$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa File: 1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa (raw, json) Hash identifier: Rlj+76DB3jf11nOExsHaFVLP9fhVIhzVZ9Wp/F07OIU= Subject key identifier: B7:D4:01:FF:4C:C8:E7:2D:7A:CE:B0:72:51:08:8B:92:BE:DD:7F:08 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4AB4DF2B555FE45AE2D4A0503A8BAA582618B865 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa Signing time: Fri 22 May 2026 17:03:20 +0000 ROA not before: Fri 22 May 2026 17:03:20 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:f0c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b4:df:2b:55:5f:e4:5a:e2:d4:a0:50:3a:8b:aa:58:26:18:b8:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:03:20 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=584a0c77d72b81e78aed1d95a4c4b9c4e7e95fa53a91403f7b5c86766ef08dbe, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:71:5f:ab:8c:f8:9e:90:43:a4:fd:0c:00:dc: c5:c9:ea:59:ed:b7:18:1c:79:e1:ef:38:69:1d:7f: 79:25:ac:65:f0:af:9c:46:b3:67:74:09:83:c7:ca: 4f:01:fe:62:e4:17:a5:07:1f:45:bb:c5:bf:d3:c7: 17:97:c0:e1:bf:29:cd:6b:4e:5e:ce:2c:2b:ca:b0: b4:df:15:bd:5f:4b:1a:4d:07:76:54:15:2a:96:39: ba:6c:16:c1:a6:37:cb:31:3f:a0:66:5d:c3:2c:fb: e0:1a:2c:25:f7:84:f2:9b:62:10:f8:ae:9b:9d:a8: d9:ba:90:bf:5f:94:55:e4:8e:a2:d4:d9:af:d4:f8: 6e:80:16:73:53:7a:1d:a3:cc:d1:c2:7e:18:3c:46: a4:0e:3e:96:76:af:6a:14:46:2e:69:80:b7:75:6e: f7:58:75:5d:f9:17:53:af:ec:6a:63:45:55:5a:b2: b8:e0:f2:3c:8d:de:ec:19:39:01:c3:34:11:4a:39: 8b:55:88:4e:55:98:8a:1b:9e:f7:e4:54:c4:2a:2b: 8c:a0:92:99:c6:f3:81:7e:6a:f9:c6:cf:6d:83:38: 2a:d2:ad:6a:06:1f:a7:59:4b:57:70:3c:75:8e:0e: 7a:75:7b:d4:15:7b:a8:99:eb:9f:72:4d:ed:14:15: 90:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:D4:01:FF:4C:C8:E7:2D:7A:CE:B0:72:51:08:8B:92:BE:DD:7F:08 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1c51b7ba-2c76-4941-8e3a-8cc90869a99b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:f0c0::/48 Signature Algorithm: sha256WithRSAEncryption a3:3c:05:29:03:77:2d:07:7e:99:ef:57:fd:97:34:f5:44:f1: b8:71:67:2d:4e:e3:ba:bd:6c:b9:02:e6:b3:ce:28:7c:eb:dd: bf:d1:18:76:f3:48:75:7d:f4:70:77:40:88:f1:34:48:56:1a: a7:7f:00:63:f6:88:95:25:e0:b9:2f:0e:5b:61:11:f0:c6:80: cb:fa:83:9c:ab:1e:22:91:cf:12:3e:93:ac:f4:e7:92:61:85: 0d:1d:ae:eb:b2:e2:84:78:8a:99:62:2e:3c:06:6c:72:d6:16: fa:2e:8f:cc:ef:4a:c3:8a:d0:cf:16:fa:f9:94:0e:f2:87:11: 6a:46:8a:64:cd:d2:d2:e8:90:83:85:6d:53:b2:79:55:d7:cf: 78:47:c0:2d:d0:6d:9a:a6:2e:e7:18:15:bd:5a:15:03:6f:59: f2:fb:e7:89:77:3c:68:6d:d2:8a:ce:5f:e0:19:f9:29:80:63: bd:76:72:ec:6e:53:59:25:c3:58:ba:e7:19:c7:46:c2:c5:d2: 5e:7d:d4:eb:3d:a3:a6:1e:9a:47:4a:eb:0a:5d:ba:b4:8f:55: 3b:19:20:d8:1f:5f:ae:ff:46:ce:4f:28:a0:6e:76:f6:40:14: 1c:05:ad:a3:98:74:b4:db:56:86:f2:85:b0:4f:65:8f:ee:d3: 80:71:7f:00 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUSrTfK1Vf5Fri1KBQOouqWCYYuGUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDMyMFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANTg0YTBjNzdkNzJiODFlNzhhZWQx ZDk1YTRjNGI5YzRlN2U5NWZhNTNhOTE0MDNmN2I1Yzg2NzY2ZWYwOGRiZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXFfq4z4npBDpP0MANzFyepZ7bcY HHnh7zhpHX95Jaxl8K+cRrNndAmDx8pPAf5i5BelBx9Fu8W/08cXl8DhvynNa05e ziwryrC03xW9X0saTQd2VBUqljm6bBbBpjfLMT+gZl3DLPvgGiwl94Tym2IQ+K6b najZupC/X5RV5I6i1Nmv1PhugBZzU3odo8zRwn4YPEakDj6Wdq9qFEYuaYC3dW73 WHVd+RdTr+xqY0VVWrK44PI8jd7sGTkBwzQRSjmLVYhOVZiKG5735FTEKiuMoJKZ xvOBfmr5xs9tgzgq0q1qBh+nWUtXcDx1jg56dXvUFXuomeufck3tFBWQIwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFLfUAf9MyOctes6wclEIi5K+3X8IMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFjNTFiN2JhLTJjNzYtNDk0MS04ZTNhLThjYzkwODY5YTk5Yi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6PDAMA0GCSqGSIb3DQEBCwUAA4IBAQCjPAUpA3ctB36Z71f9 lzT1RPG4cWctTuO6vWy5Auazzih8692/0Rh280h1ffRwd0CI8TRIVhqnfwBj9oiV JeC5Lw5bYRHwxoDL+oOcqx4ikc8SPpOs9OeSYYUNHa7rsuKEeIqZYi48Bmxy1hb6 Lo/M70rDitDPFvr5lA7yhxFqRopkzdLS6JCDhW1TsnlV1894R8At0G2api7nGBW9 WhUDb1ny++eJdzxobdKKzl/gGfkpgGO9dnLsblNZJcNYuucZx0bCxdJefdTrPaOm HppHSusKXbq0j1U7GSDYH1+u/0bOTyigbnb2QBQcBa2jmHS021aG8oWwT2WP7tOA cX8A -----END CERTIFICATE-----Generated at Sun May 24 12:19:54 2026 by rpki-client