$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa File: e5ffe65e-7287-4628-8759-7c141866ee12.roa (raw, json) Hash identifier: ttj+xFM+LnTZib2Qm1IdvDV7beTbrXhca9IDFXw6y4k= Subject key identifier: 61:A2:7A:37:6F:59:FB:38:D7:96:56:19:DF:E2:01:C4:62:A5:50:9B Certificate issuer: /CN=A91F635F0000/serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Certificate serial: 4AF50CA3741D1EB97694A3A08297ABFFBB162E24 Authority key identifier: 53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa Signing time: Sat 09 May 2026 00:00:59 +0000 ROA not before: Sat 09 May 2026 00:00:59 +0000 ROA not after: Fri 07 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 159.248.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/manifest.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 May 2026 00:21:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f5:0c:a3:74:1d:1e:b9:76:94:a3:a0:82:97:ab:ff:bb:16:2e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=53DC22125FA34F3986CBF12422E34F9B9C661BE7 Validity Not Before: May 9 00:00:59 2026 GMT Not After : Aug 7 23:59:59 2026 GMT Subject: serialNumber=2cea5e20a1294ffc6310e0cb30132d71ba96017ab73ac8f6f038fdf23e979806, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:73:2d:16:22:d7:40:9b:76:e0:65:de:e6: 90:96:e4:44:7c:30:47:3f:de:80:75:fb:93:18:af: ac:df:a9:01:c5:57:ef:03:35:42:65:c2:11:11:d3: d2:f7:b4:c6:20:7a:1c:a6:cd:d4:85:66:d4:08:fa: f9:c6:57:83:bd:d5:18:b0:3e:6d:f5:1d:31:48:69: 50:41:60:3e:95:f8:0f:4e:ae:ac:46:e9:41:0f:c3: 8b:44:08:72:43:44:ee:ef:d5:8e:3f:3a:e3:f7:0b: ac:de:02:11:82:6e:56:6e:b4:6f:90:45:f6:b7:94: 8c:07:49:2a:eb:54:f9:3a:b3:89:bc:9d:2e:3e:cb: 46:28:94:33:b6:8b:42:d0:f7:0a:fb:36:6e:cc:43: f8:80:cb:d3:2f:31:58:2c:9c:b3:b8:f3:5a:ae:ea: 75:4d:e7:24:e0:b0:79:9a:b2:4d:4c:64:6a:f2:90: ac:58:f6:12:37:97:a0:07:ca:53:f0:3f:73:ac:7a: a5:fc:3b:73:6e:d9:6f:27:f5:68:53:53:d6:64:39: 87:3c:38:e5:2a:3f:97:5b:8d:2a:db:d3:43:54:d9: c1:35:24:a1:bd:4f:35:91:87:11:16:cb:3f:7f:6f: 1b:f5:06:00:81:28:b2:ef:9e:fa:6b:ef:86:2c:13: f0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A2:7A:37:6F:59:FB:38:D7:96:56:19:DF:E2:01:C4:62:A5:50:9B X509v3 Authority Key Identifier: keyid:53:DC:22:12:5F:A3:4F:39:86:CB:F1:24:22:E3:4F:9B:9C:66:1B:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U9wiEl-jTzmGy_EkIuNPm5xmG-c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/e5ffe65e-7287-4628-8759-7c141866ee12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/a5b01bdd-cdeb-4cfc-8c93-7e70c5e09306.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.248.0.0/16 Signature Algorithm: sha256WithRSAEncryption 40:f2:31:60:7a:b4:82:35:66:f8:59:24:ab:0d:bf:c8:6d:59: 8c:40:06:1b:66:63:11:3b:7f:9e:b0:6a:a4:9b:cd:33:22:5e: 2a:1a:2e:c7:64:f9:26:44:a3:ec:8a:a4:ee:43:98:d2:1c:55: 2b:4f:98:05:4b:c3:6b:40:51:44:dc:56:f9:38:ce:d7:b0:48: b5:38:ce:8c:8b:45:92:38:e8:c5:eb:b0:8b:de:a8:c5:41:b7: 24:51:b7:06:dc:8a:4d:76:bb:23:cd:ab:c2:3f:53:5b:ee:62: 56:4c:3e:8f:46:f7:09:a1:16:8b:3d:35:44:a7:31:f9:05:8e: 4f:20:fd:6a:27:89:83:a1:34:a0:16:7d:d5:c7:8c:d3:bf:ab: 67:c6:34:48:6b:1d:f7:b0:2b:52:10:d3:06:cb:57:a7:97:33: d8:23:3a:2b:d8:00:d9:fd:c8:0e:b6:30:20:e0:be:87:c6:f2: 14:01:37:af:30:5f:14:5f:60:a4:69:d8:11:3c:dd:2d:08:ed: d4:d8:7e:60:1a:34:e6:69:45:6e:70:36:b1:2d:15:3d:00:df: 4e:8f:8c:0e:99:86:b5:0c:3f:f2:fa:00:15:c0:1a:0b:6a:61: 21:c1:00:f7:d5:fe:5d:fd:9f:4b:c8:6b:5d:15:7b:5c:ea:ba: 29:b9:aa:ef -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgIUSvUMo3QdHrl2lKOggper/7sWLiQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg1M0RDMjIxMjVG QTM0RjM5ODZDQkYxMjQyMkUzNEY5QjlDNjYxQkU3MB4XDTI2MDUwOTAwMDA1OVoX DTI2MDgwNzIzNTk1OVowejFJMEcGA1UEBRNAMmNlYTVlMjBhMTI5NGZmYzYzMTBl MGNiMzAxMzJkNzFiYTk2MDE3YWI3M2FjOGY2ZjAzOGZkZjIzZTk3OTgwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqBzLRYi10CbduBl3uaQluREfDBH P96AdfuTGK+s36kBxVfvAzVCZcIREdPS97TGIHocps3UhWbUCPr5xleDvdUYsD5t 9R0xSGlQQWA+lfgPTq6sRulBD8OLRAhyQ0Tu79WOPzrj9wus3gIRgm5WbrRvkEX2 t5SMB0kq61T5OrOJvJ0uPstGKJQztotC0PcK+zZuzEP4gMvTLzFYLJyzuPNarup1 Teck4LB5mrJNTGRq8pCsWPYSN5egB8pT8D9zrHql/DtzbtlvJ/VoU1PWZDmHPDjl Kj+XW40q29NDVNnBNSShvU81kYcRFss/f28b9QYAgSiy7576a++GLBPwaQIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFGGiejdvWfs415ZWGd/iAcRipVCbMB8GA1UdIwQY MBaAFFPcIhJfo085hsvxJCLjT5ucZhvnMA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CM0EyNEYyMDFENjYxMUUyOEFDODgzN0M3MkZEMUZGMi9VOXdpRWwt alR6bUd5X0VrSXVOUG01eG1HLWMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2U1ZmZlNjVlLTcyODctNDYyOC04NzU5LTdjMTQxODY2ZWUxMi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvYTViMDFiZGQtY2RlYi00Y2ZjLThjOTMtN2U3MGM1ZTA5MzA2LmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAn/gwDQYJKoZIhvcNAQELBQADggEBAEDyMWB6tII1ZvhZJKsNv8ht WYxABhtmYxE7f56waqSbzTMiXioaLsdk+SZEo+yKpO5DmNIcVStPmAVLw2tAUUTc Vvk4ztewSLU4zoyLRZI46MXrsIveqMVBtyRRtwbcik12uyPNq8I/U1vuYlZMPo9G 9wmhFos9NUSnMfkFjk8g/WoniYOhNKAWfdXHjNO/q2fGNEhrHfewK1IQ0wbLV6eX M9gjOivYANn9yA62MCDgvofG8hQBN68wXxRfYKRp2BE83S0I7dTYfmAaNOZpRW5w NrEtFT0A306PjA6ZhrUMP/L6ABXAGgtqYSHBAPfV/l39n0vIa10Ve1zquim5qu8= -----END CERTIFICATE-----Generated at Wed May 13 05:05:46 2026 by rpki-client