$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f45b60c-4f99-4aaa-9132-9fa713ded2c5.roa File: 1f45b60c-4f99-4aaa-9132-9fa713ded2c5.roa (raw, json) Hash identifier: 856l+7g9Z207R682Qp+eJdzqEnMW0axxfqKnuI5fv3g= Subject key identifier: 5D:6E:2C:AB:EE:4E:D4:C2:49:CD:4C:EE:CB:E7:8A:91:0F:C4:25:41 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 738B304F6EB3B9C3A9BC4F92BE90791DC447CE2B Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f45b60c-4f99-4aaa-9132-9fa713ded2c5.roa Signing time: Fri 22 May 2026 16:53:56 +0000 ROA not before: Fri 22 May 2026 16:53:56 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae2:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:8b:30:4f:6e:b3:b9:c3:a9:bc:4f:92:be:90:79:1d:c4:47:ce:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:53:56 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=9116e6ef93c5e90574af0a1ee5c9a6a56635c2942f8f6482885cb06189212c9e, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:cc:c8:f3:0d:39:ee:50:2b:33:36:64:fc:81: 18:32:ed:bc:8a:81:41:be:2d:0c:81:09:fe:ef:a6: 5c:13:17:42:6b:9f:be:93:cf:bb:77:fa:2c:6f:7e: 00:46:0c:4e:96:16:17:83:a5:b2:75:67:af:73:5c: 0c:5f:8f:6a:8a:9a:6a:52:0f:dc:8f:bb:ec:b9:f0: 4a:ff:8d:84:ec:71:4a:e1:ae:7a:d6:42:66:a2:a7: d9:20:3c:55:b6:73:b3:f1:65:98:b4:d8:35:0b:49: 15:42:00:44:35:46:19:7a:eb:6b:1d:b2:44:d8:9d: 40:b2:eb:64:75:43:62:f7:c1:b5:27:7c:be:f3:23: f8:91:1e:06:37:19:a0:3f:2c:79:5c:51:08:20:cd: f1:86:9e:1b:f5:3d:53:d0:ee:be:c9:ac:93:a0:1c: 02:d0:fd:45:26:3b:72:95:d5:bc:86:35:a4:dc:fe: 2d:2c:a5:6a:65:16:58:bb:3e:f7:ec:79:c5:30:9f: fd:9e:ad:c3:d7:8f:0b:f6:e9:81:66:53:25:e8:52: 96:61:9b:73:6b:f4:46:0d:e7:51:ef:cc:d0:b1:34: 8d:c6:2e:b4:3a:f5:c0:b2:c0:f0:c9:9d:3b:ab:e2: f0:99:05:ad:8c:6b:84:55:e8:3e:34:9f:f9:77:2a: fe:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:6E:2C:AB:EE:4E:D4:C2:49:CD:4C:EE:CB:E7:8A:91:0F:C4:25:41 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1f45b60c-4f99-4aaa-9132-9fa713ded2c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae2:6000::/40 Signature Algorithm: sha256WithRSAEncryption 89:ad:3d:a1:15:5b:05:b3:0d:e3:9a:db:40:33:62:ed:02:d1: 4f:f0:bf:e2:ce:72:a1:ca:86:fd:83:41:99:b4:22:ff:80:a9: 54:f3:b1:00:fd:11:ce:51:64:78:21:9c:14:6e:da:29:30:aa: b1:4c:13:18:cc:3b:40:19:4d:f7:e3:32:e2:47:b1:67:90:99: 9a:11:6b:d2:4a:7f:8e:33:45:bd:5e:5a:ce:c0:71:2a:bb:2b: b0:4c:bc:5f:db:3b:b0:99:eb:61:1c:a3:c6:d3:68:c7:d3:4f: 12:6a:4b:8c:55:65:79:19:6b:96:81:a8:c2:39:30:4f:fa:22: 14:77:76:52:c9:df:ec:5a:4d:34:50:33:e4:58:71:c9:4c:a5: 92:e6:7c:77:8a:58:5f:33:6b:61:25:5b:b5:c0:68:01:63:df: e6:8e:f8:a2:72:d6:50:e9:25:65:01:53:5b:20:b5:2c:a6:7a: 0e:36:fa:d2:b8:60:d9:ab:68:d5:51:c0:03:bc:e8:50:24:d0: f1:e1:8d:f4:d9:89:69:4c:67:0f:6a:bd:3a:c6:e3:1a:60:71: 59:8b:7e:07:5a:57:3c:78:7f:de:59:7a:c7:f1:d1:ec:0b:dd: 6a:ad:83:81:ca:58:3e:4c:87:6d:f5:c1:17:e8:9c:32:25:9a: 27:13:16:5a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUc4swT26zucOpvE+SvpB5HcRHziswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTM1NloX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAOTExNmU2ZWY5M2M1ZTkwNTc0YWYw YTFlZTVjOWE2YTU2NjM1YzI5NDJmOGY2NDgyODg1Y2IwNjE4OTIxMmM5ZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoczI8w057lArMzZk/IEYMu28ioFB vi0MgQn+76ZcExdCa5++k8+7d/osb34ARgxOlhYXg6WydWevc1wMX49qippqUg/c j7vsufBK/42E7HFK4a561kJmoqfZIDxVtnOz8WWYtNg1C0kVQgBENUYZeutrHbJE 2J1AsutkdUNi98G1J3y+8yP4kR4GNxmgPyx5XFEIIM3xhp4b9T1T0O6+yayToBwC 0P1FJjtyldW8hjWk3P4tLKVqZRZYuz737HnFMJ/9nq3D148L9umBZlMl6FKWYZtz a/RGDedR78zQsTSNxi60OvXAssDwyZ07q+LwmQWtjGuEVeg+NJ/5dyr+/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFF1uLKvuTtTCSc1M7svnipEPxCVBMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFmNDViNjBjLTRmOTktNGFhYS05MTMyLTlmYTcxM2RlZDJjNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba4mAwDQYJKoZIhvcNAQELBQADggEBAImtPaEVWwWzDeOa20Az Yu0C0U/wv+LOcqHKhv2DQZm0Iv+AqVTzsQD9Ec5RZHghnBRu2ikwqrFMExjMO0AZ TffjMuJHsWeQmZoRa9JKf44zRb1eWs7AcSq7K7BMvF/bO7CZ62Eco8bTaMfTTxJq S4xVZXkZa5aBqMI5ME/6IhR3dlLJ3+xaTTRQM+RYcclMpZLmfHeKWF8za2ElW7XA aAFj3+aO+KJy1lDpJWUBU1sgtSymeg42+tK4YNmraNVRwAO86FAk0PHhjfTZiWlM Zw9qvTrG4xpgcVmLfgdaVzx4f95Zesfx0ewL3Wqtg4HKWD5Mh231wRfonDIlmicT Flo= -----END CERTIFICATE-----Generated at Sun May 24 12:18:53 2026 by rpki-client