$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55cfb97d-5719-4d2f-9454-a1d03ddfef4f.roa File: 55cfb97d-5719-4d2f-9454-a1d03ddfef4f.roa (raw, json) Hash identifier: 1bwv8D8i1Q0plzmcjZd4H90MbuFLXX+FljQ4ol0V07Q= Subject key identifier: 87:46:C5:AA:D9:B0:C1:D4:E2:31:E7:0F:8F:D9:40:2B:2F:7F:41:38 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 78EA37CB6A6E0437C9E72D31271A944F99E0C784 Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55cfb97d-5719-4d2f-9454-a1d03ddfef4f.roa Signing time: Fri 22 May 2026 17:16:40 +0000 ROA not before: Fri 22 May 2026 17:16:40 +0000 ROA not after: Thu 20 Aug 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2406:dae8:c000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 May 2026 17:17:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ea:37:cb:6a:6e:04:37:c9:e7:2d:31:27:1a:94:4f:99:e0:c7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: May 22 17:16:40 2026 GMT Not After : Aug 20 23:59:59 2026 GMT Subject: serialNumber=baf3f086ecd26a4639cf742d1fb9eaeeefcca6c2fbd9a200f7a0c52f38418cf2, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:13:3c:97:55:f5:35:04:d4:11:a1:02:58: e4:a6:7f:7a:ef:6e:4a:f4:ec:9e:7f:3b:5d:1a:5a: 43:b0:1b:ab:90:e5:09:87:6a:ba:9a:6a:d7:99:2b: 8b:7d:51:c5:56:64:d9:1e:74:40:cb:cb:13:d7:b2: 84:b4:cc:a4:b8:10:ef:86:0a:97:29:64:27:4b:be: 53:c4:65:0d:94:39:a1:31:3c:f3:64:7a:df:2d:d3: 59:d3:ff:74:bc:aa:c8:3d:a9:38:85:68:6e:19:35: 46:01:63:d0:a7:5a:4c:95:0c:5d:5a:fe:ad:94:7a: a8:b2:24:dc:a2:2e:86:bd:c2:7a:18:fc:df:15:7b: 0f:43:be:58:53:cc:6a:12:15:5a:10:af:db:7e:03: b8:9f:59:a6:4d:28:32:cb:9a:a5:0b:de:95:e3:02: e6:88:17:dc:fa:b2:7f:d0:fd:15:8b:91:4e:03:59: f0:57:ee:94:1d:91:18:70:e8:3f:66:a1:10:05:20: 4c:10:3d:09:c3:b8:49:f6:46:01:00:78:1c:30:40: 9a:f0:ac:30:eb:58:f7:a8:bc:3b:27:e9:aa:3c:b7: 8b:bc:2c:6e:48:a2:f9:7c:16:7c:66:40:05:94:6b: de:32:b6:60:0a:55:bb:59:b6:ea:3c:fa:7c:a2:92: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:46:C5:AA:D9:B0:C1:D4:E2:31:E7:0F:8F:D9:40:2B:2F:7F:41:38 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/55cfb97d-5719-4d2f-9454-a1d03ddfef4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:dae8:c000::/40 Signature Algorithm: sha256WithRSAEncryption 15:c7:08:ce:65:7a:aa:bb:5f:ca:4d:e1:7b:96:32:45:23:30: ee:c2:00:bc:74:0a:6c:f5:18:ae:69:9f:9e:c7:da:84:92:8b: d7:e2:32:76:29:7f:ce:ec:2a:2e:8b:9e:e3:8d:2e:42:f3:6d: ca:c9:99:a0:3e:f6:13:83:dc:90:dd:e6:3a:53:be:0a:36:d2: e8:74:bd:83:5d:e2:c5:be:0f:17:df:92:59:2d:d6:50:69:aa: 4e:82:7a:08:9a:54:61:c4:8a:c3:36:af:e5:f0:30:8a:3c:2a: 86:5d:39:9a:d6:0b:df:1f:ad:f3:3e:89:c1:6c:f4:a0:fd:42: 1f:be:b9:e7:47:20:6f:42:35:d8:0c:ac:84:50:eb:fd:d6:06: 6c:80:3d:89:ae:05:70:8b:f8:b1:40:c9:21:a2:89:ee:1c:b9: a1:8a:dd:35:2b:5e:26:42:7a:b2:01:3f:7e:be:50:bc:29:bd: 29:27:1b:d2:f0:be:2b:87:b7:9a:79:e1:bc:e4:16:37:c8:a7: 25:98:34:c3:cf:66:2b:0f:55:cc:6f:c4:17:9a:39:fb:4b:eb: 28:30:78:7b:e8:54:61:3a:61:f1:93:56:ca:42:5a:d3:fe:fc: 59:82:52:58:13:1e:f4:7d:a5:ff:f0:2a:9a:86:c9:cc:2c:95: 5b:3d:91:46 -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgIUeOo3y2puBDfJ5y0xJxqUT5ngx4QwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI2MDUyMjE3MTY0MFoX DTI2MDgyMDIzNTk1OVowejFJMEcGA1UEBRNAYmFmM2YwODZlY2QyNmE0NjM5Y2Y3 NDJkMWZiOWVhZWVlZmNjYTZjMmZiZDlhMjAwZjdhMGM1MmYzODQxOGNmMjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb4TPJdV9TUE1BGhAljkpn96725K 9OyefztdGlpDsBurkOUJh2q6mmrXmSuLfVHFVmTZHnRAy8sT17KEtMykuBDvhgqX KWQnS75TxGUNlDmhMTzzZHrfLdNZ0/90vKrIPak4hWhuGTVGAWPQp1pMlQxdWv6t lHqosiTcoi6GvcJ6GPzfFXsPQ75YU8xqEhVaEK/bfgO4n1mmTSgyy5qlC96V4wLm iBfc+rJ/0P0Vi5FOA1nwV+6UHZEYcOg/ZqEQBSBMED0Jw7hJ9kYBAHgcMECa8Kww 61j3qLw7J+mqPLeLvCxuSKL5fBZ8ZkAFlGveMrZgClW7WbbqPPp8opIjnwIDAQAB o4ICSjCCAkYwHQYDVR0OBBYEFIdGxarZsMHU4jHnD4/ZQCsvf0E4MB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzU1Y2ZiOTdkLTU3MTktNGQyZi05NDU0LWExZDAzZGRmZWY0Zi5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAO BAIAAjAIAwYAJAba6MAwDQYJKoZIhvcNAQELBQADggEBABXHCM5leqq7X8pN4XuW MkUjMO7CALx0Cmz1GK5pn57H2oSSi9fiMnYpf87sKi6LnuONLkLzbcrJmaA+9hOD 3JDd5jpTvgo20uh0vYNd4sW+Dxffklkt1lBpqk6CegiaVGHEisM2r+XwMIo8KoZd OZrWC98frfM+icFs9KD9Qh++uedHIG9CNdgMrIRQ6/3WBmyAPYmuBXCL+LFAySGi ie4cuaGK3TUrXiZCerIBP36+ULwpvSknG9LwviuHt5p54bzkFjfIpyWYNMPPZisP VcxvxBeaOftL6ygweHvoVGE6YfGTVspCWtP+/FmCUlgTHvR9pf/wKpqGycwslVs9 kUY= -----END CERTIFICATE-----Generated at Sun May 24 12:18:41 2026 by rpki-client