$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/299fb8e1-96fd-4fc2-81fe-bfb77901a025.roa File: 299fb8e1-96fd-4fc2-81fe-bfb77901a025.roa (raw, json) Hash identifier: Vx/Js+WryFXW9NQkqv5JlNzE3w791nl3J0VaRm528gQ= Subject key identifier: B6:CE:FF:28:8C:C8:7C:AB:16:41:FA:4B:87:28:D4:8A:3C:82:2E:D6 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 460643BB071738538928F74ECC477DC27B1AFE95 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/299fb8e1-96fd-4fc2-81fe-bfb77901a025.roa Signing time: Fri 22 May 2026 17:16:37 +0000 ROA not before: Fri 22 May 2026 17:16:37 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:06:43:bb:07:17:38:53:89:28:f7:4e:cc:47:7d:c2:7b:1a:fe:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:16:37 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=50d38596a96e05a5e30570403cfbab5eb79d0ad8cdaf8f71948898eebb634c39, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bf:3a:6f:a4:19:9c:d9:5a:35:8b:c3:17:e9: db:8e:e4:68:c7:5e:5a:c4:d7:a9:ef:ec:e3:19:bd: a0:11:2e:35:2a:27:6f:4e:bd:52:e3:79:5b:31:53: b7:4c:ec:dc:d6:05:b3:05:e5:18:ec:a3:3f:d6:34: 90:1e:e3:d8:bd:2b:ff:77:65:37:9e:50:53:cb:f2: 81:44:f0:a2:81:36:2e:e4:83:17:42:3c:6e:9d:f2: 5a:ff:41:cd:0b:dd:c9:e4:61:bb:ec:a7:df:36:a6: a7:3a:ec:36:25:c0:aa:56:0a:bf:d8:c7:43:dd:e3: a3:af:4a:fa:48:7a:27:44:9c:32:e1:24:9f:80:50: 20:67:2d:9e:91:f2:a6:51:e7:12:7a:7c:01:69:1b: 53:db:d7:63:e8:15:30:14:2c:40:27:14:0f:ec:5b: 40:4c:b0:e0:39:26:51:39:81:ef:80:db:1e:54:d8: 4f:92:65:44:77:03:5d:ad:b3:d3:3d:88:aa:1e:4d: ae:24:b2:9d:ad:63:4e:ec:8f:9d:e4:0b:b6:26:11: 08:aa:30:b7:06:7c:e3:83:ca:9b:6e:c2:04:b2:8d: 74:18:a8:5d:04:78:7c:a4:bd:16:af:fd:dc:1d:bb: 25:19:6d:48:27:b8:01:e2:a9:56:f8:92:ec:58:3b: 80:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:CE:FF:28:8C:C8:7C:AB:16:41:FA:4B:87:28:D4:8A:3C:82:2E:D6 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/299fb8e1-96fd-4fc2-81fe-bfb77901a025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:7000::/40 Signature Algorithm: sha256WithRSAEncryption 87:b6:42:1d:4f:20:bc:05:6e:0c:76:ce:33:3a:d2:5a:aa:b8: 0e:79:88:8d:e5:73:09:cf:d6:91:e8:cb:29:ea:64:e6:56:df: 29:de:56:fb:80:22:a4:08:ed:a1:38:f7:7f:5e:fb:08:7f:fa: 98:6b:00:97:e8:dd:28:6e:41:97:ce:80:b9:a8:43:cd:af:13: 0a:b4:8c:30:64:0a:88:7a:cd:aa:57:20:e2:7d:10:ab:0a:d8: 23:3b:ef:05:7d:d8:c8:c7:40:1a:f7:09:98:f2:8c:86:a3:09: 5f:98:26:d6:f7:55:ad:1c:4d:c4:d7:09:07:8e:1b:40:dc:2e: cd:e5:95:a9:de:9d:0e:4a:15:48:90:54:21:9f:88:eb:f1:84: 7b:30:6f:3c:b8:aa:05:8c:9a:ea:f3:8a:c3:ad:61:73:52:61: 90:8a:f7:be:f0:24:3e:3f:00:0f:c5:7d:11:17:e6:9b:b9:32: a6:c5:6a:cc:33:7f:d1:1a:ee:98:5b:5e:96:a9:6d:e9:5e:6d: 74:bb:22:47:17:b3:40:d2:87:31:dd:75:e1:53:17:30:91:2b: a7:f7:55:a7:f1:d5:b4:cf:a4:27:63:72:29:37:e9:48:4b:0f: bb:4b:78:11:e6:df:6d:20:40:db:e1:08:db:dc:81:4c:b4:e1: f4:1f:90:ab -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIURgZDuwcXOFOJKPdOzEd9wnsa/pUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MTYzN1oX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANTBkMzg1OTZhOTZlMDVhNWUzMDU3 MDQwM2NmYmFiNWViNzlkMGFkOGNkYWY4ZjcxOTQ4ODk4ZWViYjYzNGMzOTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApr86b6QZnNlaNYvDF+nbjuRox15a xNep7+zjGb2gES41KidvTr1S43lbMVO3TOzc1gWzBeUY7KM/1jSQHuPYvSv/d2U3 nlBTy/KBRPCigTYu5IMXQjxunfJa/0HNC93J5GG77KffNqanOuw2JcCqVgq/2MdD 3eOjr0r6SHonRJwy4SSfgFAgZy2ekfKmUecSenwBaRtT29dj6BUwFCxAJxQP7FtA TLDgOSZROYHvgNseVNhPkmVEdwNdrbPTPYiqHk2uJLKdrWNO7I+d5Au2JhEIqjC3 Bnzjg8qbbsIEso10GKhdBHh8pL0Wr/3cHbslGW1IJ7gB4qlW+JLsWDuANQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFLbO/yiMyHyrFkH6S4co1Io8gi7WMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzI5OWZiOGUxLTk2ZmQtNGZjMi04MWZlLWJmYjc3OTAxYTAyNS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6HAwDQYJKoZIhvcNAQELBQADggEBAIe2Qh1PILwFbgx2zjM6 0lqquA55iI3lcwnP1pHoyynqZOZW3yneVvuAIqQI7aE4939e+wh/+phrAJfo3Shu QZfOgLmoQ82vEwq0jDBkCoh6zapXIOJ9EKsK2CM77wV92MjHQBr3CZjyjIajCV+Y Jtb3Va0cTcTXCQeOG0DcLs3llanenQ5KFUiQVCGfiOvxhHswbzy4qgWMmurzisOt YXNSYZCK977wJD4/AA/FfREX5pu5MqbFaswzf9Ea7phbXpapbelebXS7IkcXs0DS hzHddeFTFzCRK6f3Vafx1bTPpCdjcik36UhLD7tLeBHm320gQNvhCNvcgUy04fQf kKs= -----END CERTIFICATE-----Generated at Sun May 24 12:18:44 2026 by rpki-client