$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46702638-a25e-4ec2-892b-53b59b25b35d.roa File: 46702638-a25e-4ec2-892b-53b59b25b35d.roa (raw, json) Hash identifier: QYb4Vsjpf//4DORBLgocmsAmxpKTLz845Acdr21QBpA= Subject key identifier: 6B:48:75:0B:D0:A6:39:74:3D:7F:59:75:4A:5E:26:ED:D0:BD:6A:42 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 5F11337E73313C760BC737B35511E2AE7FD5BAC0 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46702638-a25e-4ec2-892b-53b59b25b35d.roa Signing time: Fri 22 May 2026 17:01:34 +0000 ROA not before: Fri 22 May 2026 17:01:34 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:b040::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:11:33:7e:73:31:3c:76:0b:c7:37:b3:55:11:e2:ae:7f:d5:ba:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:01:34 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=945ef88550bc3aa1e66ed58cef1ea5cd568bf904d1d90e74e0b93f6957c565c5, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b5:ef:2c:25:d8:2d:b0:47:78:2f:06:c7:7c: 82:3c:fc:25:01:a1:3d:dd:f9:2e:69:a9:e2:c2:10: 31:92:d5:c0:8e:e8:83:90:c7:96:df:9e:85:a5:1d: 90:d9:28:d5:3d:d1:25:7d:8a:6a:0a:a3:98:74:8b: e0:26:e3:2e:66:74:71:da:27:4f:63:16:8a:88:ec: d7:c0:61:17:19:da:26:e9:aa:73:af:f1:e0:ba:c0: 68:22:0c:b7:78:5b:68:35:cf:0c:bb:ef:94:83:11: 5f:61:2b:83:3f:5e:ad:26:c0:3a:5b:6f:06:56:02: d2:b4:19:08:38:1b:80:b1:58:ca:1a:1e:db:63:92: f0:40:68:29:0f:6d:17:6b:b8:32:2d:23:c3:48:84: af:82:95:54:9d:7e:19:d5:4f:3e:49:71:8a:24:d3: 8f:7d:05:bf:12:3b:0e:60:71:fd:61:c6:1a:51:6c: 8e:be:8c:9c:ac:d4:64:1c:f2:db:97:f5:b4:87:11: c8:00:ff:ff:56:ba:69:9b:7a:b2:08:c7:a5:03:58: af:ea:2b:39:4b:0e:f7:a5:c3:7f:af:39:cf:a2:40: d4:9d:c2:72:2d:d9:c4:6b:06:75:36:9c:b6:a5:c0: c0:b1:11:3f:15:2c:f6:00:ab:95:4d:95:c8:64:07: 01:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:48:75:0B:D0:A6:39:74:3D:7F:59:75:4A:5E:26:ED:D0:BD:6A:42 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/46702638-a25e-4ec2-892b-53b59b25b35d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:b040::/48 Signature Algorithm: sha256WithRSAEncryption 96:b4:65:23:ff:df:2e:96:63:6a:a7:6f:21:2e:33:ff:ad:18: 22:bd:3f:cb:34:e0:20:20:f7:70:5d:e7:33:b0:ba:2b:db:c6: 35:2c:a2:62:ec:1b:0b:8f:41:6e:f7:da:0d:b2:07:c6:7f:1c: 54:23:3f:e3:c9:7c:30:bb:5d:cb:05:ee:57:20:af:3d:15:e1: c3:5d:7d:56:a0:e3:da:ca:7f:0b:f1:09:66:c1:24:b9:af:e1: 27:0e:8c:03:e6:e8:90:e3:94:e8:8a:66:a7:a4:b3:ec:66:fb: 40:90:75:d8:a2:fc:98:19:76:58:23:15:40:84:d7:a9:99:b8: e3:e8:f6:ae:2c:16:45:27:d4:66:8f:4b:5d:9e:e3:05:77:ee: 99:73:2a:a7:f3:ef:37:cf:65:3b:71:40:7c:69:5e:fa:14:0c: eb:43:28:44:a9:6b:65:b5:7f:41:a9:2f:89:e3:35:d8:ae:03: 67:4d:a9:54:0a:ad:c4:ed:d2:d1:e1:27:ee:d9:d5:8d:83:b4: 82:f5:a9:2e:d7:37:c7:ce:7d:08:6d:59:00:ef:5e:3c:b5:95: ad:e8:ce:42:28:e6:56:55:a4:14:73:d0:8c:32:63:05:61:45: b1:9f:94:39:9d:da:fe:88:cd:4b:d4:4b:f3:0c:e5:51:73:e2: d7:a2:1f:3c -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUXxEzfnMxPHYLxzezVRHirn/VusAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MDEzNFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAOTQ1ZWY4ODU1MGJjM2FhMWU2NmVk NThjZWYxZWE1Y2Q1NjhiZjkwNGQxZDkwZTc0ZTBiOTNmNjk1N2M1NjVjNTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrXvLCXYLbBHeC8Gx3yCPPwlAaE9 3fkuaaniwhAxktXAjuiDkMeW356FpR2Q2SjVPdElfYpqCqOYdIvgJuMuZnRx2idP YxaKiOzXwGEXGdom6apzr/HgusBoIgy3eFtoNc8Mu++UgxFfYSuDP16tJsA6W28G VgLStBkIOBuAsVjKGh7bY5LwQGgpD20Xa7gyLSPDSISvgpVUnX4Z1U8+SXGKJNOP fQW/EjsOYHH9YcYaUWyOvoycrNRkHPLbl/W0hxHIAP//Vrppm3qyCMelA1iv6is5 Sw73pcN/rznPokDUncJyLdnEawZ1Npy2pcDAsRE/FSz2AKuVTZXIZAcBGwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFGtIdQvQpjl0PX9ZdUpeJu3QvWpCMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ2NzAyNjM4LWEyNWUtNGVjMi04OTJiLTUzYjU5YjI1YjM1ZC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba6LBAMA0GCSqGSIb3DQEBCwUAA4IBAQCWtGUj/98ulmNqp28h LjP/rRgivT/LNOAgIPdwXeczsLor28Y1LKJi7BsLj0Fu99oNsgfGfxxUIz/jyXww u13LBe5XIK89FeHDXX1WoOPayn8L8QlmwSS5r+EnDowD5uiQ45ToimanpLPsZvtA kHXYovyYGXZYIxVAhNepmbjj6PauLBZFJ9Rmj0tdnuMFd+6Zcyqn8+83z2U7cUB8 aV76FAzrQyhEqWtltX9BqS+J4zXYrgNnTalUCq3E7dLR4Sfu2dWNg7SC9aku1zfH zn0IbVkA7148tZWt6M5CKOZWVaQUc9CMMmMFYUWxn5Q5ndr+iM1L1EvzDOVRc+LX oh88 -----END CERTIFICATE-----Generated at Sun May 24 12:19:09 2026 by rpki-client