$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec2e000a-52a4-4828-a486-e0f5afe9ef80.roa File: ec2e000a-52a4-4828-a486-e0f5afe9ef80.roa (raw, json) Hash identifier: Bh1Q6QivPrV1T/qdP2OoO4SxzpB9O3Bb70YcGPhtIAw= Subject key identifier: 7E:F9:1B:2B:7D:E6:2F:C0:5D:C4:1D:4D:4A:9C:36:47:3E:10:21:B8 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 606765F8883864055227C3FBE1B46B94F0F6F8D8 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec2e000a-52a4-4828-a486-e0f5afe9ef80.roa Signing time: Fri 08 May 2026 00:00:16 +0000 ROA not before: Fri 08 May 2026 00:00:16 +0000 ROA not after: Thu 06 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daf4:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:67:65:f8:88:38:64:05:52:27:c3:fb:e1:b4:6b:94:f0:f6:f8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 8 00:00:16 2026 GMT Not After : Aug 6 23:59:59 2026 GMT Subject: serialNumber=f1aec2c83acca595510b764470777808dd4f01c78e71aa5819f2288afa379220, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e5:9f:cb:bf:71:49:a8:36:98:1a:7b:9d:5c: 2e:76:b2:cc:f8:6c:b4:73:f1:5a:44:2d:b7:f4:18: 88:52:ae:8c:70:0d:d3:ec:c3:9c:1b:22:58:43:21: 25:b6:4a:92:22:8f:c0:d6:bb:6a:77:60:89:6b:e1: 2e:69:e8:7d:2f:7e:5b:ab:ae:db:6b:8e:2c:11:86: db:69:72:46:6a:09:7b:ca:12:30:18:52:69:19:46: 34:12:f4:7e:5f:26:d1:38:1e:6f:a4:a1:4f:7b:b0: 23:64:0c:7b:13:56:10:5f:3b:c9:9c:05:4a:40:f7: f8:ab:e6:bd:95:e4:df:67:46:d9:23:cf:95:04:9b: f4:cf:66:38:5d:24:19:25:77:6d:c7:5b:c8:72:0e: fe:f3:ac:f8:b8:dc:8f:fc:40:9f:bd:0f:b6:16:8a: 7d:63:6b:66:06:3d:3a:ba:03:9f:bc:9c:62:c6:11: ac:0e:d6:89:12:da:9f:92:7c:b2:ab:dd:92:68:4c: 82:e7:f9:84:bb:9e:15:f3:9f:13:02:c0:59:39:b5: 36:85:03:28:f3:05:88:2e:6d:26:4a:f6:9f:49:a3: 6b:7c:79:02:ce:25:41:1e:d6:64:dc:7c:69:b1:58: 82:92:5f:56:08:89:6f:23:97:af:16:7f:e1:85:cf: 06:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:F9:1B:2B:7D:E6:2F:C0:5D:C4:1D:4D:4A:9C:36:47:3E:10:21:B8 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ec2e000a-52a4-4828-a486-e0f5afe9ef80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daf4:2000::/40 Signature Algorithm: sha256WithRSAEncryption 35:50:74:41:23:91:7b:ad:4b:ad:2e:9b:85:a3:1c:ef:7c:80: bb:e9:1c:de:db:8f:fb:92:3a:5c:27:4d:42:a3:bd:57:1b:35: dc:a7:c1:74:d1:28:78:18:6d:d0:a1:56:bf:8c:cd:90:0d:8a: 1d:d2:1c:fd:01:ce:cc:7d:c2:13:87:38:62:07:1c:59:77:7d: d1:0e:7b:31:6c:bf:8c:5b:69:54:83:55:20:15:54:41:33:a6: ba:54:f6:3e:2b:bc:15:14:eb:4a:ee:d5:43:0f:53:3e:82:b2: 48:7a:84:ed:b0:45:d6:0b:46:21:86:88:e0:2e:8d:11:30:b6: a3:f5:c5:70:df:3a:be:8f:63:c3:91:2a:28:0b:bd:93:5c:ea: cf:a3:5a:80:9b:82:c7:76:09:bd:3c:57:aa:59:0f:54:67:9e: 0e:48:ea:0d:29:ca:2e:09:3f:aa:52:6c:c8:83:c0:86:1f:d4: c3:50:63:93:bc:4e:24:5e:30:6e:31:07:ee:d3:7e:21:fb:f7: d3:be:c1:ba:c4:b5:a1:ea:43:d4:d9:ba:92:1b:64:0b:03:f9: 9d:16:97:aa:0a:d2:f9:4a:e1:ca:d9:3b:3f:97:a1:95:67:96: 9c:cf:10:7c:f7:08:a5:64:58:77:78:09:df:4e:cf:e1:80:88: 59:2e:13:f7 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYGdl+Ig4ZAVSJ8P74bRrlPD2+NgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUwODAwMDAxNloX DTI2MDgwNjIzNTk1OVowejFJMEcGA1UEBRNAZjFhZWMyYzgzYWNjYTU5NTUxMGI3 NjQ0NzA3Nzc4MDhkZDRmMDFjNzhlNzFhYTU4MTlmMjI4OGFmYTM3OTIyMDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uWfy79xSag2mBp7nVwudrLM+Gy0 c/FaRC239BiIUq6McA3T7MOcGyJYQyEltkqSIo/A1rtqd2CJa+Euaeh9L35bq67b a44sEYbbaXJGagl7yhIwGFJpGUY0EvR+XybROB5vpKFPe7AjZAx7E1YQXzvJnAVK QPf4q+a9leTfZ0bZI8+VBJv0z2Y4XSQZJXdtx1vIcg7+86z4uNyP/ECfvQ+2Fop9 Y2tmBj06ugOfvJxixhGsDtaJEtqfknyyq92SaEyC5/mEu54V858TAsBZObU2hQMo 8wWILm0mSvafSaNrfHkCziVBHtZk3HxpsViCkl9WCIlvI5evFn/hhc8GJwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFH75Gyt95i/AXcQdTUqcNkc+ECG4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VjMmUwMDBhLTUyYTQtNDgyOC1hNDg2LWUwZjVhZmU5ZWY4MC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba9CAwDQYJKoZIhvcNAQELBQADggEBADVQdEEjkXutS60um4Wj HO98gLvpHN7bj/uSOlwnTUKjvVcbNdynwXTRKHgYbdChVr+MzZANih3SHP0Bzsx9 whOHOGIHHFl3fdEOezFsv4xbaVSDVSAVVEEzprpU9j4rvBUU60ru1UMPUz6Cskh6 hO2wRdYLRiGGiOAujREwtqP1xXDfOr6PY8ORKigLvZNc6s+jWoCbgsd2Cb08V6pZ D1Rnng5I6g0pyi4JP6pSbMiDwIYf1MNQY5O8TiReMG4xB+7TfiH799O+wbrEtaHq Q9TZupIbZAsD+Z0Wl6oK0vlK4crZOz+XoZVnlpzPEHz3CKVkWHd4Cd9Oz+GAiFku E/c= -----END CERTIFICATE-----Generated at Tue May 12 23:32:15 2026 by rpki-client