$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e9cfc3a-9671-4cff-90bc-44df7670a95c.roa File: 4e9cfc3a-9671-4cff-90bc-44df7670a95c.roa (raw, json) Hash identifier: yW5kKuvTB+bvJEWk7rloMhhFNNHIESvqKqQVnGASLkg= Subject key identifier: F6:E4:51:64:8F:F0:50:1B:D8:DD:2A:8D:1A:62:99:9A:3F:05:C3:CD Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 39A0C2E72B6E14C2217B5EC17B2E19CB2241D855 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e9cfc3a-9671-4cff-90bc-44df7670a95c.roa Signing time: Fri 22 May 2026 17:16:41 +0000 ROA not before: Fri 22 May 2026 17:16:41 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:c800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:a0:c2:e7:2b:6e:14:c2:21:7b:5e:c1:7b:2e:19:cb:22:41:d8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:16:41 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=5e74ebd52bccfd0f589f19e7d1b5f27f52ec25d6a5b8006bb370907a08fee983, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:56:84:da:7a:56:d7:67:86:d0:f8:59:db:a2: d8:9b:d7:ad:cb:60:fa:4e:4c:ee:37:21:e2:59:f9: c3:a2:cc:e4:c3:37:fe:92:c6:1a:08:14:5f:a4:0e: 93:89:79:93:5e:fe:4a:34:7e:94:77:bc:16:7e:2f: 51:85:49:cb:54:53:48:cb:4c:68:ce:05:44:ed:2f: 01:b1:10:73:64:c5:de:13:b0:07:f5:ee:6d:bc:a2: 9b:a6:48:32:84:42:55:6d:a1:2c:17:49:ff:a5:6a: fe:e1:92:1c:13:22:14:da:08:4d:e5:95:d3:ea:27: 91:21:5a:07:b5:3c:fe:cc:29:4a:75:ab:67:3d:3a: e1:88:e7:71:15:2e:71:20:43:21:96:59:ee:7c:c2: 15:89:08:30:56:83:16:32:33:89:b6:54:6d:7a:a1: 4d:32:75:16:2d:0d:68:a2:bf:e9:ee:9e:4d:72:6d: 36:98:20:2f:58:91:91:bf:a8:94:dd:59:fa:83:79: 50:2d:1d:33:ef:f5:94:2f:cb:9e:83:49:fa:31:ab: 87:93:6c:f2:34:a7:5e:30:a0:88:80:a6:2b:35:ec: ee:cb:ad:67:14:0d:69:b7:56:4d:78:d0:6b:8f:74: e5:47:c0:6c:a2:65:d9:c0:77:75:51:8b:1b:35:e7: 59:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E4:51:64:8F:F0:50:1B:D8:DD:2A:8D:1A:62:99:9A:3F:05:C3:CD X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4e9cfc3a-9671-4cff-90bc-44df7670a95c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:c800::/40 Signature Algorithm: sha256WithRSAEncryption 6e:48:8f:c9:c3:39:d6:14:85:98:6a:8b:cb:fd:1b:bb:8c:d1: f9:41:ba:16:39:01:35:f7:6a:b0:61:cc:94:b4:60:6b:fc:c6: 7f:4a:99:10:8d:51:be:65:fd:0c:39:ee:32:0d:58:f5:cc:27: 40:0b:e1:d1:ec:ed:0a:ba:ad:b6:66:91:47:03:c8:c7:00:91: ba:30:c3:ca:cf:cb:34:95:4d:e1:26:91:ef:1d:dc:77:19:4f: b0:37:5e:ce:fb:f9:a8:b1:cd:c0:e2:3f:a3:16:b4:d3:cb:6f: d9:5d:a4:48:d5:3e:d5:c7:26:45:3d:03:61:d9:80:0b:7b:83: f9:2c:37:f3:52:f5:19:73:d4:84:12:c9:50:c7:08:0c:29:12: f9:38:49:3d:93:10:e8:28:6e:ef:9a:cf:82:71:8a:d5:a7:69: df:8b:55:ca:2b:72:c7:63:be:1f:de:23:0d:30:9d:b0:d1:ef: 60:7e:b5:08:bf:86:a2:82:5a:a1:dc:67:25:0a:49:87:5f:f7: 0b:48:4a:85:78:7c:cd:32:ca:7b:3f:99:15:79:51:97:70:5a: 07:8a:b1:22:fd:e0:10:fe:80:b8:51:63:e3:1c:18:12:de:63: e2:02:23:a4:8a:09:f9:cb:8a:b8:0e:9b:be:6e:00:ba:6d:47: 44:f8:17:b6 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUOaDC5ytuFMIhe17Bey4ZyyJB2FUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MTY0MVoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNANWU3NGViZDUyYmNjZmQwZjU4OWYx OWU3ZDFiNWYyN2Y1MmVjMjVkNmE1YjgwMDZiYjM3MDkwN2EwOGZlZTk4MzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VaE2npW12eG0PhZ26LYm9ety2D6 TkzuNyHiWfnDoszkwzf+ksYaCBRfpA6TiXmTXv5KNH6Ud7wWfi9RhUnLVFNIy0xo zgVE7S8BsRBzZMXeE7AH9e5tvKKbpkgyhEJVbaEsF0n/pWr+4ZIcEyIU2ghN5ZXT 6ieRIVoHtTz+zClKdatnPTrhiOdxFS5xIEMhllnufMIViQgwVoMWMjOJtlRteqFN MnUWLQ1oor/p7p5Ncm02mCAvWJGRv6iU3Vn6g3lQLR0z7/WUL8ueg0n6MauHk2zy NKdeMKCIgKYrNezuy61nFA1pt1ZNeNBrj3TlR8BsomXZwHd1UYsbNedZZwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFPbkUWSP8FAb2N0qjRpimZo/BcPNMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRlOWNmYzNhLTk2NzEtNGNmZi05MGJjLTQ0ZGY3NjcwYTk1Yy5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6MgwDQYJKoZIhvcNAQELBQADggEBAG5Ij8nDOdYUhZhqi8v9 G7uM0flBuhY5ATX3arBhzJS0YGv8xn9KmRCNUb5l/Qw57jINWPXMJ0AL4dHs7Qq6 rbZmkUcDyMcAkboww8rPyzSVTeEmke8d3HcZT7A3Xs77+aixzcDiP6MWtNPLb9ld pEjVPtXHJkU9A2HZgAt7g/ksN/NS9Rlz1IQSyVDHCAwpEvk4ST2TEOgobu+az4Jx itWnad+LVcorcsdjvh/eIw0wnbDR72B+tQi/hqKCWqHcZyUKSYdf9wtISoV4fM0y yns/mRV5UZdwWgeKsSL94BD+gLhRY+McGBLeY+ICI6SKCfnLirgOm75uALptR0T4 F7Y= -----END CERTIFICATE-----Generated at Sun May 24 12:18:54 2026 by rpki-client