$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa File: ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa (raw, json) Hash identifier: 8K5cO4t3+NJ3lLpc2Qn9t2IrlQNFAKtfpNZn54/6jvE= Subject key identifier: 77:04:29:C0:01:37:4A:8D:B8:CB:6B:32:52:0F:51:08:6E:C1:0F:39 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 05310531FADF49C80F31BC635BADF405426607F2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa Signing time: Mon 11 May 2026 00:30:13 +0000 ROA not before: Mon 11 May 2026 00:30:13 +0000 ROA not after: Sun 09 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da38:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 16 May 2026 00:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:31:05:31:fa:df:49:c8:0f:31:bc:63:5b:ad:f4:05:42:66:07:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 11 00:30:13 2026 GMT Not After : Aug 9 23:59:59 2026 GMT Subject: serialNumber=2a8b8368567d52bd1479f9e679138945a7ed8c6902176afbf0dd126ebdf30506, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:34:87:f5:07:f3:0e:1d:08:6d:b3:b8:63:7f: ac:20:78:6d:f8:47:c3:34:c0:94:a1:d6:11:77:2d: 6f:2a:3b:87:31:69:d9:84:5b:ea:b3:5e:a8:32:62: c5:bb:5d:01:8f:1c:43:ec:b0:76:97:82:c4:50:c2: 4f:ec:f3:03:0c:1f:0b:9e:67:a7:b4:5a:e4:80:49: d7:11:9b:a2:be:ed:90:c0:d8:eb:04:22:dd:09:83: f7:60:46:b6:ac:7a:9c:33:59:26:1d:37:fe:16:d5: 32:e8:bb:e2:ac:af:3d:c3:4c:6c:d1:09:3a:81:f5: 8d:79:ae:be:e2:1c:fa:19:93:ec:3c:37:ff:42:20: 5a:49:9b:75:9b:46:a3:12:68:21:16:bd:b8:0b:33: 77:55:58:2e:aa:8d:ec:64:28:2e:c3:60:9b:26:03: f3:8f:55:ad:a5:1d:84:a2:da:c1:9d:e6:bb:6c:3a: 1f:da:dc:2e:d7:48:6a:00:80:46:ba:f6:b5:fa:4f: c1:63:fa:76:32:35:05:01:c2:54:37:c2:2b:f1:96: f8:92:a2:c4:ea:95:32:d0:35:4e:c1:96:d6:2c:34: 8c:dc:4e:c1:23:17:cf:37:22:38:07:1d:af:e8:b7: ce:5d:d5:04:33:b9:55:4c:28:44:c4:c1:85:e0:1f: 7c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:04:29:C0:01:37:4A:8D:B8:CB:6B:32:52:0F:51:08:6E:C1:0F:39 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/ed8cbeea-f5a0-4383-87d7-de8febe599cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da38:4080::/48 Signature Algorithm: sha256WithRSAEncryption a5:97:65:0e:36:39:53:81:a0:57:49:70:c6:85:0e:8c:41:19: 3c:96:fd:a2:5e:e4:f2:47:1c:17:4d:75:7a:a8:53:d8:82:d2: b0:86:0b:d0:6b:c2:fd:2c:00:05:cf:5a:e6:b0:19:af:7e:95: 39:21:90:e6:65:6a:e5:6f:7b:1c:45:2f:8b:61:60:56:d6:f5: fd:5b:3d:d0:96:b9:b4:56:24:2d:56:a9:30:32:47:6c:27:5d: 25:4e:96:b5:0d:de:f4:7d:7a:a8:37:42:7d:a1:4d:73:c0:7c: f7:8a:49:04:f6:46:21:3d:92:29:d9:b1:73:07:46:7f:a0:eb: 2e:5e:f4:21:df:22:be:5a:47:c4:5f:a3:26:a5:0e:7c:aa:1f: 80:83:15:0f:0a:56:6b:39:d9:75:97:ae:8b:7e:f7:cc:f5:b5: 19:8d:26:7f:50:b4:e9:b0:e2:f5:61:80:3a:4f:e5:02:f3:fc: 78:8d:14:08:51:e9:00:ea:6e:21:df:21:78:a1:e5:e7:f1:9b: b1:19:1d:31:de:08:e9:d3:4f:7a:7d:7d:60:6a:21:42:63:98: c0:a8:c8:15:4c:f1:c0:6f:bf:34:d9:fd:6a:2d:56:15:b3:af: 2b:18:e8:e9:f4:04:ab:55:8b:25:7a:35:da:90:b1:7a:6e:be: ec:4e:f0:6a -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUBTEFMfrfScgPMbxjW630BUJmB/IwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMTAwMzAxM1oX DTI2MDgwOTIzNTk1OVowejFJMEcGA1UEBRNAMmE4YjgzNjg1NjdkNTJiZDE0Nzlm OWU2NzkxMzg5NDVhN2VkOGM2OTAyMTc2YWZiZjBkZDEyNmViZGYzMDUwNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5jSH9QfzDh0IbbO4Y3+sIHht+EfD NMCUodYRdy1vKjuHMWnZhFvqs16oMmLFu10BjxxD7LB2l4LEUMJP7PMDDB8Lnmen tFrkgEnXEZuivu2QwNjrBCLdCYP3YEa2rHqcM1kmHTf+FtUy6LvirK89w0xs0Qk6 gfWNea6+4hz6GZPsPDf/QiBaSZt1m0ajEmghFr24CzN3VVguqo3sZCguw2CbJgPz j1WtpR2EotrBnea7bDof2twu10hqAIBGuva1+k/BY/p2MjUFAcJUN8Ir8Zb4kqLE 6pUy0DVOwZbWLDSM3E7BIxfPNyI4Bx2v6LfOXdUEM7lVTChExMGF4B98SQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFHcEKcABN0qNuMtrMlIPUQhuwQ85MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx L2VkOGNiZWVhLWY1YTAtNDM4My04N2Q3LWRlOGZlYmU1OTljZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAbaOECAMA0GCSqGSIb3DQEBCwUAA4IBAQCll2UONjlTgaBXSXDG hQ6MQRk8lv2iXuTyRxwXTXV6qFPYgtKwhgvQa8L9LAAFz1rmsBmvfpU5IZDmZWrl b3scRS+LYWBW1vX9Wz3Qlrm0ViQtVqkwMkdsJ10lTpa1Dd70fXqoN0J9oU1zwHz3 ikkE9kYhPZIp2bFzB0Z/oOsuXvQh3yK+WkfEX6MmpQ58qh+AgxUPClZrOdl1l66L fvfM9bUZjSZ/ULTpsOL1YYA6T+UC8/x4jRQIUekA6m4h3yF4oeXn8ZuxGR0x3gjp 0096fX1gaiFCY5jAqMgVTPHAb7802f1qLVYVs68rGOjp9ASrVYslejXakLF6br7s TvBq -----END CERTIFICATE-----Generated at Tue May 12 23:43:02 2026 by rpki-client