$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa File: 070bdab9-7162-422b-9f8a-f8d4ae428be1.roa (raw, json) Hash identifier: d50sLxs9a/HQMErDY97+xEZv0nPJJWO0ISPuSCMohnE= Subject key identifier: E5:7B:84:BC:AB:DA:DF:90:A8:61:3F:DB:02:45:57:30:76:D4:87:5A Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5A7152C007A73CD235C78CC5FD0417726CC2AB13 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa Signing time: Tue 19 May 2026 00:00:46 +0000 ROA not before: Tue 19 May 2026 00:00:46 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da2a:8000::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:71:52:c0:07:a7:3c:d2:35:c7:8c:c5:fd:04:17:72:6c:c2:ab:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:46 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=3e85838dd9a68488ccf7d039a602b57da092aee0b67c0bb30d9e2ca6a65cfd09, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:87:a7:98:a6:24:96:1a:4f:0b:94:a1:6e: 98:58:b0:02:7a:ae:c9:06:aa:68:3f:8f:30:73:ca: 4e:0e:54:5e:ec:ac:03:90:fa:5f:c2:bc:4d:a7:5f: 51:b7:26:dc:df:29:d2:6b:57:9a:2d:0d:ec:83:00: d4:8c:25:24:a0:2f:7d:0a:a8:ee:7d:dc:24:74:af: f2:8a:85:50:fa:75:5b:a1:77:9a:b1:a3:ef:16:ea: 5e:40:d9:52:9c:4f:a4:2d:19:2f:31:d5:89:11:72: 18:4c:83:c1:cc:07:3f:66:57:4c:a5:94:dc:be:42: 13:1c:09:ca:36:9e:fd:1e:fe:7f:2e:f1:b7:c1:a0: 50:c6:28:f8:03:45:87:14:8d:72:23:db:44:3f:76: f6:e8:23:78:8a:38:7c:07:8d:35:8f:04:ab:49:52: 67:ba:8c:7e:fa:af:42:47:ff:7b:c0:fc:de:71:fb: 6b:91:18:39:cc:89:76:c3:a1:c7:c7:af:87:54:d2: d5:d8:62:29:88:81:0e:ef:7e:e8:4a:e2:df:d2:42: e2:ce:da:77:aa:bd:32:6f:ad:ec:57:83:f8:8d:2c: 41:09:45:78:7b:72:17:98:92:7b:84:0d:dc:59:17: f8:5a:74:e9:81:a4:d6:83:ea:01:4e:35:76:27:bc: be:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:7B:84:BC:AB:DA:DF:90:A8:61:3F:DB:02:45:57:30:76:D4:87:5A X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/070bdab9-7162-422b-9f8a-f8d4ae428be1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da2a:8000::/37 Signature Algorithm: sha256WithRSAEncryption 2d:7a:46:f6:76:2a:32:29:27:16:6d:41:cf:dd:8d:f4:74:86: 11:25:5a:a5:70:d8:1f:52:95:06:30:f7:79:6d:86:2d:15:78: a0:5d:7f:b6:a2:f4:24:84:08:6e:c5:8c:98:48:d5:df:84:8c: bb:ef:42:cf:28:1e:2b:ce:e0:c1:b1:44:e0:49:a9:54:e5:4f: e1:e1:f1:1c:7f:90:d3:f9:a3:0c:84:0b:8c:44:c3:b5:8c:ff: 78:ec:c3:d8:aa:6a:1c:68:ae:7e:0f:ce:1f:41:e6:a3:0d:47: b6:40:b9:04:98:3e:21:9d:40:88:58:61:df:5f:3b:d9:37:c8: e9:7a:80:dd:88:b3:68:07:11:13:51:c4:e5:d1:15:e9:a6:e0: a2:90:75:18:7e:e3:27:21:47:3d:ef:62:48:02:b8:d0:d9:ca: 8e:6f:17:0f:ee:e2:94:be:61:6e:bc:3a:a8:76:3f:4d:da:2f: a6:d4:66:f3:f6:16:f9:63:05:4b:01:12:8f:6c:6e:3c:3c:6b: 3a:a8:e9:a1:d8:17:9e:40:9c:c2:a2:38:88:4b:3d:9c:65:17: 53:31:e5:4f:bf:f3:ba:94:a5:b2:eb:ae:43:bf:5c:72:10:a1: 78:6f:11:82:95:cb:22:df:28:6f:78:08:fd:f9:c6:66:92:ff: 6d:9b:f8:73 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUWnFSwAenPNI1x4zF/QQXcmzCqxMwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDA0NloX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNAM2U4NTgzOGRkOWE2ODQ4OGNjZjdk MDM5YTYwMmI1N2RhMDkyYWVlMGI2N2MwYmIzMGQ5ZTJjYTZhNjVjZmQwOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1uHp5imJJYaTwuUoW6YWLACeq7J BqpoP48wc8pODlRe7KwDkPpfwrxNp19Rtybc3ynSa1eaLQ3sgwDUjCUkoC99Cqju fdwkdK/yioVQ+nVboXeasaPvFupeQNlSnE+kLRkvMdWJEXIYTIPBzAc/ZldMpZTc vkITHAnKNp79Hv5/LvG3waBQxij4A0WHFI1yI9tEP3b26CN4ijh8B401jwSrSVJn uox++q9CR/97wPzecftrkRg5zIl2w6HHx6+HVNLV2GIpiIEO737oSuLf0kLiztp3 qr0yb63sV4P4jSxBCUV4e3IXmJJ7hA3cWRf4WnTpgaTWg+oBTjV2J7y+zwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFOV7hLyr2t+QqGE/2wJFVzB21IdaMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA3MGJkYWI5LTcxNjItNDIyYi05ZjhhLWY4ZDRhZTQyOGJlMS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYDJAbaKoAwDQYJKoZIhvcNAQELBQADggEBAC16RvZ2KjIpJxZtQc/d jfR0hhElWqVw2B9SlQYw93lthi0VeKBdf7ai9CSECG7FjJhI1d+EjLvvQs8oHivO 4MGxROBJqVTlT+Hh8Rx/kNP5owyEC4xEw7WM/3jsw9iqahxorn4Pzh9B5qMNR7ZA uQSYPiGdQIhYYd9fO9k3yOl6gN2Is2gHERNRxOXRFemm4KKQdRh+4ychRz3vYkgC uNDZyo5vFw/u4pS+YW68Oqh2P03aL6bUZvP2FvljBUsBEo9sbjw8azqo6aHYF55A nMKiOIhLPZxlF1Mx5U+/87qUpbLrrkO/XHIQoXhvEYKVyyLfKG94CP35xmaS/22b +HM= -----END CERTIFICATE-----Generated at Sun May 24 12:22:26 2026 by rpki-client