$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa File: 4f190963-16ca-4ba3-9370-65813f5adc68.roa (raw, json) Hash identifier: Xs2rW2uBYODZBRl1bExw7pF9GvqsmgDc2zWJnsGSy68= Subject key identifier: 7C:75:2B:0A:08:96:31:C4:08:8A:07:21:CE:B0:60:AA:DD:75:B8:7D Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 4D7A708B35518FA90E698C355FBF8B31B1D939FB Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa Signing time: Wed 13 May 2026 00:00:41 +0000 ROA not before: Wed 13 May 2026 00:00:41 +0000 ROA not after: Tue 11 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dab9:2000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:7a:70:8b:35:51:8f:a9:0e:69:8c:35:5f:bf:8b:31:b1:d9:39:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 13 00:00:41 2026 GMT Not After : Aug 11 23:59:59 2026 GMT Subject: serialNumber=6582e0993408b44cbf4874049d1c2be57f119717a2caba2740f26c5aaecd0ed3, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:b7:11:3f:d8:2d:12:c4:20:4d:b2:aa:02: 9b:42:1a:a6:fc:81:60:13:98:f1:24:79:da:ec:e2: 14:35:14:43:32:db:15:c6:ba:f1:58:85:d3:3b:52: 39:fe:12:35:db:6d:47:29:7e:f1:b8:df:e3:c9:3a: 78:3b:7b:cc:56:36:74:52:74:c7:79:d2:a9:46:f7: 71:d5:86:fc:f1:b8:9f:76:04:6e:b3:98:f2:67:31: 52:7a:8f:65:15:3d:dd:f8:ca:7a:58:34:af:59:1e: 31:5a:23:1c:1a:74:c3:65:1b:32:34:79:de:ea:d5: 0a:10:f0:6e:56:36:73:e6:51:7c:c5:bf:72:22:02: 76:57:cd:8a:a9:d6:65:98:a9:d2:41:ea:4c:bb:39: d0:3c:7f:68:5f:f9:37:af:e1:63:5a:79:ba:a1:9e: 60:e6:c4:b5:ba:3c:b7:d4:a6:61:87:70:73:e3:5e: 20:4a:25:41:55:51:93:18:39:e4:6c:08:f8:99:f8: 23:14:c9:62:86:eb:68:36:0a:05:c3:f4:26:d6:41: 4a:06:89:d5:8f:4a:d8:43:42:7f:16:a8:2a:e0:bb: f3:1b:5b:c8:88:1d:63:fa:7d:1a:3c:fb:e5:dd:a9: 08:fb:0d:66:d5:f7:dd:c4:6b:a2:01:7e:b4:5c:7e: 9e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:75:2B:0A:08:96:31:C4:08:8A:07:21:CE:B0:60:AA:DD:75:B8:7D X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f190963-16ca-4ba3-9370-65813f5adc68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dab9:2000::/40 Signature Algorithm: sha256WithRSAEncryption 45:54:97:fd:7c:c0:02:ce:97:e9:1b:c3:41:ff:78:e7:31:68: 5d:c1:72:ca:3f:d5:da:3f:74:bd:6c:61:7f:a1:d1:99:6b:9a: 3b:11:24:e9:de:29:8b:87:21:2b:19:e7:2c:b5:83:54:ac:50: a6:24:e4:7a:7f:42:96:d6:5d:11:8f:93:00:24:3d:1e:00:e9: fa:4b:9e:b0:2f:33:cc:3f:9e:77:29:c6:aa:ab:ea:7c:d5:27: 7d:0f:60:b7:b4:28:67:00:1c:5f:a3:bc:82:0d:9b:d1:7c:bd: 08:6e:15:46:a9:a5:13:00:7d:d1:9a:31:6b:84:97:96:46:ff: 1d:28:02:a9:df:93:b8:bf:ba:19:dd:69:95:63:10:2d:de:aa: a9:bb:c8:b1:e6:3f:50:07:98:06:8a:36:2b:20:fa:be:ab:b9: ea:c9:29:e6:91:eb:c5:5e:38:c9:18:a4:e0:d0:e4:b9:fd:81: 54:5f:0e:2e:63:2b:c5:f6:e2:a4:e0:fa:af:01:0f:f8:38:78: 62:51:83:49:21:69:b4:c2:3a:11:a5:5a:bc:65:46:cb:f6:1a: 1e:2e:ba:89:1a:b4:a0:f3:35:7e:0c:c9:45:2d:a7:63:4c:5b: 5c:d9:ec:b3:08:4e:0d:49:47:da:ed:eb:71:3f:46:37:6d:ef: b4:9b:84:9a -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUTXpwizVRj6kOaYw1X7+LMbHZOfswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUxMzAwMDA0MVoX DTI2MDgxMTIzNTk1OVowejFJMEcGA1UEBRNANjU4MmUwOTkzNDA4YjQ0Y2JmNDg3 NDA0OWQxYzJiZTU3ZjExOTcxN2EyY2FiYTI3NDBmMjZjNWFhZWNkMGVkMzEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfO3ET/YLRLEIE2yqgKbQhqm/IFg E5jxJHna7OIUNRRDMtsVxrrxWIXTO1I5/hI1221HKX7xuN/jyTp4O3vMVjZ0UnTH edKpRvdx1Yb88bifdgRus5jyZzFSeo9lFT3d+Mp6WDSvWR4xWiMcGnTDZRsyNHne 6tUKEPBuVjZz5lF8xb9yIgJ2V82KqdZlmKnSQepMuznQPH9oX/k3r+FjWnm6oZ5g 5sS1ujy31KZhh3Bz414gSiVBVVGTGDnkbAj4mfgjFMlihutoNgoFw/Qm1kFKBonV j0rYQ0J/Fqgq4LvzG1vIiB1j+n0aPPvl3akI+w1m1ffdxGuiAX60XH6e/wIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFHx1KwoIljHECIoHIc6wYKrddbh9MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmMTkwOTYzLTE2Y2EtNGJhMy05MzcwLTY1ODEzZjVhZGM2OC5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAbauSAwDQYJKoZIhvcNAQELBQADggEBAEVUl/18wALOl+kbw0H/ eOcxaF3Bcso/1do/dL1sYX+h0ZlrmjsRJOneKYuHISsZ5yy1g1SsUKYk5Hp/QpbW XRGPkwAkPR4A6fpLnrAvM8w/nncpxqqr6nzVJ30PYLe0KGcAHF+jvIINm9F8vQhu FUappRMAfdGaMWuEl5ZG/x0oAqnfk7i/uhndaZVjEC3eqqm7yLHmP1AHmAaKNisg +r6ruerJKeaR68VeOMkYpODQ5Ln9gVRfDi5jK8X24qTg+q8BD/g4eGJRg0khabTC OhGlWrxlRsv2Gh4uuokatKDzNX4MyUUtp2NMW1zZ7LMITg1JR9rt63E/Rjdt77Sb hJo= -----END CERTIFICATE-----Generated at Sat May 30 04:07:32 2026 by rpki-client