$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48ff6df0-25c3-4248-a931-eaad4b0d44a9.roa File: 48ff6df0-25c3-4248-a931-eaad4b0d44a9.roa (raw, json) Hash identifier: XKIuyzquOs/vPZwp8Jy4Vn0k1XAfBQNG3zFN7qGvtnc= Subject key identifier: 52:43:35:24:84:97:8C:93:AE:D8:7B:FD:26:1B:0F:52:E1:09:66:2C Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 630BD0F98F83EB10EF6DAD845EA995F66D3C5164 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48ff6df0-25c3-4248-a931-eaad4b0d44a9.roa Signing time: Fri 22 May 2026 16:52:11 +0000 ROA not before: Fri 22 May 2026 16:52:11 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da61:9000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:0b:d0:f9:8f:83:eb:10:ef:6d:ad:84:5e:a9:95:f6:6d:3c:51:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 16:52:11 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=06a441c7cbe3c680cef5d06f50be7a6ecf6ce4650636edd26165520e204c615a, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9b:08:e3:0e:2b:96:15:10:0e:27:d9:68:fd: e5:e6:e3:98:78:63:bc:48:fd:29:1b:00:78:df:45: c4:c4:cb:c9:0d:7d:c8:eb:c1:f0:97:c2:45:35:4a: 36:7d:ab:75:cd:27:f9:f5:fd:60:cd:f7:3c:6f:26: e5:92:19:e5:cb:0b:4a:1f:17:43:88:45:8d:69:49: 99:1a:4f:15:3b:91:70:2e:47:c0:9f:36:3e:41:aa: 67:7f:98:e8:75:6c:60:a2:fb:1c:d5:9a:ba:c0:51: 98:df:a4:72:f6:bf:5c:26:1e:be:8d:0c:ad:f0:29: de:c9:bb:df:15:22:cd:0f:07:d2:e1:07:a4:15:1d: 44:d9:eb:de:01:f2:38:60:0b:9b:ca:61:e3:98:0d: c8:28:0f:aa:da:9d:67:42:fc:15:68:4b:7c:9d:3e: 2d:5a:81:75:f3:37:ca:4e:f6:25:f6:43:61:c7:37: cd:e4:6a:ac:eb:32:6e:90:b1:8c:4b:3e:93:e3:4c: 8c:01:d3:10:89:ce:7d:78:68:8b:0e:2f:ee:a4:2d: 8f:cf:a5:b7:b8:74:e3:e7:dc:a7:0e:e2:36:1b:72: 15:a7:05:f7:7e:22:1f:12:fb:25:a8:85:4c:07:cf: 31:76:6c:34:8b:ca:4a:b9:c4:9f:27:86:36:1d:2e: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:35:24:84:97:8C:93:AE:D8:7B:FD:26:1B:0F:52:E1:09:66:2C X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/48ff6df0-25c3-4248-a931-eaad4b0d44a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da61:9000::/40 Signature Algorithm: sha256WithRSAEncryption ac:7c:8f:60:a3:96:47:41:d5:5e:01:13:c1:db:8a:71:86:08: fa:77:0a:a3:4d:f6:a7:4d:3f:ce:6a:e2:b9:e6:c3:69:27:62: cd:c9:44:58:32:fe:64:d7:ee:45:7b:1e:fe:bd:aa:58:1c:6f: 7d:10:82:95:4d:58:0e:63:83:6e:5a:6c:55:50:d5:7b:ec:f2: 63:b4:56:a7:86:35:91:50:c9:c4:1e:84:6e:57:69:6f:b5:38: a1:b8:7f:2d:2d:8a:3f:53:f6:b4:60:aa:62:d4:53:ee:9c:d6: fc:56:91:1d:f9:78:bf:bb:39:0c:cb:a8:50:67:13:be:60:e6: 75:da:4b:50:65:c4:fd:80:c4:50:48:97:a1:e0:82:21:4b:40: 03:ba:0a:af:19:6e:d0:e0:d2:ab:a5:1e:66:cd:15:23:f3:75: 91:cc:d1:be:6d:80:fb:97:bc:96:e7:c4:90:8e:87:d4:69:39: fe:c0:d0:3d:20:18:fa:53:e4:54:63:fb:8c:82:c7:d8:63:57: 4c:97:a3:da:14:4b:88:26:0d:54:79:e2:8b:5f:a3:99:bb:b1: 06:c6:29:43:2a:f4:23:52:95:fd:80:61:ae:ad:4e:fe:d6:fc: ff:af:cd:66:be:bc:0e:58:05:ac:a5:51:7c:74:16:44:0b:c3: 55:2c:83:3d -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUYwvQ+Y+D6xDvba2EXqmV9m08UWQwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE2NTIxMVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAMDZhNDQxYzdjYmUzYzY4MGNlZjVk MDZmNTBiZTdhNmVjZjZjZTQ2NTA2MzZlZGQyNjE2NTUyMGUyMDRjNjE1YTEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5sI4w4rlhUQDifZaP3l5uOYeGO8 SP0pGwB430XExMvJDX3I68Hwl8JFNUo2fat1zSf59f1gzfc8byblkhnlywtKHxdD iEWNaUmZGk8VO5FwLkfAnzY+Qapnf5jodWxgovsc1Zq6wFGY36Ry9r9cJh6+jQyt 8CneybvfFSLNDwfS4QekFR1E2eveAfI4YAubymHjmA3IKA+q2p1nQvwVaEt8nT4t WoF18zfKTvYl9kNhxzfN5Gqs6zJukLGMSz6T40yMAdMQic59eGiLDi/upC2Pz6W3 uHTj59ynDuI2G3IVpwX3fiIfEvslqIVMB88xdmw0i8pKucSfJ4Y2HS4PhQIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFJDNSSEl4yTrth7/SYbD1LhCWYsMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzQ4ZmY2ZGYwLTI1YzMtNDI0OC1hOTMxLWVhYWQ0YjBkNDRhOS5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbaYZAwDQYJKoZIhvcNAQELBQADggEBAKx8j2CjlkdB1V4BE8Hb inGGCPp3CqNN9qdNP85q4rnmw2knYs3JRFgy/mTX7kV7Hv69qlgcb30QgpVNWA5j g25abFVQ1Xvs8mO0VqeGNZFQycQehG5XaW+1OKG4fy0tij9T9rRgqmLUU+6c1vxW kR35eL+7OQzLqFBnE75g5nXaS1BlxP2AxFBIl6HggiFLQAO6Cq8ZbtDg0qulHmbN FSPzdZHM0b5tgPuXvJbnxJCOh9RpOf7A0D0gGPpT5FRj+4yCx9hjV0yXo9oUS4gm DVR54otfo5m7sQbGKUMq9CNSlf2AYa6tTv7W/P+vzWa+vA5YBaylUXx0FkQLw1Us gz0= -----END CERTIFICATE-----Generated at Sun May 24 12:19:09 2026 by rpki-client