$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa File: 08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa (raw, json) Hash identifier: nPj0qzOjktu45VcGaXFMbfPauhPe8kh0GpZXTkNS0PA= Subject key identifier: 0F:75:4B:76:07:C3:34:5F:87:D3:16:8B:AC:C9:FE:38:A9:27:7B:01 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 319DD5F3087D873339C759D40AE8D99119AF65A2 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa Signing time: Tue 19 May 2026 00:00:46 +0000 ROA not before: Tue 19 May 2026 00:00:46 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9d:d5:f3:08:7d:87:33:39:c7:59:d4:0a:e8:d9:91:19:af:65:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:00:46 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=4c520d6be35aed5568a81094d30015150666e047fb50e4bd32a2a5052f0f9d2d, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:46:89:19:e9:57:3f:86:0c:a7:ab:97:1d: d8:ca:fa:5e:e9:ef:07:43:87:36:65:e8:cf:69:ed: a4:bf:0b:a7:d5:9d:8c:30:d7:49:a2:17:8e:7a:00: c7:22:c8:70:3a:74:87:e7:ee:71:71:50:da:3c:ab: 80:5c:41:fd:3f:9c:ca:ee:38:1e:bf:7f:51:b0:d1: ca:8c:2b:32:b7:d8:f3:a9:9f:8c:77:19:6b:2a:b2: 39:2c:4e:cd:a0:f1:bc:f1:0b:59:35:31:c4:87:2b: 8d:40:23:58:d0:35:76:7a:72:08:ea:0e:63:cc:17: 29:fa:03:db:6b:9a:e3:3f:87:c8:1e:ff:d6:24:4e: ab:9a:10:af:bd:c5:98:c2:68:b5:fb:65:6e:5b:8b: fb:db:0f:01:4a:6f:93:1f:8d:6c:79:a5:6b:57:bb: 72:bd:16:00:fe:4f:3c:28:d2:07:90:78:9d:9f:63: 38:05:ed:b2:5d:bd:55:69:01:68:62:f7:5d:74:c1: 26:6f:eb:39:78:a4:da:17:5f:ea:01:46:24:87:fe: e7:44:8e:36:14:65:c9:32:96:52:bd:84:ec:9a:27: d8:d7:01:6a:2b:e0:73:1c:c8:a2:b2:80:60:67:3b: 99:c0:8d:18:67:ca:72:14:11:5a:5c:62:2f:1f:36: 59:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:75:4B:76:07:C3:34:5F:87:D3:16:8B:AC:C9:FE:38:A9:27:7B:01 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/08cfc748-a0fe-40b0-9306-6b4fecf097e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:2000::/40 Signature Algorithm: sha256WithRSAEncryption b1:15:ac:1b:fc:57:03:36:11:9a:99:c2:55:4b:b2:7f:1a:7d: c1:d0:bb:24:3b:56:42:c2:1c:a2:8d:f4:5c:a3:13:8f:5d:84: ac:88:23:e1:82:1f:69:62:c7:67:40:0f:1b:af:e0:33:3e:79: d5:69:d1:38:f2:59:27:de:5e:b7:e7:27:fa:f5:24:00:9a:86: f7:2a:70:fa:ac:11:75:b2:58:cd:88:57:90:83:1b:69:af:58: 4a:b6:eb:7c:85:37:fc:0f:76:6d:4d:55:c0:4e:ea:dd:de:a2: 8c:ad:91:d0:4d:d4:04:e1:3c:f8:6e:9e:dc:16:91:d1:79:e9: c2:08:5c:cf:a2:33:b4:bf:f8:54:be:f1:89:49:eb:67:68:d6: d2:56:29:34:e8:a9:d4:14:ef:2e:c5:04:23:56:ce:6e:d1:dc: ed:1c:68:0e:2f:4a:5f:3c:4a:0e:0d:c2:7b:77:d3:e3:a1:5c: f6:36:45:ab:46:21:61:f9:70:7b:32:30:1c:0d:de:6f:67:ea: 0e:c3:71:13:8a:a1:cb:b4:50:91:20:c2:46:70:cb:4e:db:99: 94:fc:fa:02:8e:28:ec:35:50:6e:f8:60:94:0d:b2:e9:3e:bb: 2e:2f:b2:5b:50:eb:5b:c5:4b:c1:37:d0:38:20:58:f3:64:b4: 1e:69:d5:e8 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUMZ3V8wh9hzM5x1nUCujZkRmvZaIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDA0NloX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNANGM1MjBkNmJlMzVhZWQ1NTY4YTgx MDk0ZDMwMDE1MTUwNjY2ZTA0N2ZiNTBlNGJkMzJhMmE1MDUyZjBmOWQyZDEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7tGiRnpVz+GDKerlx3Yyvpe6e8H Q4c2ZejPae2kvwun1Z2MMNdJoheOegDHIshwOnSH5+5xcVDaPKuAXEH9P5zK7jge v39RsNHKjCsyt9jzqZ+MdxlrKrI5LE7NoPG88QtZNTHEhyuNQCNY0DV2enII6g5j zBcp+gPba5rjP4fIHv/WJE6rmhCvvcWYwmi1+2VuW4v72w8BSm+TH41seaVrV7ty vRYA/k88KNIHkHidn2M4Be2yXb1VaQFoYvdddMEmb+s5eKTaF1/qAUYkh/7nRI42 FGXJMpZSvYTsmifY1wFqK+BzHMiisoBgZzuZwI0YZ8pyFBFaXGIvHzZZ9QIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFA91S3YHwzRfh9MWi6zJ/jipJ3sBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzA4Y2ZjNzQ4LWEwZmUtNDBiMC05MzA2LTZiNGZlY2YwOTdlNi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba7yAwDQYJKoZIhvcNAQELBQADggEBALEVrBv8VwM2EZqZwlVL sn8afcHQuyQ7VkLCHKKN9FyjE49dhKyII+GCH2lix2dADxuv4DM+edVp0TjyWSfe XrfnJ/r1JACahvcqcPqsEXWyWM2IV5CDG2mvWEq263yFN/wPdm1NVcBO6t3eooyt kdBN1AThPPhuntwWkdF56cIIXM+iM7S/+FS+8YlJ62do1tJWKTToqdQU7y7FBCNW zm7R3O0caA4vSl88Sg4Nwnt30+OhXPY2RatGIWH5cHsyMBwN3m9n6g7DcROKocu0 UJEgwkZwy07bmZT8+gKOKOw1UG74YJQNsuk+uy4vsltQ61vFS8E30DggWPNktB5p 1eg= -----END CERTIFICATE-----Generated at Fri May 22 14:19:14 2026 by rpki-client