$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa File: 445d78ad-29c7-49fd-ad71-7cd16140cfce.roa (raw, json) Hash identifier: aH548nkjGccYKQK5aR2a6hNv3IgpFyV1Y/6EkINaiO4= Subject key identifier: A5:7A:78:82:D7:F5:62:C1:ED:EF:98:95:CA:6D:B2:92:2D:BD:14:38 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 52A75ADD2FD611B8C4CAE9BBAC7F768011AE7708 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa Signing time: Tue 19 May 2026 00:01:00 +0000 ROA not before: Tue 19 May 2026 00:01:00 +0000 ROA not after: Mon 17 Aug 2026 23:59:59 +0000 asID: 14618 IP address blocks: 2406:daef:6000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 May 2026 00:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:a7:5a:dd:2f:d6:11:b8:c4:ca:e9:bb:ac:7f:76:80:11:ae:77:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 19 00:01:00 2026 GMT Not After : Aug 17 23:59:59 2026 GMT Subject: serialNumber=90328a9f57d446bc7d42c900a9ed99de0ce8fc46cb86961bf3cedef8cf136bae, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f2:16:6b:44:6f:0e:de:4c:4f:ff:8e:6a:12: 70:e1:c9:9f:b3:95:41:46:4d:d2:2c:45:a7:17:77: 3d:bd:51:41:39:6b:60:2c:94:f0:5b:22:e9:25:4c: 88:91:58:64:e6:80:51:a7:43:0d:30:d6:e0:35:09: d5:43:2b:51:a2:07:e9:6e:b1:f1:61:95:eb:05:85: 81:03:30:05:98:d3:1a:30:66:99:46:8b:0e:3f:1d: 3c:7d:0f:2f:21:26:bd:fd:1c:06:a2:8c:3f:69:ea: c1:72:02:9c:7d:d1:31:2c:dd:7a:77:1b:c3:90:f7: 59:e8:43:a6:54:3a:ac:50:b1:6b:83:f9:22:4b:f6: c8:9d:53:b2:0c:fc:33:1c:5a:ff:1f:e7:90:48:1c: 6b:03:18:48:b1:fe:c5:6e:d9:a0:d7:af:a7:fa:ea: cb:97:c1:56:28:01:3c:2a:6e:be:82:f9:c5:a3:79: ae:86:62:af:18:91:6d:6d:96:9a:b0:15:7e:b3:ba: fe:ab:ea:22:c9:ca:e8:ef:eb:ae:29:36:8b:02:77: b6:79:7e:bc:5f:ca:cc:5e:2b:cf:31:4f:26:6a:e9: 34:2c:6c:48:75:3d:e4:7e:2a:bf:b2:84:18:7e:fd: 77:84:15:76:cf:bc:c6:16:ac:58:ca:05:33:c4:f6: 87:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:7A:78:82:D7:F5:62:C1:ED:EF:98:95:CA:6D:B2:92:2D:BD:14:38 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/445d78ad-29c7-49fd-ad71-7cd16140cfce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daef:6000::/40 Signature Algorithm: sha256WithRSAEncryption 8a:21:92:45:2a:2d:3b:b1:4b:5c:aa:5f:a4:b9:56:de:d7:71: 6d:7b:51:02:51:8f:21:4b:4a:e9:c9:74:ec:76:41:8b:20:b8: 23:8c:fc:49:e5:1a:81:19:86:93:11:36:76:98:12:43:9d:0f: 64:d9:a7:ca:44:ac:32:55:fe:f2:18:13:e0:61:8c:d0:37:db: 1f:25:d0:60:7e:06:41:1b:d4:99:e4:7f:51:ea:c4:bc:6c:25: dc:bd:6d:a4:8a:f8:8e:60:1b:6c:0f:66:0e:45:87:c5:bc:80: c9:02:db:9c:dd:b1:3d:99:d3:59:cc:8e:cd:ab:70:d8:c1:1e: c0:fc:6a:8d:0e:4f:61:a7:4a:a9:92:9d:e5:58:fa:d1:7e:9f: c8:47:94:2d:7e:94:d0:3f:f3:f8:df:23:8c:85:dd:8f:ce:b1: 42:d0:fb:6d:1f:70:45:c7:75:58:51:54:e6:9c:f8:d1:43:09: c4:6f:77:02:da:e6:08:47:e0:69:2a:e0:69:3f:36:0a:f3:12: dc:76:2b:4b:43:8c:93:b6:ca:5e:43:2d:b4:c5:bb:bf:3d:5a: 6a:75:73:ba:f5:b0:c3:f6:8e:ad:89:4b:02:a0:ec:d4:9b:52: 86:7c:85:9c:ae:1c:1a:22:3d:89:13:c3:26:86:be:1c:e5:75: d4:ad:f9:83 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUUqda3S/WEbjEyum7rH92gBGudwgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxOTAwMDEwMFoX DTI2MDgxNzIzNTk1OVowejFJMEcGA1UEBRNAOTAzMjhhOWY1N2Q0NDZiYzdkNDJj OTAwYTllZDk5ZGUwY2U4ZmM0NmNiODY5NjFiZjNjZWRlZjhjZjEzNmJhZTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PIWa0RvDt5MT/+OahJw4cmfs5VB Rk3SLEWnF3c9vVFBOWtgLJTwWyLpJUyIkVhk5oBRp0MNMNbgNQnVQytRogfpbrHx YZXrBYWBAzAFmNMaMGaZRosOPx08fQ8vISa9/RwGoow/aerBcgKcfdExLN16dxvD kPdZ6EOmVDqsULFrg/kiS/bInVOyDPwzHFr/H+eQSBxrAxhIsf7Fbtmg16+n+urL l8FWKAE8Km6+gvnFo3muhmKvGJFtbZaasBV+s7r+q+oiycro7+uuKTaLAne2eX68 X8rMXivPMU8mauk0LGxIdT3kfiq/soQYfv13hBV2z7zGFqxYygUzxPaH4wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFKV6eILX9WLB7e+YlcptspItvRQ4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ0NWQ3OGFkLTI5YzctNDlmZC1hZDcxLTdjZDE2MTQwY2ZjZS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba72AwDQYJKoZIhvcNAQELBQADggEBAIohkkUqLTuxS1yqX6S5 Vt7XcW17UQJRjyFLSunJdOx2QYsguCOM/EnlGoEZhpMRNnaYEkOdD2TZp8pErDJV /vIYE+BhjNA32x8l0GB+BkEb1Jnkf1HqxLxsJdy9baSK+I5gG2wPZg5Fh8W8gMkC 25zdsT2Z01nMjs2rcNjBHsD8ao0OT2GnSqmSneVY+tF+n8hHlC1+lNA/8/jfI4yF 3Y/OsULQ+20fcEXHdVhRVOac+NFDCcRvdwLa5ghH4Gkq4Gk/NgrzEtx2K0tDjJO2 yl5DLbTFu789Wmp1c7r1sMP2jq2JSwKg7NSbUoZ8hZyuHBoiPYkTwyaGvhzlddSt +YM= -----END CERTIFICATE-----Generated at Fri May 22 14:19:11 2026 by rpki-client