$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa File: 4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa (raw, json) Hash identifier: w3rl+sB5yyI3XFLk4TWbgljrNq+RW1BuEwYssTgTvhw= Subject key identifier: 55:AB:C3:0E:8C:8D:54:0E:FC:C9:48:F5:EA:99:A2:A7:C0:00:19:E4 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 7A6868FF906BA908BF1CE5ED80A3F8A6B1774ACE Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa Signing time: Mon 27 Apr 2026 00:00:36 +0000 ROA not before: Mon 27 Apr 2026 00:00:36 +0000 ROA not after: Sun 26 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:da28:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 May 2026 00:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:68:68:ff:90:6b:a9:08:bf:1c:e5:ed:80:a3:f8:a6:b1:77:4a:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 27 00:00:36 2026 GMT Not After : Jul 26 23:59:59 2026 GMT Subject: serialNumber=2717684929c23f567efa3cdf115a7771c787fa76f4fa96d0df2cc708397d11db, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1d:8a:f3:c2:38:fe:9e:cf:4f:2e:65:11:53: df:38:ff:f7:14:5f:55:f7:28:70:6c:a2:05:64:c6: 2e:05:37:fe:de:4d:1c:1d:c5:d8:41:a5:f3:49:bc: ea:e7:35:29:5d:8d:05:55:fe:51:3a:c1:79:a8:30: 23:ac:a6:2d:44:53:24:1a:e3:ba:94:48:0b:44:e2: 37:8d:85:1e:8e:d3:af:ce:02:24:4a:3b:43:a2:87: 2e:20:5a:e1:79:28:5b:4c:6c:be:87:f6:cf:d2:d3: 88:9c:7c:db:1f:54:cb:08:4e:05:8e:0e:22:d2:87: 17:83:4d:29:39:66:20:90:1f:17:f1:83:fe:de:6d: 05:b1:d2:1a:b8:85:4d:d2:e0:2e:5e:0c:1d:7a:38: 39:6b:e8:7e:80:4c:2f:42:68:37:45:09:31:2a:12: 54:96:34:b7:42:2e:59:f6:42:2b:cf:10:e4:95:94: fb:0c:68:13:77:39:5a:61:b3:cb:ea:5e:ec:07:74: 5f:f9:22:ca:ee:dc:0b:c4:70:f8:d1:62:de:b8:dd: 26:5a:b4:91:d1:a3:23:00:a0:df:83:7c:f8:2c:3d: 02:30:39:01:5f:ec:5f:d9:aa:d1:d8:6b:d9:6c:6d: 8a:79:18:fa:e0:ef:ad:90:6c:bb:b2:d7:6b:3e:3b: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AB:C3:0E:8C:8D:54:0E:FC:C9:48:F5:EA:99:A2:A7:C0:00:19:E4 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/4f3b60eb-56a9-47ae-9183-268d07b9ce96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:da28:8000::/36 Signature Algorithm: sha256WithRSAEncryption 88:0a:a6:f4:46:ee:1f:ec:2a:81:ca:ff:03:1c:a9:f6:d3:9d: f5:f8:77:e4:62:24:5c:a8:9d:d1:6e:82:ab:08:28:ba:1e:93: c2:72:b9:da:e1:bb:09:32:6d:1e:0e:a8:3e:c9:8c:74:48:fd: fc:5d:fa:c0:73:c2:29:d5:b7:a6:bd:0b:83:6e:3e:22:0f:b7: 06:3a:65:0c:fb:3c:13:b9:0f:66:cb:d1:7c:9f:60:4f:4b:63: 92:c3:e7:9f:22:a5:fa:9d:5c:90:5f:52:a7:9c:79:25:b3:9a: fa:c9:97:1e:ab:f1:a1:a9:2f:25:5d:f3:bc:4f:80:94:88:09: fb:06:33:5a:7f:af:df:c6:ec:aa:61:79:07:70:89:7f:a9:c5: 24:3a:5d:06:73:47:7e:ce:ee:17:d6:18:96:2f:5f:58:77:2a: a2:c6:dd:cb:74:74:9a:2f:cb:1c:e6:a0:7e:aa:13:a9:85:d2: 3c:3c:18:82:e1:6d:ff:33:db:ef:e9:c7:cb:60:0a:44:65:75: 96:f1:ed:34:b5:26:fa:8d:ea:f5:7f:02:af:df:f5:1e:97:12: 7a:ed:73:f7:a1:2f:13:5f:de:8b:db:ee:21:4d:ef:69:c4:d0: 8b:26:57:0d:01:15:4f:19:50:1f:77:2e:27:6c:38:aa:aa:0b: 0e:e1:15:48 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUemho/5BrqQi/HOXtgKP4prF3Ss4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDQyNzAwMDAzNloX DTI2MDcyNjIzNTk1OVowejFJMEcGA1UEBRNAMjcxNzY4NDkyOWMyM2Y1NjdlZmEz Y2RmMTE1YTc3NzFjNzg3ZmE3NmY0ZmE5NmQwZGYyY2M3MDgzOTdkMTFkYjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx2K88I4/p7PTy5lEVPfOP/3FF9V 9yhwbKIFZMYuBTf+3k0cHcXYQaXzSbzq5zUpXY0FVf5ROsF5qDAjrKYtRFMkGuO6 lEgLROI3jYUejtOvzgIkSjtDoocuIFrheShbTGy+h/bP0tOInHzbH1TLCE4Fjg4i 0ocXg00pOWYgkB8X8YP+3m0FsdIauIVN0uAuXgwdejg5a+h+gEwvQmg3RQkxKhJU ljS3Qi5Z9kIrzxDklZT7DGgTdzlaYbPL6l7sB3Rf+SLK7twLxHD40WLeuN0mWrSR 0aMjAKDfg3z4LD0CMDkBX+xf2arR2GvZbG2KeRj64O+tkGy7stdrPjtvywIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFFWrww6MjVQO/MlI9eqZoqfAABnkMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzRmM2I2MGViLTU2YTktNDdhZS05MTgzLTI2OGQwN2I5Y2U5Ni5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYEJAbaKIAwDQYJKoZIhvcNAQELBQADggEBAIgKpvRG7h/sKoHK/wMc qfbTnfX4d+RiJFyondFugqsIKLoek8JyudrhuwkybR4OqD7JjHRI/fxd+sBzwinV t6a9C4NuPiIPtwY6ZQz7PBO5D2bL0XyfYE9LY5LD558ipfqdXJBfUqeceSWzmvrJ lx6r8aGpLyVd87xPgJSICfsGM1p/r9/G7KpheQdwiX+pxSQ6XQZzR37O7hfWGJYv X1h3KqLG3ct0dJovyxzmoH6qE6mF0jw8GILhbf8z2+/px8tgCkRldZbx7TS1JvqN 6vV/Aq/f9R6XEnrtc/ehLxNf3ovb7iFN72nE0IsmVw0BFU8ZUB93LidsOKqqCw7h FUg= -----END CERTIFICATE-----Generated at Sun May 3 15:23:54 2026 by rpki-client