:61:fd: 10:6f:3b:63:8d:30:40:46:1d:d9:2c:eb:c1:4a:e8: 4f:a9:87:04:04:c8:b6:4c:17:81:fc:2f:53:5a:57: 9c:46:63:a9:78:6a:db:78:d4:be:6e:92:93:b7:5b: b2:20:89:06:90:a3:d2:de:8d:0a:95:20:20:87:1c: 35:3f:ad:bc:0c:99:86:ef:27:ce:0b:be:d5:a4:06: 61:6f:ef:90:10:f1:fc:24:cc:14:40:a5:72:a3:c7: fb:d5:32:f4:76:f0:3e:86:65:3d:8a:0c:c5:27:a0: a6:5e:21:2e:e7:cd:be:f8:15:50:63:be:12:e8:f8: fe:46:77:49:90:16:fa:16:d7:71:61:0a:d1:70:a5: 82:d5:c4:18:00:95:04:77:5e:a5:28:b9:93:84:ae: 02:e8:b1:25:b4:05:a3:47:a7:dd:1a:2f:40:84:1a: 0f:67:97:a0:b9:d8:d3:ef:18:f2:c8:26:33:b6:70: 15:05:de:3b:3d:3a:25:ab:d6:8b:f8:84:70:76:5c: 2e:6b:bb:21:47:1b:9c:6f:e2:29:a3:a4:ec:b3:1e: c4:65:19:0c:b0:32:35:ec:06:9d:09:33:dd:95:ef: 0d:5e:8c:7a:83:56:15:26:f5:83:c7:09:37:e9:86: c1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D4:80:7A:3F:78:6A:74:03:C6:DC:1C:BA:59:1D:A9:67:66:64:52 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e31e6f28-4b42-4020-ac8d-ce7be79b94c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daea:b0c0::/48 Signature Algorithm: sha256WithRSAEncryption 94:71:8e:07:4a:1d:55:af:f7:40:c6:5e:aa:c5:5a:a0:05:12: 05:af:36:71:3f:80:3a:f2:a8:b4:4b:45:56:11:8c:47:a5:bc: 3e:5a:87:d9:e3:4e:71:87:15:93:fc:09:e5:a5:2b:a0:dd:13: fb:ec:4c:13:1b:e9:f9:07:db:2f:9e:0a:03:52:d9:67:c3:df: ef:b2:ce:13:6d:df:5c:9e:85:1e:30:ed:81:da:56:b7:0c:d5: 11:8d:b5:2e:25:18:96:ed:25:f6:f7:0f:d9:16:18:b4:d1:05: bc:14:2c:3e:af:61:16:e9:a8:a6:9c:68:0b:d0:87:df:2f:7f: 0e:4d:05:fe:0d:b0:16:f5:73:12:98:9f:dd:ce:40:91:f0:fe: c8:0d:48:1d:0c:94:67:27:d9:74:c3:fe:c4:a6:79:f2:fe:5d: c4:4a:2b:59:a2:ad:e9:82:78:a3:b9:10:d5:6e:25:7f:86:f5: c5:bb:d3:31:3b:24:f3:f4:10:bc:2f:f9:23:22:32:fd:78:98: 3a:bd:86:ad:c1:32:fd:20:68:58:71:64:0e:d4:ac:cd:bf:9e: ba:ee:9c:2f:bf:8d:72:79:1f:7b:9b:2e:99:d8:71:13:bd:db: 34:13:f6:3e:bd:3a:cc:69:57:98:e5:7a:8c:77:b4:ad:79:34: 67:1f:24:b2 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUf0yxdjKOasCz4+hCrt/LCrZ3hCgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwMjAwMTA0OVoX DTI2MDczMTIzNTk1OVowejFJMEcGA1UEBRNANDk2MDFhYTRlMzMwYzFkMTI4MTkz ODFhNTFkYmQ4Y2QwOTQzOGQyYTI1ZTM3YzUzYWI5Y2Q2ZGFmZTdkNjllMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosFwmbkd7vH+QFycYf0QbztjjTBA Rh3ZLOvBSuhPqYcEBMi2TBeB/C9TWlecRmOpeGrbeNS+bpKTt1uyIIkGkKPS3o0K lSAghxw1P628DJmG7yfOC77VpAZhb++QEPH8JMwUQKVyo8f71TL0dvA+hmU9igzF J6CmXiEu582++BVQY74S6Pj+RndJkBb6FtdxYQrRcKWC1cQYAJUEd16lKLmThK4C 6LEltAWjR6fdGi9AhBoPZ5egudjT7xjyyCYztnAVBd47PTolq9aL+IRwdlwua7sh Rxucb+Ipo6Tssx7EZRkMsDI17AadCTPdle8NXox6g1YVJvWDxwk36YbBbQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLXUgHo/eGp0A8bcHLpZHalnZmRSMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2UzMWU2ZjI4LTRiNDItNDAyMC1hYzhkLWNlN2JlNzliOTRjMy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6rDAMA0GCSqGSIb3DQEBCwUAA4IBAQCUcY4HSh1Vr/dAxl6q xVqgBRIFrzZxP4A68qi0S0VWEYxHpbw+WofZ405xhxWT/AnlpSug3RP77EwTG+n5 B9svngoDUtlnw9/vss4Tbd9cnoUeMO2B2la3DNURjbUuJRiW7SX29w/ZFhi00QW8 FCw+r2EW6aimnGgL0IffL38OTQX+DbAW9XMSmJ/dzkCR8P7IDUgdDJRnJ9l0w/7E pnny/l3ESitZoq3pgnijuRDVbiV/hvXFu9MxOyTz9BC8L/kjIjL9eJg6vYatwTL9 IGhYcWQO1KzNv5667pwvv41yeR97my6Z2HETvds0E/Y+vTrMaVeY5XqMd7SteTRn HySy -----END CERTIFICATE-----Generated at Tue May 12 23:30:46 2026 by rpki-client